Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/E0A49ED259F611EE8157A844C4F9AE02.roa
File:                     E0A49ED259F611EE8157A844C4F9AE02.roa (raw, json)
Hash identifier:          dCNbANsd4MDuzLHQliuT0eJEmXKGsfIKSFQdj7Fzn6Y=
Subject key identifier:   32:CB:13:3E:6F:FD:4C:7D:9A:D7:EC:34:A1:06:AF:C6:D3:69:C0:2E
Certificate issuer:       /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial:       05EC
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/E0A49ED259F611EE8157A844C4F9AE02.roa
Signing time:             Sat 23 Sep 2023 09:54:23 +0000
ROA not before:           Sat 23 Sep 2023 09:54:23 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        103.104.140.0/24 maxlen: 24
                          103.104.142.0/24 maxlen: 24
                          103.104.143.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
        Validity
            Not Before: Sep 23 09:54:23 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=650eb5cf-7e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:82:32:cb:b7:cd:7f:f0:07:52:3a:2b:bd:
                    49:c3:db:b5:dc:83:0f:d3:44:96:fa:4a:e9:31:e8:
                    13:c6:47:9a:9f:f8:b3:19:f2:d5:79:c7:f5:14:0a:
                    ab:95:85:bf:9a:d1:c2:77:83:37:e2:a4:68:51:82:
                    5f:56:d4:39:0e:be:a6:d7:eb:ae:e1:0a:08:5b:ba:
                    0b:b3:13:b2:2c:b3:39:17:13:5e:77:78:9c:b3:d4:
                    46:9e:fb:b4:1e:9a:1b:88:24:29:7a:44:7d:44:49:
                    94:4f:5b:dd:b7:f0:68:b0:ef:1b:b7:c2:49:3b:2a:
                    ca:3a:e4:e6:a2:13:87:51:9c:f4:2d:48:15:d4:ea:
                    b1:38:1f:e8:1b:f9:a9:29:e0:d9:09:2d:51:e7:2e:
                    12:fa:e6:96:7d:da:a3:4f:69:f7:6a:3e:20:18:3d:
                    47:a8:d4:6e:22:52:a9:a8:a6:eb:d9:56:ba:81:6b:
                    c6:45:dc:62:76:eb:f5:45:0a:0c:b8:bb:de:39:65:
                    e9:c6:1d:51:41:b4:e3:25:78:0e:b2:4b:68:3e:e5:
                    00:3e:4e:20:67:0b:60:fa:87:e8:d0:8d:c3:20:e5:
                    49:9c:d8:8d:ad:46:ec:0d:2b:6f:5e:1e:32:a9:39:
                    f5:73:d3:e5:b2:88:6e:b2:0b:8a:69:03:3c:28:b1:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CB:13:3E:6F:FD:4C:7D:9A:D7:EC:34:A1:06:AF:C6:D3:69:C0:2E
            X509v3 Authority Key Identifier:
                keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/E0A49ED259F611EE8157A844C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.140.0/24
                  103.104.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:2a:4e:11:fd:0a:e9:e3:92:e4:44:52:9c:a6:c6:c9:85:
         51:97:20:48:e0:be:bd:e7:18:6f:6a:03:06:73:a7:7a:d3:d3:
         d0:9f:88:e0:f1:2f:b0:70:39:99:80:df:31:ec:0f:3a:3c:09:
         34:c2:61:0c:6e:3a:16:28:0b:ed:4e:df:4d:29:50:22:db:15:
         27:bd:bd:79:c9:97:77:7b:e5:5a:d1:ed:2f:ae:c1:ff:4c:38:
         75:de:92:de:81:85:76:6f:de:09:66:bc:d3:8a:f3:65:4e:4f:
         e6:f3:12:94:95:9d:0c:5e:92:d7:cb:f0:60:0e:87:05:11:cf:
         37:56:f1:be:bc:b6:50:39:78:bb:a0:52:dd:98:49:0e:bd:bb:
         4a:13:03:d5:e8:ba:ab:d2:fb:01:d7:1e:56:8f:ca:19:5c:7e:
         83:b8:13:6d:ed:02:f7:38:4d:d3:d4:58:aa:7c:52:cc:44:36:
         b9:d4:62:33:6a:eb:95:65:d2:94:45:b2:bd:f7:02:66:1e:1d:
         77:d8:8a:60:86:21:5e:ed:c3:8d:64:5d:7f:d0:33:93:a0:df:
         39:83:d0:09:93:5f:99:df:20:d2:e9:69:54:69:20:9d:60:5a:
         32:c9:91:c0:7e:d2:06:12:70:38:63:0e:51:e4:96:46:d8:5b:
         70:4d:4d:ef
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ4MDgxMTAvBgNVBAUTKDA3MjVGMjQ5MTgwMTUwNTE4NUM5MDY5QTQwMTM2MzVD
MzhCNTZCNzIwHhcNMjMwOTIzMDk1NDIzWhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBlYjVjZi03ZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3tuCMsu3zX/wB1I6K71Jw9u13IMP00SW+krpMegTxkean/izGfLVecf1FAqr
lYW/mtHCd4M34qRoUYJfVtQ5Dr6m1+uu4QoIW7oLsxOyLLM5FxNed3ics9RGnvu0
HpobiCQpekR9REmUT1vdt/BosO8bt8JJOyrKOuTmohOHUZz0LUgV1OqxOB/oG/mp
KeDZCS1R5y4S+uaWfdqjT2n3aj4gGD1HqNRuIlKpqKbr2Va6gWvGRdxiduv1RQoM
uLveOWXpxh1RQbTjJXgOsktoPuUAPk4gZwtg+ofo0I3DIOVJnNiNrUbsDStvXh4y
qTn1c9PlsohusguKaQM8KLE9TwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDLLEz5v
/Ux9mtfsNKEGr8bTacAuMB8GA1UdIwQYMBaAFAcl8kkYAVBRhckGmkATY1w4tWty
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDgwOC9FMjZCNDY0MkY0
QjIxMUU5QkYzQ0U1NjNDNEY5QUUwMi9CeVh5U1JnQlVGR0Z5UWFhUUJOalhEaTFh
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5WHlTUmdCVUZHRnlRYWFRQk5qWERpMWEzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQ4MDgvRTI2QjQ2NDJGNEIyMTFFOUJGM0NFNTYzQzRGOUFFMDIvRTBBNDlFRDI1
OUY2MTFFRTgxNTdBODQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnaIwDBAFnaI4wDQYJKoZIhvcNAQELBQADggEBAEU+Kk4R
/Qrp45LkRFKcpsbJhVGXIEjgvr3nGG9qAwZzp3rT09CfiODxL7BwOZmA3zHsDzo8
CTTCYQxuOhYoC+1O300pUCLbFSe9vXnJl3d75VrR7S+uwf9MOHXekt6BhXZv3glm
vNOK82VOT+bzEpSVnQxektfL8GAOhwURzzdW8b68tlA5eLugUt2YSQ69u0oTA9Xo
uqvS+wHXHlaPyhlcfoO4E23tAvc4TdPUWKp8UsxENrnUYjNq65Vl0pRFsr33AmYe
HXfYimCGIV7tw41kXX/QM5Og3zmD0AmTX5nfINLpaVRpIJ1gWjLJkcB+0gYScDhj
DlHklkbYW3BNTe8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:26 2024 by rpki-client on console-ams.rpki-client.org