Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F63CCCD66CED11F08EC76084C4F9AE02.roa
File:                     F63CCCD66CED11F08EC76084C4F9AE02.roa (raw, json)
Hash identifier:          cuiOVIxNkJ3H0Z0lLP73bl6GM8/lH/McDmVk03EIN38=
Subject key identifier:   DA:25:95:65:CD:0B:77:46:6C:88:95:C1:BB:AE:CE:8F:A9:DC:AA:E4
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4BFB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F63CCCD66CED11F08EC76084C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 02:39:23 +0000
ROA not before:           Wed 30 Jul 2025 02:39:23 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     7552
IP address blocks:        27.64.0.0/14 maxlen: 24
                          27.68.0.0/15 maxlen: 24
                          27.70.0.0/16 maxlen: 24
                          27.72.0.0/13 maxlen: 24
                          103.84.76.0/22 maxlen: 24
                          115.72.0.0/13 maxlen: 24
                          116.96.0.0/16 maxlen: 24
                          116.97.0.0/17 maxlen: 24
                          116.97.128.0/19 maxlen: 24
                          116.97.160.0/20 maxlen: 24
                          116.97.176.0/21 maxlen: 24
                          116.97.192.0/18 maxlen: 24
                          116.98.0.0/16 maxlen: 24
                          116.99.0.0/16 maxlen: 24
                          116.100.0.0/16 maxlen: 24
                          116.101.0.0/16 maxlen: 24
                          116.102.0.0/16 maxlen: 24
                          116.103.0.0/18 maxlen: 24
                          116.103.64.0/19 maxlen: 24
                          116.103.96.0/21 maxlen: 24
                          116.103.112.0/20 maxlen: 24
                          116.103.128.0/17 maxlen: 24
                          116.104.0.0/16 maxlen: 24
                          116.105.0.0/16 maxlen: 24
                          116.106.0.0/16 maxlen: 24
                          116.107.0.0/16 maxlen: 24
                          116.108.0.0/16 maxlen: 24
                          116.109.0.0/16 maxlen: 24
                          116.110.0.0/16 maxlen: 24
                          116.111.0.0/17 maxlen: 24
                          116.111.128.0/19 maxlen: 24
                          116.111.160.0/20 maxlen: 24
                          116.111.184.0/21 maxlen: 24
                          117.0.0.0/16 maxlen: 24
                          117.1.0.0/17 maxlen: 24
                          117.1.128.0/20 maxlen: 24
                          117.1.144.0/22 maxlen: 24
                          117.1.152.0/21 maxlen: 24
                          117.1.160.0/19 maxlen: 24
                          117.1.192.0/18 maxlen: 24
                          117.2.0.0/15 maxlen: 24
                          117.4.0.0/14 maxlen: 24
                          125.212.128.0/20 maxlen: 24
                          125.212.144.0/23 maxlen: 24
                          125.212.148.0/23 maxlen: 24
                          125.212.150.0/23 maxlen: 24
                          125.212.152.0/23 maxlen: 24
                          125.212.154.0/23 maxlen: 24
                          125.212.156.0/23 maxlen: 24
                          125.212.158.0/23 maxlen: 24
                          125.212.160.0/20 maxlen: 24
                          125.212.176.0/20 maxlen: 24
                          125.214.0.0/20 maxlen: 24
                          125.234.0.0/17 maxlen: 24
                          125.234.128.0/19 maxlen: 24
                          125.234.176.0/20 maxlen: 24
                          125.234.192.0/18 maxlen: 24
                          125.235.0.0/20 maxlen: 24
                          125.235.16.0/21 maxlen: 24
                          125.235.24.0/22 maxlen: 24
                          125.235.29.0/24 maxlen: 24
                          125.235.30.0/23 maxlen: 24
                          125.235.32.0/22 maxlen: 24
                          125.235.36.0/23 maxlen: 24
                          125.235.40.0/21 maxlen: 24
                          125.235.48.0/20 maxlen: 24
                          125.235.64.0/18 maxlen: 24
                          125.235.128.0/17 maxlen: 24
                          171.224.0.0/16 maxlen: 24
                          171.225.0.0/16 maxlen: 24
                          171.226.0.0/21 maxlen: 24
                          171.226.16.0/20 maxlen: 24
                          171.226.32.0/19 maxlen: 24
                          171.226.64.0/18 maxlen: 24
                          171.226.128.0/17 maxlen: 24
                          171.227.0.0/16 maxlen: 24
                          171.228.0.0/16 maxlen: 24
                          171.229.0.0/16 maxlen: 24
                          171.230.0.0/16 maxlen: 24
                          171.231.0.0/16 maxlen: 24
                          171.232.0.0/16 maxlen: 24
                          171.233.0.0/16 maxlen: 24
                          171.234.0.0/16 maxlen: 24
                          171.235.0.0/16 maxlen: 24
                          171.236.0.0/16 maxlen: 24
                          171.237.0.0/22 maxlen: 24
                          171.237.4.0/22 maxlen: 24
                          171.237.8.0/22 maxlen: 24
                          171.237.12.0/22 maxlen: 24
                          171.237.16.0/22 maxlen: 24
                          171.237.20.0/22 maxlen: 24
                          171.237.24.0/22 maxlen: 24
                          171.237.28.0/22 maxlen: 24
                          171.237.32.0/22 maxlen: 24
                          171.237.36.0/22 maxlen: 24
                          171.237.40.0/22 maxlen: 24
                          171.237.44.0/22 maxlen: 24
                          171.237.48.0/22 maxlen: 24
                          171.237.52.0/22 maxlen: 24
                          171.237.56.0/22 maxlen: 24
                          171.237.60.0/22 maxlen: 24
                          171.237.64.0/22 maxlen: 24
                          171.237.68.0/22 maxlen: 24
                          171.237.72.0/22 maxlen: 24
                          171.237.76.0/22 maxlen: 24
                          171.237.80.0/22 maxlen: 24
                          171.237.84.0/22 maxlen: 24
                          171.237.88.0/22 maxlen: 24
                          171.237.92.0/22 maxlen: 24
                          171.237.96.0/22 maxlen: 24
                          171.237.100.0/22 maxlen: 24
                          171.237.104.0/22 maxlen: 24
                          171.237.108.0/22 maxlen: 24
                          171.237.112.0/22 maxlen: 24
                          171.237.116.0/22 maxlen: 24
                          171.237.120.0/22 maxlen: 24
                          171.237.124.0/22 maxlen: 24
                          171.237.132.0/22 maxlen: 24
                          171.237.136.0/22 maxlen: 24
                          171.237.140.0/22 maxlen: 24
                          171.237.144.0/22 maxlen: 24
                          171.237.148.0/22 maxlen: 24
                          171.237.152.0/22 maxlen: 24
                          171.237.156.0/22 maxlen: 24
                          171.237.160.0/22 maxlen: 24
                          171.237.164.0/22 maxlen: 24
                          171.237.168.0/22 maxlen: 24
                          171.237.172.0/22 maxlen: 24
                          171.237.180.0/22 maxlen: 24
                          171.237.184.0/22 maxlen: 24
                          171.237.188.0/22 maxlen: 24
                          171.237.192.0/22 maxlen: 24
                          171.237.196.0/22 maxlen: 24
                          171.237.200.0/22 maxlen: 24
                          171.237.204.0/22 maxlen: 24
                          171.237.208.0/22 maxlen: 24
                          171.237.212.0/22 maxlen: 24
                          171.237.216.0/22 maxlen: 24
                          171.237.220.0/22 maxlen: 24
                          171.237.224.0/22 maxlen: 24
                          171.237.228.0/22 maxlen: 24
                          171.237.232.0/22 maxlen: 24
                          171.237.236.0/22 maxlen: 24
                          171.237.240.0/22 maxlen: 24
                          171.237.244.0/22 maxlen: 24
                          171.237.248.0/22 maxlen: 24
                          171.237.252.0/22 maxlen: 24
                          171.238.0.0/16 maxlen: 24
                          171.239.0.0/16 maxlen: 24
                          171.240.0.0/16 maxlen: 24
                          171.241.0.0/16 maxlen: 24
                          171.242.0.0/16 maxlen: 24
                          171.243.0.0/16 maxlen: 24
                          171.244.208.0/20 maxlen: 24
                          171.245.0.0/16 maxlen: 24
                          171.246.0.0/16 maxlen: 24
                          171.247.0.0/16 maxlen: 24
                          171.248.0.0/16 maxlen: 24
                          171.249.0.0/16 maxlen: 24
                          171.250.0.0/16 maxlen: 24
                          171.251.0.0/16 maxlen: 24
                          171.252.0.0/16 maxlen: 24
                          171.253.0.0/16 maxlen: 24
                          171.254.0.0/16 maxlen: 24
                          171.255.0.0/16 maxlen: 24
                          203.113.128.0/19 maxlen: 24
                          203.113.160.0/21 maxlen: 24
                          203.113.168.0/22 maxlen: 24
                          203.113.176.0/20 maxlen: 24
                          203.190.160.0/20 maxlen: 24
                          220.231.64.0/24 maxlen: 24
                          220.231.66.0/23 maxlen: 24
                          220.231.68.0/22 maxlen: 24
                          220.231.72.0/21 maxlen: 24
                          220.231.80.0/20 maxlen: 24
                          220.231.96.0/20 maxlen: 24
                          220.231.112.0/21 maxlen: 24
                          220.231.120.0/22 maxlen: 24
                          2401:d800::/32 maxlen: 48
                          2402:800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19451 (0x4bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jul 30 02:39:23 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=688985db-9e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:44:e3:48:eb:93:9e:86:87:20:18:5b:3a:9d:
                    28:db:22:48:d2:7c:8f:23:b8:2e:88:4b:53:07:38:
                    30:b5:b7:4f:90:4f:5c:7b:2b:12:95:1d:aa:e0:30:
                    3c:1e:cc:14:74:bc:5b:fc:11:63:6a:45:a9:41:14:
                    30:4f:26:be:69:3c:25:e1:52:35:76:cf:33:ad:1a:
                    34:6d:e1:5c:b1:83:23:c9:73:84:88:c5:90:89:d3:
                    31:66:b8:be:aa:72:96:60:73:59:6a:01:0f:6d:72:
                    f7:e0:b3:99:df:11:62:b5:db:0d:d2:bb:3b:fb:42:
                    9f:41:ab:88:db:aa:d4:75:96:e0:fe:c2:15:db:2e:
                    51:70:0f:f1:89:c2:ad:93:8d:81:2d:fa:85:80:bd:
                    6c:1c:d1:f5:44:46:cb:36:06:18:e3:ff:fb:02:77:
                    76:0a:a7:6f:8f:87:30:20:db:2c:e9:4a:e4:65:fb:
                    b1:85:df:d0:9e:81:09:a3:c2:92:5b:40:f5:9e:4d:
                    e5:e6:d1:af:87:e4:f4:c6:c4:9c:34:78:d9:c9:99:
                    18:a3:76:41:01:4d:1e:68:da:68:4b:d0:03:84:3c:
                    b9:9f:e7:5c:df:31:c2:f0:80:02:a9:f0:16:fb:23:
                    69:02:07:22:ef:36:21:fa:e0:64:b1:59:80:31:09:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:25:95:65:CD:0B:77:46:6C:88:95:C1:BB:AE:CE:8F:A9:DC:AA:E4
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F63CCCD66CED11F08EC76084C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.64.0.0-27.70.255.255
                  27.72.0.0/13
                  103.84.76.0/22
                  115.72.0.0/13
                  116.96.0.0-116.97.183.255
                  116.97.192.0-116.103.103.255
                  116.103.112.0-116.111.175.255
                  116.111.184.0/21
                  117.0.0.0-117.1.147.255
                  117.1.152.0-117.7.255.255
                  125.212.128.0-125.212.145.255
                  125.212.148.0-125.212.191.255
                  125.214.0.0/20
                  125.234.0.0-125.234.159.255
                  125.234.176.0-125.235.27.255
                  125.235.29.0-125.235.37.255
                  125.235.40.0-125.235.255.255
                  171.224.0.0-171.226.7.255
                  171.226.16.0-171.237.127.255
                  171.237.132.0-171.237.175.255
                  171.237.180.0-171.243.255.255
                  171.244.208.0/20
                  171.245.0.0-171.255.255.255
                  203.113.128.0-203.113.171.255
                  203.113.176.0/20
                  203.190.160.0/20
                  220.231.64.0/24
                  220.231.66.0-220.231.123.255
                IPv6:
                  2401:d800::/32
                  2402:800::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:cd:e1:b3:7e:9d:11:d6:47:31:75:d1:f9:0f:f6:eb:c6:40:
         ae:f2:6e:6c:60:8f:81:90:3b:2e:52:c0:5a:fa:a7:cf:13:fd:
         b1:6b:ed:71:5c:cf:87:42:09:fd:65:a3:7c:07:c8:50:70:7b:
         25:51:08:88:d9:9f:66:9f:8e:ef:51:89:0a:87:12:85:b0:c8:
         62:fc:ce:bd:e2:03:1a:53:2c:24:82:ad:c4:cd:8c:39:9f:ec:
         4e:3c:8c:9e:6f:76:c1:38:a6:ec:31:77:bb:65:7d:c5:ae:f8:
         43:7d:4e:df:89:7b:45:9c:68:04:55:c9:a5:68:b4:f0:0e:96:
         2f:1b:cb:f9:2f:42:66:ca:06:eb:14:d1:01:99:8d:34:fd:11:
         2f:1c:bf:43:84:0a:64:f7:6d:5b:93:44:c7:05:c0:f3:f6:c8:
         f2:59:b9:1e:fa:d7:16:fd:8a:16:b1:71:5b:12:c3:ca:a5:dc:
         ee:b7:32:f9:99:79:46:12:dd:7b:16:d5:e4:58:c4:53:c1:e7:
         06:fa:6d:ce:bc:29:11:69:60:fc:70:71:5f:08:55:26:0b:5d:
         67:09:e1:dc:b6:fc:03:6d:c9:b7:88:e7:c7:ab:74:76:25:e8:
         4b:22:c6:17:5d:a3:c7:b5:a7:3f:8f:ac:01:e5:5c:55:94:22:
         cf:4e:a9:e2
-----BEGIN CERTIFICATE-----
MIIGvDCCBaSgAwIBAgICS/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwNzMwMDIzOTIzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODg5ODVkYi05ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7ETjSOuTnoaHIBhbOp0o2yJI0nyPI7guiEtTBzgwtbdPkE9ceysSlR2q4DA8
HswUdLxb/BFjakWpQRQwTya+aTwl4VI1ds8zrRo0beFcsYMjyXOEiMWQidMxZri+
qnKWYHNZagEPbXL34LOZ3xFitdsN0rs7+0KfQauI26rUdZbg/sIV2y5RcA/xicKt
k42BLfqFgL1sHNH1REbLNgYY4//7And2Cqdvj4cwINss6UrkZfuxhd/QnoEJo8KS
W0D1nk3l5tGvh+T0xsScNHjZyZkYo3ZBAU0eaNpoS9ADhDy5n+dc3zHC8IACqfAW
+yNpAgci7zYh+uBksVmAMQm1TQIDAQABo4ID4DCCA9wwHQYDVR0OBBYEFNollWXN
C3dGbIiVwbuuzo+p3KrkMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRjYzQ0NDRDY2
Q0VEMTFGMDhFQzc2MDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFoBggrBgEFBQcBBwEB
/wSCAVcwggFTMIIBOQQCAAEwggExMAoDAwYbQAMDABtGAwMDG0gDBAJnVEwDAwNz
SDALAwMFdGADBAN0YbAwDAMEBnRhwAMEA3RnYDAMAwQEdGdwAwQEdG+gAwQDdG+4
MAoDAgB1AwQCdQGQMAsDBAN1AZgDAwN1ADAMAwQHfdSAAwQBfdSQMAwDBAJ91JQD
BAZ91IADBAR91gAwCwMDAX3qAwQFfeqAMAwDBAR96rADBAJ96xgwDAMEAH3rHQME
AX3rJDALAwQDfesoAwMCfegwCwMDBavgAwQDq+IAMAwDBASr4hADBAer7QAwDAME
AqvthAMEBKvtoDALAwQCq+20AwMCq/ADBASr9NAwCQMDAKv1AwICqDAMAwQHy3GA
AwQCy3GoAwQEy3GwAwQEy76gAwQA3OdAMAwDBAHc50IDBALc53gwFAQCAAIwDgMF
ACQB2AADBQAkAggAMA0GCSqGSIb3DQEBCwUAA4IBAQC8zeGzfp0R1kcxddH5D/br
xkCu8m5sYI+BkDsuUsBa+qfPE/2xa+1xXM+HQgn9ZaN8B8hQcHslUQiI2Z9mn47v
UYkKhxKFsMhi/M694gMaUywkgq3EzYw5n+xOPIyeb3bBOKbsMXe7ZX3FrvhDfU7f
iXtFnGgEVcmlaLTwDpYvG8v5L0JmygbrFNEBmY00/REvHL9DhApk921bk0THBcDz
9sjyWbke+tcW/YoWsXFbEsPKpdzutzL5mXlGEt17FtXkWMRTwecG+m3OvCkRaWD8
cHFfCFUmC11nCeHctvwDbcm3iOfHq3R2JehLIsYXXaPHtac/j6wB5VxVlCLPTqni
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:23:49 2025 by rpki-client