Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6279C726579A11ED9BDD7233C4F9AE02.roa
File:                     6279C726579A11ED9BDD7233C4F9AE02.roa (raw, json)
Hash identifier:          tQZC3maO31cVsk//dTRQYfbWmIwl0v2fsbZCe7OiVNA=
Subject key identifier:   3B:85:5C:F0:B0:05:7D:7E:C5:C4:57:AE:FC:71:E8:C4:99:E5:97:CB
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3D3C
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6279C726579A11ED9BDD7233C4F9AE02.roa
Signing time:             Sat 29 Oct 2022 15:00:11 +0000
ROA not before:           Sat 29 Oct 2022 15:00:11 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15676 (0x3d3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Oct 29 15:00:11 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=635d3ffb-42cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:23:75:a7:13:7d:b1:af:b3:e9:5a:f1:6b:
                    c2:32:af:27:95:76:bb:bf:00:33:e4:37:73:2c:19:
                    2b:66:4b:6f:46:d7:cb:3e:43:6c:8b:17:fe:76:b4:
                    03:9c:a6:c4:bd:ba:4e:9d:92:e1:7c:26:a5:0f:79:
                    b1:f2:ff:68:2f:fc:3a:ad:51:8b:fa:ee:b4:16:35:
                    94:bf:dc:7f:b8:11:1c:22:8a:b3:89:10:9a:23:14:
                    aa:5f:99:0b:f9:b0:b9:16:d5:61:74:26:bc:93:5e:
                    03:30:9c:1b:4e:9e:1d:2c:6c:94:67:5d:70:1f:65:
                    38:b5:61:ea:68:d1:b8:84:d5:a5:f7:a9:96:27:4a:
                    3d:99:67:e9:31:8f:c1:6e:2e:14:80:a3:6d:8b:de:
                    c6:ce:b3:16:ab:ab:16:c7:93:60:a2:57:0f:63:d0:
                    b3:48:3c:e7:04:10:bf:0b:3e:44:a5:06:70:2e:90:
                    03:17:6f:7e:6a:21:63:f3:58:c4:a3:cc:d3:e5:d8:
                    bc:19:d7:d3:35:e1:12:b9:3f:27:7f:de:51:ff:45:
                    f6:39:8e:33:e7:ab:12:e9:fc:06:ca:41:db:1a:c2:
                    cd:3c:8f:57:1f:d4:ac:86:76:7d:06:53:6f:e1:91:
                    e5:32:4f:0d:a5:8a:ef:cf:aa:54:56:9f:0c:f8:7f:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:85:5C:F0:B0:05:7D:7E:C5:C4:57:AE:FC:71:E8:C4:99:E5:97:CB
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6279C726579A11ED9BDD7233C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/24
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         c3:d0:db:4e:33:df:88:50:39:3e:8a:78:5b:cb:bf:35:b8:fd:
         e0:67:c1:0b:c1:78:66:2d:a6:26:06:0a:06:ad:9c:da:c6:d9:
         4d:12:a9:82:78:8e:7a:0a:7e:30:d7:09:dc:ad:ed:c7:70:8c:
         ba:c7:e6:16:15:1c:55:a7:e0:a4:a8:73:3f:da:39:21:2e:91:
         d6:da:5a:7d:83:01:48:0c:58:63:7f:96:f5:d7:fc:45:3c:c4:
         df:d4:f8:f3:18:29:28:d9:96:14:fb:04:3d:0d:60:67:9d:41:
         ef:6e:dc:8c:94:76:b5:20:eb:2c:28:42:de:7d:09:62:7a:6d:
         c0:b9:94:fc:94:b5:32:78:96:91:0a:c9:69:a2:02:6f:24:66:
         57:8e:90:c7:81:a5:83:72:b8:4c:ef:10:5e:4f:77:d8:8d:68:
         52:7c:45:df:1a:19:c4:5c:05:f3:8d:05:2e:63:a5:c5:15:49:
         b9:78:b8:47:d4:77:ff:96:a6:f5:f7:d2:cb:d0:ca:82:85:af:
         f2:29:17:2e:fd:c1:a8:2b:d7:7c:7b:4c:63:f0:31:ca:ce:9d:
         c4:57:24:51:9b:cc:5d:9c:d6:fc:5b:73:eb:fe:83:d8:de:2b:
         f8:42:b7:2e:98:4e:4b:2d:78:b3:07:ee:69:4d:9d:ef:58:50:
         ed:57:91:d3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICPTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjIxMDI5MTUwMDExWhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzVkM2ZmYi00MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zsjdacTfbGvs+la8WvCMq8nlXa7vwAz5DdzLBkrZktvRtfLPkNsixf+drQD
nKbEvbpOnZLhfCalD3mx8v9oL/w6rVGL+u60FjWUv9x/uBEcIoqziRCaIxSqX5kL
+bC5FtVhdCa8k14DMJwbTp4dLGyUZ11wH2U4tWHqaNG4hNWl96mWJ0o9mWfpMY/B
bi4UgKNti97GzrMWq6sWx5NgolcPY9CzSDznBBC/Cz5EpQZwLpADF29+aiFj81jE
o8zT5di8GdfTNeESuT8nf95R/0X2OY4z56sS6fwGykHbGsLNPI9XH9SshnZ9BlNv
4ZHlMk8NpYrvz6pUVp8M+H9gVwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDuFXPCw
BX1+xcRXrvxx6MSZ5ZfLMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvNjI3OUM3MjY1
NzlBMTFFRDlCREQ3MjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnq9owDwQCAAIwCQMHASABDfdTgDANBgkqhkiG9w0BAQsF
AAOCAQEAw9DbTjPfiFA5Pop4W8u/Nbj94GfBC8F4Zi2mJgYKBq2c2sbZTRKpgniO
egp+MNcJ3K3tx3CMusfmFhUcVafgpKhzP9o5IS6R1tpafYMBSAxYY3+W9df8RTzE
39T48xgpKNmWFPsEPQ1gZ51B727cjJR2tSDrLChC3n0JYnptwLmU/JS1MniWkQrJ
aaICbyRmV46Qx4Glg3K4TO8QXk932I1oUnxF3xoZxFwF840FLmOlxRVJuXi4R9R3
/5am9ffSy9DKgoWv8ikXLv3BqCvXfHtMY/Axys6dxFckUZvMXZzW/Ftz6/6D2N4r
+EK3LphOSy14swfuaU2d71hQ7VeR0w==
-----END CERTIFICATE-----