Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/FB1F5184B10111ECBCA0917EC4F9AE02.roa
File:                     FB1F5184B10111ECBCA0917EC4F9AE02.roa (raw, json)
Hash identifier:          yd3iApo0F6CMzsPzGViq3OdUHy6r8BPY+0iPzLXsdf0=
Subject key identifier:   AE:14:A5:E3:E3:30:3F:F6:AE:FA:A4:16:7D:00:F9:18:E5:A6:92:9F
Certificate issuer:       /CN=A914C07F/serialNumber=D91F77BE22011D7E1D575D9F9ADB5F8E160E5FD9
Certificate serial:       05D6
Authority key identifier: D9:1F:77:BE:22:01:1D:7E:1D:57:5D:9F:9A:DB:5F:8E:16:0E:5F:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2R93viIBHX4dV12fmttfjhYOX9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/FB1F5184B10111ECBCA0917EC4F9AE02.roa
Signing time:             Thu 10 Nov 2022 23:29:37 +0000
ROA not before:           Thu 10 Nov 2022 23:29:37 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     136545
IP address blocks:        103.101.176.0/22 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C07F/serialNumber=D91F77BE22011D7E1D575D9F9ADB5F8E160E5FD9
        Validity
            Not Before: Nov 10 23:29:37 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=636d8961-2750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:f2:44:bb:3f:f0:c6:cd:35:57:1b:2e:26:
                    89:b7:39:69:7b:d2:6f:56:51:b4:7b:63:5b:a9:97:
                    e1:4a:fc:73:73:dd:f5:84:6c:7c:62:db:ed:a2:eb:
                    d7:45:53:ec:37:16:9d:93:05:1f:97:8d:cc:a3:37:
                    70:31:33:71:83:fa:20:a5:c0:c2:0e:8e:0e:42:ac:
                    52:da:41:8a:37:9e:7f:38:c6:58:5b:ad:07:47:76:
                    d4:3f:92:85:62:7f:cf:0d:1e:40:a6:e5:62:51:22:
                    e1:51:f0:1b:cf:e9:cf:ea:ba:6c:2e:29:4c:05:4a:
                    a0:33:0d:e1:75:02:4e:3f:c2:7d:c0:c7:c2:31:e2:
                    19:c9:c0:20:35:8c:b8:5f:0c:64:d0:53:af:fb:2e:
                    94:b5:92:14:0e:22:37:e3:cf:f3:00:52:bd:95:b5:
                    73:99:56:de:ab:e7:c7:34:5b:9e:6a:68:9a:28:71:
                    5d:30:79:32:c8:69:9c:3d:2e:bd:03:db:0f:63:7e:
                    15:c0:cf:6b:29:9b:b6:b0:ec:d7:cc:36:13:52:f6:
                    dd:9f:32:12:eb:e7:ff:29:9c:4c:0b:e0:51:6b:cd:
                    e7:16:fb:88:50:89:ce:8f:a5:f6:08:99:88:4b:1a:
                    69:12:98:51:d1:03:40:ed:48:f7:12:19:89:c8:03:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:A5:E3:E3:30:3F:F6:AE:FA:A4:16:7D:00:F9:18:E5:A6:92:9F
            X509v3 Authority Key Identifier:
                keyid:D9:1F:77:BE:22:01:1D:7E:1D:57:5D:9F:9A:DB:5F:8E:16:0E:5F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/2R93viIBHX4dV12fmttfjhYOX9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2R93viIBHX4dV12fmttfjhYOX9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/FB1F5184B10111ECBCA0917EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:21:29:85:59:de:08:44:10:c8:12:45:e4:ad:05:81:7f:4a:
         d6:6d:95:a8:08:ed:25:38:4b:01:9f:5a:e3:36:77:d5:84:eb:
         3d:c4:48:4a:97:2f:c8:87:76:61:08:e6:e1:86:64:9a:5e:0b:
         48:3f:57:15:bb:23:46:2f:1d:e8:ad:f0:4b:f9:c0:73:ff:a3:
         f5:47:6c:d3:00:4f:f1:ce:78:90:a9:99:8e:5f:d5:0b:44:0c:
         a8:89:fc:46:df:d8:4e:c9:cb:c6:a9:09:94:81:6b:c5:20:73:
         d4:19:80:e5:e3:6e:23:68:79:02:b3:ac:45:a3:ed:b8:eb:e7:
         7c:65:0d:05:d3:1a:85:68:29:4f:79:e4:64:58:fe:ea:b4:bb:
         db:a0:6f:40:a6:3e:86:86:8a:2f:c6:bd:2f:f1:95:5d:13:cc:
         db:b6:0c:66:45:a6:29:1e:ab:5d:3f:d8:79:b6:84:f4:02:e9:
         e9:d6:9e:1f:8d:37:eb:e4:3a:fd:d2:fa:7d:aa:8f:6e:f6:b3:
         74:ac:86:08:79:83:39:c3:01:f5:67:6c:e3:74:c6:60:c4:0e:
         35:ef:97:46:73:b8:3f:50:ff:fa:3d:c0:cd:02:79:c7:68:4c:
         13:c3:ed:2f:ee:e3:6c:94:5b:0b:9b:7c:b1:cf:b7:ed:b4:da:
         3a:4d:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----