$ rpki-client -vvf repo2.nkn.in/repo/NKN/0/3130332e3232302e3232382e302f32322d3234203d3e2030.roa File: 3130332e3232302e3232382e302f32322d3234203d3e2030.roa (raw, json) Hash identifier: jqhVmI/+lu4UEkPDcHEUqW8dvf6LS93GW8F4PvPWlN8= Subject key identifier: 52:AC:5B:21:6A:6D:3B:AA:6C:E9:1C:16:F1:47:8F:BD:9B:B1:35:F4 Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Certificate serial: 0A6AF49855458C3DE0B009A5A6278226B40DDAAE Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject info access: rsync://repo2.nkn.in/repo/NKN/0/3130332e3232302e3232382e302f32322d3234203d3e2030.roa Signing time: Mon 03 Aug 2026 11:08:10 +0000 ROA not before: Mon 03 Aug 2026 11:03:10 +0000 ROA not after: Mon 02 Aug 2027 11:08:10 +0000 asID: 0 IP address blocks: 103.220.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6a:f4:98:55:45:8c:3d:e0:b0:09:a5:a6:27:82:26:b4:0d:da:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Validity Not Before: Aug 3 11:03:10 2026 GMT Not After : Aug 2 11:08:10 2027 GMT Subject: CN=52AC5B216A6D3BAA6CE91C16F1478FBD9BB135F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0b:51:57:a2:fe:6e:49:c1:9c:94:db:9b:9c: f0:1c:88:db:a6:c2:77:0b:0c:2e:23:71:92:48:85: 35:91:88:d3:7c:6e:c7:a5:95:8e:ce:19:40:4b:c1: 83:a5:f0:07:03:5e:46:80:e3:0a:82:81:25:5a:04: e0:31:39:00:54:61:0c:b0:81:51:33:6e:e1:3a:c4: 2e:ae:66:fc:c0:2f:a1:0e:fa:1d:29:ae:33:35:87: d2:c7:45:57:58:6b:25:8e:1a:b5:10:8a:e8:a9:e6: 9d:62:28:24:ad:08:d5:63:de:2c:e4:ce:c1:e6:81: 82:3e:3c:d3:d5:df:3a:e0:26:8e:e8:64:c3:24:f9: ff:61:65:df:74:a3:94:eb:0a:8b:fe:27:51:27:b7: 55:38:5b:8f:a8:43:05:d6:af:30:c6:a5:90:cd:e3: b0:56:03:ab:a6:4a:a4:90:b4:88:43:5a:db:0d:f3: f6:85:4b:91:2f:97:0d:5e:3d:be:23:66:db:48:2f: 92:c9:69:7c:bc:78:2f:f6:a0:21:e2:ed:b2:68:9f: 0f:c4:d4:0e:f6:25:ab:68:d9:9f:3f:02:9f:26:e3: c9:02:7a:c6:0b:bd:67:81:1a:fb:78:a0:54:06:52: 6c:21:d5:e4:55:41:6a:bd:3d:e7:db:94:5c:b7:dd: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AC:5B:21:6A:6D:3B:AA:6C:E9:1C:16:F1:47:8F:BD:9B:B1:35:F4 X509v3 Authority Key Identifier: keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject Information Access: Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/3130332e3232302e3232382e302f32322d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.228.0/22 Signature Algorithm: sha256WithRSAEncryption 25:c2:f6:fb:fb:cc:12:e0:e9:57:ff:82:e5:bd:88:57:52:2c: 9a:3f:ed:a4:e0:b2:a9:60:0e:37:d2:70:1c:40:24:81:d8:03: cd:33:0d:2e:fa:84:ad:cf:4b:97:f8:1f:d3:b5:d2:a1:2f:13: 63:f4:85:b9:f2:f6:17:9e:20:4f:5c:29:67:e2:da:1c:72:49: 0c:a2:86:98:e8:b7:51:e6:14:2c:c2:29:b7:a6:88:d2:7b:60: b5:8e:4a:f4:0a:1f:41:35:9b:d4:fd:ff:20:43:64:0a:05:78: 51:c2:6c:b5:54:9b:75:ff:19:fb:78:e2:22:64:bb:87:3d:b9: e5:30:ac:53:b8:43:0c:96:95:11:c1:07:a3:c9:b9:00:82:a9: bb:00:b2:ce:fa:39:65:1c:79:9d:af:18:f2:3f:66:88:da:93: d4:1c:d2:39:2c:23:df:04:d7:42:e5:98:f9:32:6b:e9:e6:3b: 1c:8c:1b:47:5a:5a:b1:cb:b8:8f:df:3b:dd:e1:4f:f2:4a:38: 2d:0e:a7:3c:90:ca:6d:bb:94:91:59:59:d4:72:6f:2f:ad:21: 43:83:a3:91:65:de:0b:4a:bf:b8:35:95:ae:8e:43:f3:b3:70: 64:e3:c9:a7:03:59:16:f5:df:46:35:b2:7e:21:6f:2f:79:61: 61:3c:77:12 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUCmr0mFVFjD3gsAmlpieCJrQN2q4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOEVEQjIwMDAwMTEwLwYDVQQFEyhDOTQ1QzkyMTFD NUEyQ0EwMkM1MUU3QzRDNzk4NUZBMEY0NTQ1QjQ1MB4XDTI2MDgwMzExMDMxMFoX DTI3MDgwMjExMDgxMFowMzExMC8GA1UEAxMoNTJBQzVCMjE2QTZEM0JBQTZDRTkx QzE2RjE0NzhGQkQ5QkIxMzVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsLUVei/m5JwZyU25uc8ByI26bCdwsMLiNxkkiFNZGI03xux6WVjs4ZQEvB g6XwBwNeRoDjCoKBJVoE4DE5AFRhDLCBUTNu4TrELq5m/MAvoQ76HSmuMzWH0sdF V1hrJY4atRCK6KnmnWIoJK0I1WPeLOTOweaBgj4809XfOuAmjuhkwyT5/2Fl33Sj lOsKi/4nUSe3VThbj6hDBdavMMalkM3jsFYDq6ZKpJC0iENa2w3z9oVLkS+XDV49 viNm20gvkslpfLx4L/agIeLtsmifD8TUDvYlq2jZnz8CnybjyQJ6xgu9Z4Ea+3ig VAZSbCHV5FVBar0959uUXLfdLMsCAwEAAaOCAeAwggHcMB0GA1UdDgQWBBRSrFsh am07qmzpHBbxR4+9m7E19DAfBgNVHSMEGDAWgBTJRckhHFosoCxR58THmF+g9FRb RTAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9yZXBv Mi5ua24uaW4vcmVwby9OS04vMC9DOTQ1QzkyMTFDNUEyQ0EwMkM1MUU3QzRDNzk4 NUZBMEY0NTQ1QjQ1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi95VVhKSVJ4YUxLQXNVZWZFeDVoZm9QUlVXMFUuY2Vy MHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yZXBvMi5ua24u aW4vcmVwby9OS04vMC8zMTMwMzMyZTMyMzIzMDJlMzIzMjM4MmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn3OQwDQYJKoZIhvcNAQELBQADggEB ACXC9vv7zBLg6Vf/guW9iFdSLJo/7aTgsqlgDjfScBxAJIHYA80zDS76hK3PS5f4 H9O10qEvE2P0hbny9heeIE9cKWfi2hxySQyihpjot1HmFCzCKbemiNJ7YLWOSvQK H0E1m9T9/yBDZAoFeFHCbLVUm3X/Gft44iJku4c9ueUwrFO4QwyWlRHBB6PJuQCC qbsAss76OWUceZ2vGPI/Zojak9Qc0jksI98E10LlmPkya+nmOxyMG0daWrHLuI/f O93hT/JKOC0OpzyQym27lJFZWdRyby+tIUODo5Fl3gtKv7g1la6OQ/OzcGTjyacD WRb130Y1sn4hby95YWE8dxI= -----END CERTIFICATE-----Generated at Thu Aug 13 08:45:10 2026 by rpki-client