$ rpki-client -vvf krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: bE/s0d/dK44+J8HeJV1CEUVxiY5sEnOi3Lfhk+iNubU= Subject key identifier: C0:FC:9A:27:1D:72:D7:0D:8E:5D:8E:30:76:5B:32:20:F2:86:87:10 Certificate issuer: /CN=3C63FBDA23EE1D2BFADB806544E553DDBA294ACF Certificate serial: 275A65E9CEF5A135D636E46E09D2274960134B6B Authority key identifier: 3C:63:FB:DA:23:EE:1D:2B:FA:DB:80:65:44:E5:53:DD:BA:29:4A:CF Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer Subject info access: rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa Signing time: Wed 04 Jun 2025 16:13:52 +0000 ROA not before: Wed 04 Jun 2025 16:08:52 +0000 ROA not after: Wed 03 Jun 2026 16:13:52 +0000 asID: 24381 IP address blocks: 2401:2060:b001::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.crl rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 23:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5a:65:e9:ce:f5:a1:35:d6:36:e4:6e:09:d2:27:49:60:13:4b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C63FBDA23EE1D2BFADB806544E553DDBA294ACF Validity Not Before: Jun 4 16:08:52 2025 GMT Not After : Jun 3 16:13:52 2026 GMT Subject: CN=C0FC9A271D72D70D8E5D8E30765B3220F2868710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:b9:03:21:cd:fb:ac:96:1a:4e:85:02:07: 78:a2:48:41:fc:ec:37:fe:85:55:8c:45:33:b5:80: b8:5d:32:13:83:14:a4:08:db:4d:10:3c:ad:a7:ba: 76:32:3f:54:2d:c5:83:77:84:f9:8b:0f:b4:b7:47: 8c:14:fa:ee:62:96:36:41:52:bc:bb:67:e5:d5:c6: 4d:01:05:9f:bf:8c:33:ec:bc:d6:20:33:b1:d3:96: 5b:95:b3:ba:76:79:c9:0f:ac:43:ba:03:de:43:cb: ac:24:bb:66:4e:91:11:83:79:cb:ce:4e:65:1d:7b: 6f:ee:57:24:94:f1:56:08:81:88:6a:10:26:3f:e0: 41:66:10:f9:2e:78:6c:64:e8:79:fa:a9:73:ad:21: 90:4b:24:d3:54:8f:98:b0:d0:3b:62:28:39:68:df: 1e:0c:1b:2a:3b:d6:b9:68:90:1c:9c:0d:ca:d0:4c: 19:d0:31:1c:e8:44:7f:37:6c:fa:f7:11:5a:ed:31: 99:05:10:99:94:9c:8a:e3:8c:1c:e4:8b:47:fb:54: e7:e4:e0:dd:df:2e:7e:54:c3:7c:52:f9:86:57:5c: 00:f2:91:bb:e6:d0:88:61:c5:7c:c3:cc:48:f7:94: 7d:83:1c:7e:7d:89:f3:a2:3f:5b:bb:10:de:55:bd: 57:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FC:9A:27:1D:72:D7:0D:8E:5D:8E:30:76:5B:32:20:F2:86:87:10 X509v3 Authority Key Identifier: keyid:3C:63:FB:DA:23:EE:1D:2B:FA:DB:80:65:44:E5:53:DD:BA:29:4A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer Subject Information Access: Signed Object - URI:rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b001::/48 Signature Algorithm: sha256WithRSAEncryption 28:4f:22:06:50:9d:2d:2b:4d:55:d0:08:42:b8:2d:ba:1b:0b: 1e:eb:06:08:7b:22:69:81:ef:15:cf:7e:e9:8e:25:e1:3a:02: 9b:9c:78:6d:d2:50:91:f9:30:b8:c6:1a:1b:d3:da:1f:de:03: cf:ff:7a:6e:8c:e8:06:d6:02:d0:4e:b1:34:c0:1b:4f:15:b2: 80:b9:f6:44:18:57:81:21:98:71:ff:cd:9b:04:bd:fc:89:e6: 9c:d0:e9:18:fe:91:d4:9c:0b:32:51:42:5b:ae:f4:44:bf:90: be:8f:58:11:cf:78:ce:3c:8b:4a:fb:88:7e:8a:1a:ad:4a:46: e7:e3:aa:1e:cf:b6:36:d2:62:d9:d7:1d:86:af:ed:f7:6a:8f: 46:bf:36:7e:b3:2f:db:c6:96:98:03:01:fb:25:c2:8a:e8:01: 64:a0:d1:ff:b8:0c:12:7b:ae:fb:ac:7b:80:fe:80:1b:6e:28: 3d:b5:a1:72:25:18:2b:af:a4:6a:ff:dc:a8:f7:32:6a:bd:c2: f1:f7:6e:7d:78:de:c2:5d:54:a8:23:e3:72:2e:bf:67:1c:cd: d9:70:98:7a:d7:df:ee:07:d5:95:a6:fe:51:9e:f6:9b:b5:ad: c9:33:66:26:b7:d9:a5:fd:97:7b:4d:a8:07:fe:23:3f:9c:20: 37:37:9a:a8 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUJ1pl6c71oTXWNuRuCdInSWATS2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2M0ZCREEyM0VFMUQyQkZBREI4MDY1NDRFNTUzRERC QTI5NEFDRjAeFw0yNTA2MDQxNjA4NTJaFw0yNjA2MDMxNjEzNTJaMDMxMTAvBgNV BAMTKEMwRkM5QTI3MUQ3MkQ3MEQ4RTVEOEUzMDc2NUIzMjIwRjI4Njg3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrrkDIc37rJYaToUCB3iiSEH8 7Df+hVWMRTO1gLhdMhODFKQI200QPK2nunYyP1QtxYN3hPmLD7S3R4wU+u5iljZB Ury7Z+XVxk0BBZ+/jDPsvNYgM7HTlluVs7p2eckPrEO6A95Dy6wku2ZOkRGDecvO TmUde2/uVySU8VYIgYhqECY/4EFmEPkueGxk6Hn6qXOtIZBLJNNUj5iw0DtiKDlo 3x4MGyo71rlokBycDcrQTBnQMRzoRH83bPr3EVrtMZkFEJmUnIrjjBzki0f7VOfk 4N3fLn5Uw3xS+YZXXADykbvm0IhhxXzDzEj3lH2DHH59ifOiP1u7EN5VvVdbAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQUwPyaJx1y1w2OXY4wdlsyIPKGhxAwHwYDVR0j BBgwFoAUPGP72iPuHSv624BlROVT3bopSs8wDgYDVR0PAQH/BAQDAgeAMHcGA1Ud HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuc3lkLWF1LmluZmluaW5ldC5jb20u YXUvcmVwby9CR1AtRXhjaGFuZ2UvMC8zQzYzRkJEQTIzRUUxRDJCRkFEQjgwNjU0 NEU1NTNEREJBMjk0QUNGLmNybDB9BggrBgEFBQcBAQRxMG8wbQYIKwYBBQUHMAKG YXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxNTBFNEQw MDAwLzAvM0M2M0ZCREEyM0VFMUQyQkZBREI4MDY1NDRFNTUzRERCQTI5NEFDRi5j ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9rcmls bC5zeWQtYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNoYW5nZS8wLzMy MzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLABMA0GCSqGSIb3DQEBCwUAA4IB AQAoTyIGUJ0tK01V0AhCuC26Gwse6wYIeyJpge8Vz37pjiXhOgKbnHht0lCR+TC4 xhob09of3gPP/3pujOgG1gLQTrE0wBtPFbKAufZEGFeBIZhx/82bBL38ieac0OkY /pHUnAsyUUJbrvREv5C+j1gRz3jOPItK+4h+ihqtSkbn46oez7Y20mLZ1x2Gr+33 ao9GvzZ+sy/bxpaYAwH7JcKK6AFkoNH/uAwSe677rHuA/oAbbig9taFyJRgrr6Rq /9yo9zJqvcLx9259eN7CXVSoI+NyLr9nHM3ZcJh619/uB9WVpv5Rnvabta3JM2Ym t9ml/Zd7TagH/iM/nCA3N5qo -----END CERTIFICATE-----Generated at Mon Jun 16 11:42:40 2025 by rpki-client