$ rpki-client -vvvf repo2.nkn.in/repo/NKN/0/3130332e36362e3131362e302f32322d3232203d3e20313438313030.roa File: 3130332e36362e3131362e302f32322d3232203d3e20313438313030.roa (raw, json) Hash identifier: v7RsjJZ5dbR5+CqcoGTlQBoT5hrwD51NA56+ibj/vP4= Subject key identifier: 48:C7:9E:0B:AB:0A:19:2F:CC:C4:E2:DF:76:EE:DC:AB:26:3E:DD:8B Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Certificate serial: 3046841F304AAF5BDE8E1D062CE0B24E41C3B4AB Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject info access: rsync://repo2.nkn.in/repo/NKN/0/3130332e36362e3131362e302f32322d3232203d3e20313438313030.roa Signing time: Thu 24 Sep 2026 07:09:32 +0000 ROA not before: Thu 24 Sep 2026 07:04:32 +0000 ROA not after: Thu 23 Sep 2027 07:09:32 +0000 asID: 148100 IP address blocks: 103.66.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 16:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:46:84:1f:30:4a:af:5b:de:8e:1d:06:2c:e0:b2:4e:41:c3:b4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Validity Not Before: Sep 24 07:04:32 2026 GMT Not After : Sep 23 07:09:32 2027 GMT Subject: CN=48C79E0BAB0A192FCCC4E2DF76EEDCAB263EDD8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:76:3c:cd:49:37:cd:8e:b3:b5:80:4d:10: 8f:7f:2b:83:2a:52:9c:51:40:05:73:84:85:3a:10: 41:ac:e7:12:91:83:8e:4f:4e:9a:20:d4:78:e1:e6: 1d:84:07:28:fb:58:9f:23:fd:c2:e8:b3:68:9f:fb: b2:f5:78:78:82:49:90:4e:f4:fe:7b:5c:d9:fd:c4: bc:f4:fc:12:0b:1e:97:ab:08:57:9d:04:b1:3c:25: 26:26:98:77:66:da:75:ab:1e:34:d0:7d:65:50:ff: b1:1f:d4:3b:34:24:b6:67:82:e5:63:2c:52:dd:64: 53:31:88:1c:7e:bc:83:55:e8:2e:ad:37:05:19:42: cd:bb:40:34:51:19:f8:0e:f0:1e:b8:34:91:b5:dd: 45:34:64:bb:c7:38:49:19:ec:91:88:5f:77:07:af: 20:a8:30:22:f4:63:91:e4:fb:0d:44:d4:30:d1:6a: 0f:41:fb:b4:46:77:2c:33:52:c2:cb:4f:9a:33:64: 33:a9:4c:e8:83:fe:c8:3c:db:c8:c5:fc:64:a1:7e: c9:a4:30:3f:82:59:30:01:e4:c1:35:7b:4e:70:4a: 5a:31:9b:84:2c:1e:ae:9d:9c:12:78:73:b5:37:7f: 27:ff:ae:44:53:84:7d:7e:7b:8c:bc:23:ce:34:5f: 44:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C7:9E:0B:AB:0A:19:2F:CC:C4:E2:DF:76:EE:DC:AB:26:3E:DD:8B X509v3 Authority Key Identifier: keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject Information Access: Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/3130332e36362e3131362e302f32322d3232203d3e20313438313030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.116.0/22 Signature Algorithm: sha256WithRSAEncryption 86:f7:b1:80:e3:de:2b:0b:83:81:f2:1e:15:1b:59:0c:8c:d3: 8e:a1:0d:e4:2e:21:85:2d:89:bd:13:9f:59:9f:b0:3f:98:c8: c5:90:ac:9c:1d:e4:4a:74:3c:b5:bf:91:d1:9b:41:d5:ba:83: bc:0a:ff:62:c0:15:81:7c:75:15:9b:f5:87:0e:6b:cc:19:8d: 1e:62:13:24:ba:a5:6f:e1:cb:9e:09:68:6e:43:55:ae:f7:72: 65:f6:ba:a8:86:7f:bf:62:ae:b2:7f:80:76:08:15:a0:51:a2: 61:34:87:41:62:48:32:3f:65:92:57:b6:b8:90:9a:29:c1:06: 31:76:49:63:da:49:45:19:46:e9:b1:29:69:59:9f:94:b6:b8: f2:2e:07:ef:02:5a:df:ed:5a:95:74:b3:44:c5:ee:ee:8e:37: 13:93:29:80:9b:f5:9f:0f:f2:5e:71:ef:12:89:b2:5b:78:67: 5f:1f:4d:1d:07:9d:73:4f:5a:80:02:5f:46:0d:4f:c2:8f:04: a3:f0:c3:22:c2:40:f3:3b:fd:2c:4a:15:ed:44:b3:4e:4d:0e: 13:5a:76:e3:22:03:cc:9a:b6:07:8c:3a:35:a7:e2:46:c2:fc: d8:1a:a0:a3:15:b5:c7:de:39:dd:d2:83:c9:62:ed:e5:74:79: 94:9b:6a:a9 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUMEaEHzBKr1vejh0GLOCyTkHDtKswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOEVEQjIwMDAwMTEwLwYDVQQFEyhDOTQ1QzkyMTFD NUEyQ0EwMkM1MUU3QzRDNzk4NUZBMEY0NTQ1QjQ1MB4XDTI2MDkyNDA3MDQzMloX DTI3MDkyMzA3MDkzMlowMzExMC8GA1UEAxMoNDhDNzlFMEJBQjBBMTkyRkNDQzRF MkRGNzZFRURDQUIyNjNFREQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBDdjzNSTfNjrO1gE0Qj38rgypSnFFABXOEhToQQaznEpGDjk9OmiDUeOHm HYQHKPtYnyP9wuizaJ/7svV4eIJJkE70/ntc2f3EvPT8Egsel6sIV50EsTwlJiaY d2badaseNNB9ZVD/sR/UOzQktmeC5WMsUt1kUzGIHH68g1XoLq03BRlCzbtANFEZ +A7wHrg0kbXdRTRku8c4SRnskYhfdwevIKgwIvRjkeT7DUTUMNFqD0H7tEZ3LDNS wstPmjNkM6lM6IP+yDzbyMX8ZKF+yaQwP4JZMAHkwTV7TnBKWjGbhCwerp2cEnhz tTd/J/+uRFOEfX57jLwjzjRfRNMCAwEAAaOCAegwggHkMB0GA1UdDgQWBBRIx54L qwoZL8zE4t927tyrJj7dizAfBgNVHSMEGDAWgBTJRckhHFosoCxR58THmF+g9FRb RTAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9yZXBv Mi5ua24uaW4vcmVwby9OS04vMC9DOTQ1QzkyMTFDNUEyQ0EwMkM1MUU3QzRDNzk4 NUZBMEY0NTQ1QjQ1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi95VVhKSVJ4YUxLQXNVZWZFeDVoZm9QUlVXMFUuY2Vy MHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5bmM6Ly9yZXBvMi5ua24u aW4vcmVwby9OS04vMC8zMTMwMzMyZTM2MzYyZTMxMzEzNjJlMzAyZjMyMzIyZDMy MzIyMDNkM2UyMDMxMzQzODMxMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdCdDANBgkqhkiG9w0B AQsFAAOCAQEAhvexgOPeKwuDgfIeFRtZDIzTjqEN5C4hhS2JvROfWZ+wP5jIxZCs nB3kSnQ8tb+R0ZtB1bqDvAr/YsAVgXx1FZv1hw5rzBmNHmITJLqlb+HLnglobkNV rvdyZfa6qIZ/v2Kusn+AdggVoFGiYTSHQWJIMj9lkle2uJCaKcEGMXZJY9pJRRlG 6bEpaVmflLa48i4H7wJa3+1alXSzRMXu7o43E5MpgJv1nw/yXnHvEomyW3hnXx9N HQedc09agAJfRg1Pwo8Eo/DDIsJA8zv9LEoV7USzTk0OE1p24yIDzJq2B4w6Nafi RsL82BqgoxW1x9453dKDyWLt5XR5lJtqqQ== -----END CERTIFICATE-----Generated at Wed Sep 30 14:46:36 2026 by rpki-client