$ rpki-client -vvf repo2.nkn.in/repo/NKN/0/3130332e36352e33322e302f32322d3234203d3e2030.roa File: 3130332e36352e33322e302f32322d3234203d3e2030.roa (raw, json) Hash identifier: emMEL3IXD5SmKi1V541hTjdCLPfeAv+QVWBz287PFrg= Subject key identifier: 36:FF:86:C5:38:88:29:CE:A2:C2:19:86:67:C1:7F:E2:E3:3A:65:FE Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Certificate serial: 2F64429F38C79C0B6D1F040C5546BF73DDBBB047 Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject info access: rsync://repo2.nkn.in/repo/NKN/0/3130332e36352e33322e302f32322d3234203d3e2030.roa Signing time: Fri 31 Jul 2026 03:08:22 +0000 ROA not before: Fri 31 Jul 2026 03:03:22 +0000 ROA not after: Fri 30 Jul 2027 03:08:22 +0000 asID: 0 IP address blocks: 103.65.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:64:42:9f:38:c7:9c:0b:6d:1f:04:0c:55:46:bf:73:dd:bb:b0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Validity Not Before: Jul 31 03:03:22 2026 GMT Not After : Jul 30 03:08:22 2027 GMT Subject: CN=36FF86C5388829CEA2C2198667C17FE2E33A65FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:42:d4:13:d7:e4:a3:0d:28:11:2f:9f:86: 8c:32:e4:80:66:49:65:0f:20:7a:69:8a:0a:f8:52: b4:a1:e5:00:27:38:fa:66:0f:05:20:64:10:98:e7: c1:2b:1e:fe:cf:71:66:fa:21:4a:31:d6:c1:e9:35: dc:e6:1e:7d:0f:1a:93:c5:89:49:43:21:66:c2:15: 22:08:9f:af:6e:ae:d8:12:56:bf:29:ed:5f:85:a9: 77:e7:39:ba:9d:45:d9:06:50:12:01:42:e9:48:96: ca:46:b4:6f:8c:85:0b:62:f2:38:b5:9f:ce:8c:82: 34:c2:de:fd:77:0c:83:5a:6d:00:f4:8e:ce:3b:4f: bc:26:5f:64:08:d7:eb:b6:2a:21:7b:90:8f:1d:37: d5:41:ef:5e:a2:e5:2f:83:2f:42:45:b5:79:51:70: 20:df:08:03:81:e5:18:43:26:d3:5c:98:ee:aa:1f: 83:e3:ef:16:1e:3a:db:c8:77:69:44:fb:03:8a:af: 32:79:f9:d4:37:86:91:c8:47:5d:41:36:ac:ed:dd: 72:17:ea:17:d0:fc:20:b7:e1:3e:6b:93:31:6a:4a: fc:a2:4b:35:75:49:b5:6e:e4:4d:1d:d0:bd:db:60: 3b:f6:41:83:5b:8d:6a:a4:13:c8:1b:c4:05:05:5d: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FF:86:C5:38:88:29:CE:A2:C2:19:86:67:C1:7F:E2:E3:3A:65:FE X509v3 Authority Key Identifier: keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject Information Access: Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/3130332e36352e33322e302f32322d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.65.32.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:e5:ad:d3:c8:a7:ba:5c:7e:93:f1:2a:0d:0f:90:55:87:5b: 54:25:bf:7b:b4:4a:45:53:c3:13:cc:c6:e1:59:ec:44:16:02: cf:e0:1a:6f:a4:ef:88:f9:af:21:93:25:a7:58:2b:22:9c:59: ce:cf:ee:c8:bf:71:76:e1:cb:75:92:e7:05:6d:61:68:09:80: af:d3:7c:73:33:0c:71:00:c1:08:13:24:e1:6d:44:85:b2:3f: 21:2a:0b:2b:5b:33:8a:d8:0b:e4:46:67:9a:c4:24:0c:ab:5a: 10:cf:27:17:8a:11:40:0a:dc:9a:47:02:2f:05:9c:94:2c:67: 7c:b1:1d:d5:1a:65:cd:58:51:dd:22:0b:bf:04:6c:70:59:a7: df:a9:db:81:73:2a:f0:40:70:b3:9b:61:05:82:86:27:04:48: 25:05:1d:6a:99:b3:71:a6:3e:a3:a5:dd:e2:4b:d5:9f:05:55: 99:d7:6b:6d:ae:89:00:7f:5f:71:55:8f:72:db:2a:58:c9:56: 24:81:a1:a2:e8:6f:d6:d3:d2:b6:c4:ce:7b:90:16:e4:99:89: 39:03:5c:95:e9:3e:b2:db:ad:ff:13:bd:24:01:61:5e:c6:ca: fa:81:29:5d:c0:9b:d1:cc:cf:1b:48:a6:90:e3:be:35:47:18: 19:be:44:ab -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUL2RCnzjHnAttHwQMVUa/c927sEcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOEVEQjIwMDAwMTEwLwYDVQQFEyhDOTQ1QzkyMTFD NUEyQ0EwMkM1MUU3QzRDNzk4NUZBMEY0NTQ1QjQ1MB4XDTI2MDczMTAzMDMyMloX DTI3MDczMDAzMDgyMlowMzExMC8GA1UEAxMoMzZGRjg2QzUzODg4MjlDRUEyQzIx OTg2NjdDMTdGRTJFMzNBNjVGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/TQtQT1+SjDSgRL5+GjDLkgGZJZQ8gemmKCvhStKHlACc4+mYPBSBkEJjn wSse/s9xZvohSjHWwek13OYefQ8ak8WJSUMhZsIVIgifr26u2BJWvyntX4Wpd+c5 up1F2QZQEgFC6UiWyka0b4yFC2LyOLWfzoyCNMLe/XcMg1ptAPSOzjtPvCZfZAjX 67YqIXuQjx031UHvXqLlL4MvQkW1eVFwIN8IA4HlGEMm01yY7qofg+PvFh4628h3 aUT7A4qvMnn51DeGkchHXUE2rO3dchfqF9D8ILfhPmuTMWpK/KJLNXVJtW7kTR3Q vdtgO/ZBg1uNaqQTyBvEBQVdNGMCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBQ2/4bF OIgpzqLCGYZnwX/i4zpl/jAfBgNVHSMEGDAWgBTJRckhHFosoCxR58THmF+g9FRb RTAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9yZXBv Mi5ua24uaW4vcmVwby9OS04vMC9DOTQ1QzkyMTFDNUEyQ0EwMkM1MUU3QzRDNzk4 NUZBMEY0NTQ1QjQ1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi95VVhKSVJ4YUxLQXNVZWZFeDVoZm9QUlVXMFUuY2Vy MGwGCCsGAQUFBwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly9yZXBvMi5ua24u aW4vcmVwby9OS04vMC8zMTMwMzMyZTM2MzUyZTMzMzIyZTMwMmYzMjMyMmQzMjM0 MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdBIDANBgkqhkiG9w0BAQsFAAOCAQEATeWt 08inulx+k/EqDQ+QVYdbVCW/e7RKRVPDE8zG4VnsRBYCz+Aab6TviPmvIZMlp1gr IpxZzs/uyL9xduHLdZLnBW1haAmAr9N8czMMcQDBCBMk4W1EhbI/ISoLK1szitgL 5EZnmsQkDKtaEM8nF4oRQArcmkcCLwWclCxnfLEd1RplzVhR3SILvwRscFmn36nb gXMq8EBws5thBYKGJwRIJQUdapmzcaY+o6Xd4kvVnwVVmddrba6JAH9fcVWPctsq WMlWJIGhouhv1tPStsTOe5AW5JmJOQNclek+stut/xO9JAFhXsbK+oEpXcCb0czP G0imkOO+NUcYGb5Eqw== -----END CERTIFICATE-----Generated at Thu Aug 13 08:44:55 2026 by rpki-client