$ rpki-client -vvf repo2.nkn.in/repo/NKN/0/3130332e36352e33322e302f32322d3234203d3e203538383939.roa File: 3130332e36352e33322e302f32322d3234203d3e203538383939.roa (raw, json) Hash identifier: AMaQv0tcCrAYU3U6uIGSjdcFSwXRcka6u5R1BXYEIRw= Subject key identifier: D8:86:DD:A7:53:C7:42:F0:BF:1E:07:CC:BF:B0:2B:42:D6:5A:71:FF Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Certificate serial: 6F5D0EC759237856025E2CC90CBF44F8319060FE Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject info access: rsync://repo2.nkn.in/repo/NKN/0/3130332e36352e33322e302f32322d3234203d3e203538383939.roa Signing time: Fri 31 Jul 2026 03:08:43 +0000 ROA not before: Fri 31 Jul 2026 03:03:43 +0000 ROA not after: Fri 30 Jul 2027 03:08:43 +0000 asID: 58899 IP address blocks: 103.65.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5d:0e:c7:59:23:78:56:02:5e:2c:c9:0c:bf:44:f8:31:90:60:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Validity Not Before: Jul 31 03:03:43 2026 GMT Not After : Jul 30 03:08:43 2027 GMT Subject: CN=D886DDA753C742F0BF1E07CCBFB02B42D65A71FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b8:fb:3c:7d:b5:38:a6:4a:51:1e:e2:bd:44: f5:fd:8b:f1:f9:12:42:11:56:51:38:15:f8:b4:98: cc:db:f4:67:a7:3f:f3:c2:50:5c:5b:16:72:b3:c2: 9a:c8:88:ca:79:77:10:5c:0a:2b:82:c7:ae:31:41: 6e:64:bd:82:8e:f5:e8:e9:ed:bb:1e:fa:82:03:45: 06:2e:22:45:3a:d1:10:6d:3d:4e:1b:58:68:aa:5a: a8:99:be:da:a3:ca:e7:94:6b:9c:7e:91:21:9f:49: f9:79:89:ad:37:9b:9d:70:45:ab:53:b3:65:c6:07: d7:c6:fc:88:6c:13:3a:10:22:43:01:ea:72:6f:eb: 20:0b:e9:9e:a7:4f:55:92:35:ca:74:6b:8b:32:ce: 5f:07:91:72:f4:05:de:96:ac:0b:73:b6:91:27:4e: 2b:6f:a1:65:5d:64:da:c9:f0:6c:be:ac:dd:c1:6d: 0c:47:34:c9:1e:3e:b4:b7:7e:c2:6f:67:aa:7b:56: 9f:12:ad:7b:01:8a:a3:30:b2:10:ce:03:47:9a:63: fd:00:07:3e:9a:64:cc:45:2a:6c:42:99:7a:ac:a4: 63:fe:bf:03:30:c5:18:4d:ed:9c:57:8c:d4:25:09: dc:26:f7:ad:cc:62:a4:a0:5a:aa:db:71:ff:fb:f5: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:DD:A7:53:C7:42:F0:BF:1E:07:CC:BF:B0:2B:42:D6:5A:71:FF X509v3 Authority Key Identifier: keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject Information Access: Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/3130332e36352e33322e302f32322d3234203d3e203538383939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.65.32.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:8c:38:c0:5d:f6:8b:cd:e1:c2:9e:01:a6:c8:5b:0e:65:29: c1:44:d1:f5:14:cf:38:49:c7:dc:cb:da:7a:36:92:b7:89:19: 6d:e7:7c:95:b4:de:39:9b:61:96:c4:28:c3:bb:ee:68:37:d8: 9a:7a:ef:f7:0c:61:0a:eb:62:6b:d3:c9:6b:d6:c5:b8:34:3c: b8:c4:c8:e9:09:ae:57:4d:20:86:8e:73:c7:7a:7e:8c:32:c1: dd:93:4c:00:9f:2a:79:44:c0:ae:51:76:4b:b1:97:99:ea:65: 4b:d8:0d:bd:82:9d:1b:62:91:c0:07:c0:0f:59:43:4e:63:7f: 44:27:03:de:c6:73:f6:08:e1:6e:a0:5d:e4:d4:1c:28:f1:ff: 5a:29:15:b8:92:6d:56:50:14:5d:dc:e3:4d:da:fb:34:4d:8e: 39:a2:5a:a4:54:1a:09:c1:18:99:7a:b9:0c:6e:dd:03:7e:20: d4:86:33:ce:16:da:e8:35:3c:57:3d:f6:c1:a5:af:ef:f7:cd: d5:bb:80:c6:8d:5a:92:90:61:cc:13:6f:74:70:4f:18:af:39: fa:5f:af:e5:07:7a:00:87:73:d7:10:c7:9a:e4:da:02:46:b4: 16:f4:b8:0a:4f:47:80:52:49:f3:85:ba:22:de:7c:19:9e:95: 4e:c7:1d:6b -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUb10Ox1kjeFYCXizJDL9E+DGQYP4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOEVEQjIwMDAwMTEwLwYDVQQFEyhDOTQ1QzkyMTFD NUEyQ0EwMkM1MUU3QzRDNzk4NUZBMEY0NTQ1QjQ1MB4XDTI2MDczMTAzMDM0M1oX DTI3MDczMDAzMDg0M1owMzExMC8GA1UEAxMoRDg4NkREQTc1M0M3NDJGMEJGMUUw N0NDQkZCMDJCNDJENjVBNzFGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANa4+zx9tTimSlEe4r1E9f2L8fkSQhFWUTgV+LSYzNv0Z6c/88JQXFsWcrPC msiIynl3EFwKK4LHrjFBbmS9go716Ontux76ggNFBi4iRTrREG09ThtYaKpaqJm+ 2qPK55RrnH6RIZ9J+XmJrTebnXBFq1OzZcYH18b8iGwTOhAiQwHqcm/rIAvpnqdP VZI1ynRrizLOXweRcvQF3pasC3O2kSdOK2+hZV1k2snwbL6s3cFtDEc0yR4+tLd+ wm9nqntWnxKtewGKozCyEM4DR5pj/QAHPppkzEUqbEKZeqykY/6/AzDFGE3tnFeM 1CUJ3Cb3rcxipKBaqttx//v1cNcCAwEAAaOCAeQwggHgMB0GA1UdDgQWBBTYht2n U8dC8L8eB8y/sCtC1lpx/zAfBgNVHSMEGDAWgBTJRckhHFosoCxR58THmF+g9FRb RTAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9yZXBv Mi5ua24uaW4vcmVwby9OS04vMC9DOTQ1QzkyMTFDNUEyQ0EwMkM1MUU3QzRDNzk4 NUZBMEY0NTQ1QjQ1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi95VVhKSVJ4YUxLQXNVZWZFeDVoZm9QUlVXMFUuY2Vy MHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9yZXBvMi5ua24u aW4vcmVwby9OS04vMC8zMTMwMzMyZTM2MzUyZTMzMzIyZTMwMmYzMjMyMmQzMjM0 MjAzZDNlMjAzNTM4MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0EgMA0GCSqGSIb3DQEBCwUA A4IBAQCOjDjAXfaLzeHCngGmyFsOZSnBRNH1FM84Scfcy9p6NpK3iRlt53yVtN45 m2GWxCjDu+5oN9iaeu/3DGEK62Jr08lr1sW4NDy4xMjpCa5XTSCGjnPHen6MMsHd k0wAnyp5RMCuUXZLsZeZ6mVL2A29gp0bYpHAB8APWUNOY39EJwPexnP2COFuoF3k 1Bwo8f9aKRW4km1WUBRd3ONN2vs0TY45olqkVBoJwRiZerkMbt0DfiDUhjPOFtro NTxXPfbBpa/v983Vu4DGjVqSkGHME290cE8Yrzn6X6/lB3oAh3PXEMea5NoCRrQW 9LgKT0eAUknzhboi3nwZnpVOxx1r -----END CERTIFICATE-----Generated at Thu Aug 13 08:45:58 2026 by rpki-client