diff --git a/bin/dnssec/dnssec-ksr.c b/bin/dnssec/dnssec-ksr.c
index 01df9843cc..fbad0b47b9 100644
--- a/bin/dnssec/dnssec-ksr.c
+++ b/bin/dnssec/dnssec-ksr.c
@@ -705,7 +705,7 @@ sign_rrset(ksr_ctx_t *ksr, isc_stdtime_t inception, isc_stdtime_t expiration,
 		if (act > inception) {
 			continue;
 		}
-		if (inact != 0 && inception >= inact) {
+		if (inact != 0 && inception > inact) {
 			continue;
 		}