$ rpki-client -vvf repo.nkn.in/repo/PDNS/0/3130332e36362e3135362e302f32322d3234203d3e203539313832.roa File: 3130332e36362e3135362e302f32322d3234203d3e203539313832.roa (raw, json) Hash identifier: 2kNY2J/bNUioX97b3C4h3fYPZCG5WqZQbSZ7z5McE7I= Subject key identifier: F7:34:AF:64:7B:6F:5A:8A:61:04:11:49:B2:1A:EC:D7:51:2C:EF:6D Certificate issuer: /CN=B9262144237A3404C105DA97D69318D9BE295E42 Certificate serial: 52181B9B49987AC7165158DD510219FA709CDA4A Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42 Authority info access: rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer Subject info access: rsync://repo.nkn.in/repo/PDNS/0/3130332e36362e3135362e302f32322d3234203d3e203539313832.roa Signing time: Tue 11 Aug 2026 10:06:26 +0000 ROA not before: Tue 11 Aug 2026 10:01:26 +0000 ROA not after: Tue 10 Aug 2027 10:06:26 +0000 asID: 59182 IP address blocks: 103.66.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 02:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:18:1b:9b:49:98:7a:c7:16:51:58:dd:51:02:19:fa:70:9c:da:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42 Validity Not Before: Aug 11 10:01:26 2026 GMT Not After : Aug 10 10:06:26 2027 GMT Subject: CN=F734AF647B6F5A8A61041149B21AECD7512CEF6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:e7:c0:33:7a:4d:42:6a:04:23:35:bc:88: 8d:88:4f:4d:da:b3:09:11:85:01:05:4d:ad:f0:f8: c0:12:ba:1c:71:10:91:06:4b:bd:41:43:a5:19:b8: 65:aa:65:3b:63:a7:a7:5d:5b:68:ef:25:44:b5:59: 4e:a4:19:96:e3:2c:63:1d:03:35:47:d6:3a:bf:76: 77:6f:81:89:03:24:a6:4c:a0:24:93:9b:39:e9:56: 73:d0:31:5f:83:23:cf:5d:56:1a:fe:22:fa:7b:55: ba:49:7f:98:ae:2f:f3:4f:e9:82:46:86:f8:ff:1a: 69:be:27:2b:7b:af:6c:c3:2a:04:3a:49:04:4c:4e: f4:bb:8d:cd:42:28:20:63:4f:99:2e:fc:e3:54:b6: 52:42:30:a4:a6:d9:3f:50:41:a3:98:32:10:47:fb: ce:0f:d1:92:5e:28:ec:2b:e4:8f:b0:a8:a1:e9:0f: 41:b2:3b:5a:11:3a:48:fe:cf:f9:90:6c:ca:7d:72: 54:12:83:c4:98:19:42:39:24:8d:26:cc:9d:f7:4c: 62:5f:68:7c:52:52:cd:62:12:bc:ae:6f:8a:97:a1: 62:22:7e:72:bb:cb:f9:ca:7b:e8:ca:e3:f8:5c:42: 16:57:5b:45:fd:c8:13:00:0c:b8:33:9d:b7:ed:33: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:34:AF:64:7B:6F:5A:8A:61:04:11:49:B2:1A:EC:D7:51:2C:EF:6D X509v3 Authority Key Identifier: keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl Authority Information Access: CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer Subject Information Access: Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/3130332e36362e3135362e302f32322d3234203d3e203539313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.156.0/22 Signature Algorithm: sha256WithRSAEncryption 71:4c:1c:17:8a:7f:3e:4a:72:c8:d4:02:19:69:77:5f:f6:68: ad:02:53:93:d3:06:37:e9:5c:8a:98:21:21:77:4a:6e:af:29: 3b:64:10:fa:1c:df:ac:2b:b5:be:d7:04:9a:a4:d3:4e:b4:b8: e9:f9:52:37:3c:3e:65:09:eb:80:15:a0:b9:c2:53:f3:0f:af: 6d:61:27:bd:40:40:cc:a5:51:b7:be:e7:f3:92:ea:ff:97:c8: 72:38:fa:5d:27:9f:f9:bb:57:6c:3d:b7:42:ae:58:4c:d5:7c: 1c:6e:3e:17:b8:36:de:67:21:a7:58:6d:3b:f2:5d:80:61:66: 6f:ac:ff:24:65:cf:da:6a:34:23:8c:5c:6c:d9:52:5b:40:20: 85:27:00:9a:ea:71:7f:24:af:c8:e8:4a:1b:e8:40:ec:a9:66: 1e:1d:70:3c:16:af:a7:74:b7:01:1b:1e:cb:35:fa:10:c3:3c: f6:43:db:64:37:fc:d8:4c:c4:b3:99:0e:98:b3:e1:98:72:e1: a9:3e:63:3e:c1:79:43:d6:1d:21:5b:20:ab:88:5b:4a:94:4c: bc:eb:02:b3:0e:3b:92:d4:b8:4e:5f:a5:4c:b9:0b:c7:76:db: 07:6d:b2:a9:e1:eb:69:ee:a4:c4:83:2e:89:97:ff:f3:74:ab: 99:f9:b4:b8 -----BEGIN CERTIFICATE----- MIIExjCCA66gAwIBAgIUUhgbm0mYescWUVjdUQIZ+nCc2kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyNjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlC RTI5NUU0MjAeFw0yNjA4MTExMDAxMjZaFw0yNzA4MTAxMDA2MjZaMDMxMTAvBgNV BAMTKEY3MzRBRjY0N0I2RjVBOEE2MTA0MTE0OUIyMUFFQ0Q3NTEyQ0VGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXB+fAM3pNQmoEIzW8iI2IT03a swkRhQEFTa3w+MASuhxxEJEGS71BQ6UZuGWqZTtjp6ddW2jvJUS1WU6kGZbjLGMd AzVH1jq/dndvgYkDJKZMoCSTmznpVnPQMV+DI89dVhr+Ivp7VbpJf5iuL/NP6YJG hvj/Gmm+Jyt7r2zDKgQ6SQRMTvS7jc1CKCBjT5ku/ONUtlJCMKSm2T9QQaOYMhBH +84P0ZJeKOwr5I+wqKHpD0GyO1oROkj+z/mQbMp9clQSg8SYGUI5JI0mzJ33TGJf aHxSUs1iEryub4qXoWIifnK7y/nKe+jK4/hcQhZXW0X9yBMADLgznbftM5qhAgMB AAGjggHQMIIBzDAdBgNVHQ4EFgQU9zSvZHtvWophBBFJshrs11Es720wHwYDVR0j BBgwFoAUuSYhRCN6NATBBdqX1pMY2b4pXkIwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud HwRWMFQwUqBQoE6GTHJzeW5jOi8vcmVwby5ua24uaW4vcmVwby9QRE5TLzAvQjky NjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlCRTI5NUU0Mi5jcmwwaAYIKwYB BQUHAQEEXDBaMFgGCCsGAQUFBzAChkxyc3luYzovL3JlcG8yLm5rbi5pbi9yZXBv L05LTi8wL0I5MjYyMTQ0MjM3QTM0MDRDMTA1REE5N0Q2OTMxOEQ5QkUyOTVFNDIu Y2VyMHYGCCsGAQUFBwELBGowaDBmBggrBgEFBQcwC4ZacnN5bmM6Ly9yZXBvLm5r bi5pbi9yZXBvL1BETlMvMC8zMTMwMzMyZTM2MzYyZTMxMzUzNjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM1MzkzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnQpwwDQYJKoZIhvcN AQELBQADggEBAHFMHBeKfz5KcsjUAhlpd1/2aK0CU5PTBjfpXIqYISF3Sm6vKTtk EPoc36wrtb7XBJqk0060uOn5Ujc8PmUJ64AVoLnCU/MPr21hJ71AQMylUbe+5/OS 6v+XyHI4+l0nn/m7V2w9t0KuWEzVfBxuPhe4Nt5nIadYbTvyXYBhZm+s/yRlz9pq NCOMXGzZUltAIIUnAJrqcX8kr8joShvoQOypZh4dcDwWr6d0twEbHss1+hDDPPZD 22Q3/NhMxLOZDpiz4Zhy4ak+Yz7BeUPWHSFbIKuIW0qUTLzrArMOO5LUuE5fpUy5 C8d22wdtsqnh62nupMSDLomX//N0q5n5tLg= -----END CERTIFICATE-----Generated at Thu Aug 13 09:52:56 2026 by rpki-client