$ rpki-client -vvf repo2.nkn.in/repo/NKN/0/3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa File: 3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa (raw, json) Hash identifier: bESgYykf5jIsqrq4DGBWqam8+n359Fj4v6ec8df3s7c= Subject key identifier: 09:17:C4:10:1B:BA:14:7B:FF:F7:3B:89:C5:17:0C:33:07:D5:62:56 Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Certificate serial: 0DD275616D1C8BCB671AD7978EFC90B4E3B725AF Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject info access: rsync://repo2.nkn.in/repo/NKN/0/3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa Signing time: Mon 03 Aug 2026 08:14:05 +0000 ROA not before: Mon 03 Aug 2026 08:09:05 +0000 ROA not after: Mon 02 Aug 2027 08:14:05 +0000 asID: 58899 IP address blocks: 103.220.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d2:75:61:6d:1c:8b:cb:67:1a:d7:97:8e:fc:90:b4:e3:b7:25:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Validity Not Before: Aug 3 08:09:05 2026 GMT Not After : Aug 2 08:14:05 2027 GMT Subject: CN=0917C4101BBA147BFFF73B89C5170C3307D56256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:9a:71:1e:cb:e8:f2:c9:d6:72:1e:e5:ac: 46:50:7c:e7:73:31:7c:23:d1:6d:70:20:f3:21:0a: c0:a0:63:58:4e:fe:45:c5:10:cc:71:ae:aa:5e:b6: 6c:ac:14:85:16:8a:5a:f9:98:8b:7a:9a:65:69:ab: c9:68:81:d0:57:a5:70:92:ab:1d:34:ab:77:0d:75: c9:a1:6e:3d:ec:8a:e5:55:4b:a2:4f:7c:13:53:ad: 20:50:f4:3e:5f:6a:aa:43:13:af:b4:4e:21:17:bb: b5:f2:8e:77:ca:03:4f:d3:15:9d:2a:b4:4e:bb:bd: f7:39:46:e6:f8:d5:0d:e2:97:16:f9:4f:4e:1c:8c: c5:a7:78:24:40:9d:95:57:fb:83:5f:81:d3:23:9b: 33:bf:4b:9b:43:d2:f5:19:53:07:01:f6:9f:93:d3: e4:0c:5a:cd:1e:80:e4:0d:88:04:07:14:50:9d:1a: b8:2d:59:91:a2:62:f1:b3:e3:b5:e7:2f:21:48:7a: 38:00:70:5c:6f:47:b2:8f:05:f8:68:0d:c6:76:20: 13:a4:2b:bd:23:89:a7:3b:08:cd:36:15:5b:1e:65: ee:09:e7:8a:d0:7b:63:48:90:ab:e7:ac:b3:5a:33: 72:db:d4:ca:d1:af:c2:ca:16:91:0c:1c:d3:da:0f: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:17:C4:10:1B:BA:14:7B:FF:F7:3B:89:C5:17:0C:33:07:D5:62:56 X509v3 Authority Key Identifier: keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject Information Access: Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.236.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:41:0b:a4:07:ac:f4:70:91:da:20:1c:ac:59:5e:40:90:86: 18:70:29:db:00:8b:8f:43:fe:49:7e:15:31:81:2e:93:67:37: 70:56:1f:96:a4:29:43:56:c4:79:25:a9:1e:86:46:1a:2f:b2: 05:20:73:be:28:b5:2e:2e:a4:73:2b:1c:72:c1:c4:31:f9:19: db:81:1d:c6:39:61:d6:00:17:da:89:d2:69:81:90:97:37:29: 99:a5:21:70:d8:f0:56:84:d7:a8:d0:4b:31:03:94:8b:ee:fa: 46:ab:c8:3f:05:e5:e6:da:34:cc:5c:fa:69:22:74:df:d7:7d: c6:17:83:cb:98:04:6f:34:5c:1c:06:44:de:c4:15:70:a8:6a: 77:7e:9a:89:49:af:a1:ad:2e:66:0a:6f:e5:75:ee:a2:dd:bb: 3e:38:38:16:fe:c1:af:35:6a:a1:2f:ff:51:ff:47:47:c2:df: ff:49:eb:00:7f:30:5e:80:49:3d:53:c6:b7:8b:e1:ca:f2:62: a4:97:fd:e8:16:6d:28:11:91:49:60:65:f5:6e:68:86:c3:3d: a3:68:28:f3:96:8a:60:3b:8a:a5:f7:33:10:d3:2e:6c:ec:47: c7:a4:a3:b6:80:bf:d7:16:9f:db:74:bc:12:e3:ba:39:34:57: 77:e7:39:3a -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUDdJ1YW0ci8tnGteXjvyQtOO3Ja8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOEVEQjIwMDAwMTEwLwYDVQQFEyhDOTQ1QzkyMTFD NUEyQ0EwMkM1MUU3QzRDNzk4NUZBMEY0NTQ1QjQ1MB4XDTI2MDgwMzA4MDkwNVoX DTI3MDgwMjA4MTQwNVowMzExMC8GA1UEAxMoMDkxN0M0MTAxQkJBMTQ3QkZGRjcz Qjg5QzUxNzBDMzMwN0Q1NjI1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC9mnEey+jyydZyHuWsRlB853MxfCPRbXAg8yEKwKBjWE7+RcUQzHGuql62 bKwUhRaKWvmYi3qaZWmryWiB0FelcJKrHTSrdw11yaFuPeyK5VVLok98E1OtIFD0 Pl9qqkMTr7ROIRe7tfKOd8oDT9MVnSq0Tru99zlG5vjVDeKXFvlPThyMxad4JECd lVf7g1+B0yObM79Lm0PS9RlTBwH2n5PT5AxazR6A5A2IBAcUUJ0auC1ZkaJi8bPj tecvIUh6OABwXG9Hso8F+GgNxnYgE6QrvSOJpzsIzTYVWx5l7gnnitB7Y0iQq+es s1ozctvUytGvwsoWkQwc09oPUh0CAwEAAaOCAegwggHkMB0GA1UdDgQWBBQJF8QQ G7oUe//3O4nFFwwzB9ViVjAfBgNVHSMEGDAWgBTJRckhHFosoCxR58THmF+g9FRb RTAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9yZXBv Mi5ua24uaW4vcmVwby9OS04vMC9DOTQ1QzkyMTFDNUEyQ0EwMkM1MUU3QzRDNzk4 NUZBMEY0NTQ1QjQ1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi95VVhKSVJ4YUxLQXNVZWZFeDVoZm9QUlVXMFUuY2Vy MHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5bmM6Ly9yZXBvMi5ua24u aW4vcmVwby9OS04vMC8zMTMwMzMyZTMyMzIzMDJlMzIzMzM2MmUzMDJmMzIzMjJk MzIzNDIwM2QzZTIwMzUzODM4MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfc7DANBgkqhkiG9w0B AQsFAAOCAQEATkELpAes9HCR2iAcrFleQJCGGHAp2wCLj0P+SX4VMYEuk2c3cFYf lqQpQ1bEeSWpHoZGGi+yBSBzvii1Li6kcysccsHEMfkZ24Edxjlh1gAX2onSaYGQ lzcpmaUhcNjwVoTXqNBLMQOUi+76RqvIPwXl5to0zFz6aSJ039d9xheDy5gEbzRc HAZE3sQVcKhqd36aiUmvoa0uZgpv5XXuot27Pjg4Fv7BrzVqoS//Uf9HR8Lf/0nr AH8wXoBJPVPGt4vhyvJipJf96BZtKBGRSWBl9W5ohsM9o2go85aKYDuKpfczENMu bOxHx6SjtoC/1xaf23S8EuO6OTRXd+c5Og== -----END CERTIFICATE-----Generated at Thu Aug 13 08:46:27 2026 by rpki-client