Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/1D16F22C03CF11ED949DFE3EC4F9AE02.roa
File:                     1D16F22C03CF11ED949DFE3EC4F9AE02.roa (raw, json)
Hash identifier:          9wzEYLFZtsfNUasCTdPqj84iQL8ayFI5fkYF/i/NOUo=
Subject key identifier:   30:6F:34:8B:7C:12:51:CC:A6:18:86:1F:69:EA:DB:D0:CA:66:D0:5B
Certificate issuer:       /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
Certificate serial:       0A0A
Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/1D16F22C03CF11ED949DFE3EC4F9AE02.roa
Signing time:             Thu 14 Jul 2022 23:46:00 +0000
ROA not before:           Thu 14 Jul 2022 23:46:00 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     139074
IP address blocks:        103.139.78.0/23 maxlen: 23
                          2404:ddc0:6000::/36 maxlen: 36
                          2404:ddc0:aa00::/40 maxlen: 40
                          2404:ddc0:af00::/40 maxlen: 40
                          2404:ddc0:fa00::/40 maxlen: 40
                          2404:ddc0:ff00::/40 maxlen: 40
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570 (0xa0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
        Validity
            Not Before: Jul 14 23:46:00 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62d0aab8-d36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:86:59:a9:82:34:49:08:12:9f:1d:0a:46:
                    02:eb:2b:c3:0b:df:e7:04:ff:65:ec:64:6a:fb:71:
                    e9:54:8f:33:11:0f:08:98:9d:10:7f:97:0a:5d:ea:
                    6e:0d:cb:56:57:2b:85:75:24:a1:64:4f:46:2e:44:
                    00:cb:9a:4c:03:8d:6f:27:e8:57:8c:91:6e:3e:22:
                    e3:f3:be:38:25:00:b4:51:02:14:f2:65:c8:7b:89:
                    59:10:4f:1b:05:ba:bd:b4:df:c3:58:b3:0d:7c:bd:
                    68:45:02:9c:9c:4c:f2:bd:cb:4d:54:fb:f1:ed:77:
                    10:71:f0:b6:9b:2a:d5:f5:65:d0:62:0d:9e:56:67:
                    43:53:0f:36:b2:ed:eb:0f:b2:76:8a:a4:b9:67:54:
                    de:9f:e8:77:1d:ba:50:92:94:9d:85:ce:09:47:79:
                    3f:2f:69:30:0e:fd:bc:96:37:05:b7:fd:63:95:9d:
                    fe:79:49:19:12:ed:92:1b:18:7b:2a:4d:66:81:6a:
                    21:1e:b0:f3:7c:ef:a1:37:cd:8c:21:16:03:84:12:
                    1c:18:1a:9c:f7:3c:d2:5b:d9:5e:a2:44:c1:6f:84:
                    83:ad:81:f0:23:b6:3b:dd:61:91:f9:3a:88:46:f2:
                    49:0e:66:7b:f7:fa:af:e9:0c:5c:b7:85:ab:d5:18:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6F:34:8B:7C:12:51:CC:A6:18:86:1F:69:EA:DB:D0:CA:66:D0:5B
            X509v3 Authority Key Identifier:
                keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/1D16F22C03CF11ED949DFE3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.78.0/23
                IPv6:
                  2404:ddc0:6000::/36
                  2404:ddc0:aa00::/40
                  2404:ddc0:af00::/40
                  2404:ddc0:fa00::/40
                  2404:ddc0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:4f:02:7c:00:80:e0:55:0a:b2:ed:6f:d8:f3:5a:e5:82:cc:
         6d:e3:3d:7d:6c:ab:a8:0d:a5:21:2c:51:53:92:0a:ad:eb:40:
         0c:fb:7e:c4:35:85:52:a5:0d:26:a2:0c:28:52:12:f8:58:e3:
         e8:68:6f:3f:b5:19:97:31:bc:99:44:ea:cf:9b:be:75:c6:e5:
         7e:d9:10:83:d6:f4:a0:7b:da:d0:73:62:39:37:bb:89:69:91:
         06:81:0a:04:31:ec:87:b9:ad:ec:02:dd:18:2c:8f:81:fd:e7:
         3d:73:77:7a:09:35:01:e5:23:0f:15:c9:28:64:31:d7:5e:91:
         75:22:29:d7:33:35:46:9e:52:7c:ca:4c:15:df:ad:30:d3:59:
         36:84:38:8c:a0:b6:cb:2e:8f:09:9f:d0:99:75:dc:b8:66:24:
         a2:34:e6:9d:5f:09:77:7a:ea:c0:5f:f8:d6:ca:19:50:f3:b1:
         a5:61:ef:d0:d4:ad:ca:36:73:b9:d8:83:5a:b2:59:ac:7b:d9:
         df:d6:b3:f4:2c:3f:6a:d7:09:15:23:5b:43:03:ec:51:bb:80:
         1d:de:e7:c9:ec:13:bb:bb:ef:ad:dd:47:58:5a:90:3f:20:1a:
         63:5e:5d:11:68:36:c9:de:be:ff:0a:5d:8e:a8:60:1e:0b:83:
         d7:25:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----