This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/bOVRON_SlV9FnXyxUQZE1ahemtM.roa
File: bOVRON_SlV9FnXyxUQZE1ahemtM.roa (raw, json)
Hash identifier: k3MU72lT3P3U0ujotyVOZoiBEcE9a3TcDni2Oj9eJ+I=
Subject key identifier: 6C:E5:51:38:DF:D2:95:5F:45:9D:7C:B1:51:06:44:D5:A8:5E:9A:D3
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 8936
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/bOVRON_SlV9FnXyxUQZE1ahemtM.roa
Signing time: Sun 07 Dec 2025 02:17:42 +0000
ROA not before: Sun 07 Dec 2025 02:17:42 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35126 (0x8936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Dec 7 02:17:42 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=6CE55138DFD2955F459D7CB1510644D5A85E9AD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:50:dc:53:37:cd:cc:11:ab:0e:8a:19:4a:
fd:ca:d4:d9:21:cb:62:f1:db:62:cf:2b:80:d8:e1:
2f:a8:5d:ea:cf:4a:eb:55:a5:55:96:45:4d:38:d0:
f0:43:b8:49:d4:63:45:3c:3d:30:11:0e:44:c8:fa:
0c:41:a8:2f:6d:25:61:45:63:9c:b1:48:98:02:38:
f3:1a:90:25:fb:cc:a3:c1:40:b1:d1:71:c2:64:42:
19:50:fa:7b:17:2d:b0:87:3b:f5:c5:76:33:b5:60:
f2:ef:47:92:2c:2e:58:a7:ed:d2:2c:e3:90:7b:d4:
f7:63:25:0f:c2:89:e9:a9:42:42:a5:bf:8d:15:12:
83:85:00:e8:73:e2:7b:f7:28:84:d1:34:0b:4e:29:
89:89:50:29:7e:ec:b4:22:90:05:ae:2c:43:d9:f3:
7d:d3:1f:4b:40:1d:61:94:31:c7:70:37:34:6e:fd:
c4:37:73:2b:91:7c:d9:bc:54:1e:05:da:90:5e:08:
97:0e:52:83:ed:d7:a0:0e:82:32:b9:81:d2:91:a1:
2f:54:e0:bf:9a:8b:04:35:37:6b:78:22:52:8a:0f:
e5:8e:21:35:68:ab:e9:fa:6e:41:38:57:33:94:2f:
21:e8:f3:84:2c:b7:a1:c6:1d:49:79:aa:30:2a:41:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:51:38:DF:D2:95:5F:45:9D:7C:B1:51:06:44:D5:A8:5E:9A:D3
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/bOVRON_SlV9FnXyxUQZE1ahemtM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
5b:45:a7:6b:c3:5a:94:6d:5a:dd:ac:d7:6c:1b:f9:46:7c:a1:
8e:b4:c1:43:60:03:76:67:7b:b9:ad:02:95:dc:aa:b0:00:43:
8d:f1:d8:de:c9:61:f3:0c:27:30:d8:e4:7f:2a:4b:cf:fb:b8:
0d:62:b8:b5:98:44:8d:0f:82:b2:5e:9f:b6:4a:9c:8d:4a:c5:
08:14:c2:19:50:e4:50:15:4e:78:9b:74:2b:25:fc:9c:88:93:
4b:0a:67:8b:98:70:ab:a7:67:43:a0:b1:57:de:31:f6:30:02:
34:de:80:d1:8e:f0:f4:bb:64:d6:07:24:1f:0e:6f:38:6c:55:
54:5f:d5:03:0e:25:28:e5:f4:f8:4c:4c:63:2d:d3:ea:8a:ab:
2d:bf:06:fe:77:85:5f:1a:09:f3:80:c8:e0:1e:5a:48:70:c4:
6b:52:c0:36:15:e0:c9:a2:e5:18:a3:f4:69:b5:71:bc:e5:c5:
c3:d9:17:26:f7:01:1b:bb:19:aa:46:3b:93:bf:03:09:7f:1b:
15:0d:5d:37:17:78:7a:1d:04:23:90:66:9c:84:1f:aa:6f:2d:
45:6a:f4:ef:5e:42:e1:0a:d1:ba:f0:5b:e2:b9:37:c3:f5:6a:
d5:8c:f0:87:c8:21:f4:74:fc:64:31:57:a3:75:58:1f:5a:27:
c4:6a:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:00:49 2025 by rpki-client