Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/B8B98FA0DC5111EC90C2B55FC4F9AE02.roa
File:                     B8B98FA0DC5111EC90C2B55FC4F9AE02.roa (raw, json)
Hash identifier:          +KkC3NTweWLxXPz+fZTL/zMM1zadZQaeV4QrP61+DB4=
Subject key identifier:   D2:D9:32:25:CF:FA:D0:D7:19:CB:E2:82:61:F1:C4:15:87:3B:96:12
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3ABC
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/B8B98FA0DC5111EC90C2B55FC4F9AE02.roa
Signing time:             Thu 26 May 2022 04:40:09 +0000
ROA not before:           Thu 26 May 2022 04:40:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15036 (0x3abc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: May 26 04:40:09 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=628f04a9-f9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:d9:1b:49:c3:4a:5f:79:09:3f:84:57:e2:
                    ad:58:78:49:2b:04:6d:c5:4b:47:d3:f8:d0:43:85:
                    28:78:be:1b:30:a1:0d:d8:be:a5:17:1c:ea:fc:34:
                    53:e6:d2:f6:c5:b3:97:30:ea:78:f4:10:b0:cb:bd:
                    73:a0:f9:1a:83:88:04:b4:66:b0:20:fa:29:4f:41:
                    60:d4:76:e5:9a:a5:25:a8:41:3e:ee:a0:b6:cc:2a:
                    68:03:d9:a9:b8:23:da:8f:38:72:ec:6e:ca:20:f5:
                    df:b1:a7:70:62:e2:dc:65:bd:5d:5b:b3:f6:95:0b:
                    34:8f:fe:50:57:95:2d:65:cc:13:00:94:be:6f:4d:
                    82:0e:a0:61:51:9c:8c:07:2c:23:c2:4e:92:ea:8a:
                    6a:8b:dc:70:c5:43:9c:41:3e:b6:7d:35:14:4e:4a:
                    43:81:5b:3c:e6:7f:3b:d9:44:35:33:0b:b3:d1:37:
                    98:f1:89:e1:8a:a3:0a:9a:14:01:de:1d:07:d4:53:
                    83:4c:fd:f9:8e:05:e9:92:c7:a6:b8:da:3e:db:c8:
                    71:89:04:f1:b6:e3:fc:0b:20:10:d6:a5:c5:8d:09:
                    b1:66:ba:59:88:e0:7c:75:ef:f9:e4:4b:e6:a9:70:
                    ce:98:5a:46:17:9e:ea:cc:e9:6a:97:8f:bc:d5:2c:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D9:32:25:CF:FA:D0:D7:19:CB:E2:82:61:F1:C4:15:87:3B:96:12
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/B8B98FA0DC5111EC90C2B55FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         c8:b3:b9:5a:d5:f2:45:8f:97:94:0e:38:d8:72:2c:0d:82:e4:
         02:24:ee:14:05:28:b6:78:d7:7c:fb:8c:a2:c2:bc:56:42:cd:
         84:49:2b:f9:0e:f8:70:83:e5:9a:f1:f2:28:f0:c4:11:35:a9:
         b8:5e:8c:f8:9b:e1:fe:d6:65:47:5c:df:a4:74:af:e9:bd:82:
         91:2a:01:1b:42:2a:22:7f:5e:4e:0d:d4:cd:f1:1c:4c:dc:e3:
         ea:89:86:9a:18:b7:2a:c2:3c:94:bd:03:8e:cc:f6:25:ca:a9:
         1c:18:96:5f:ef:6c:ed:b9:76:1b:9f:95:4c:24:62:82:54:47:
         9c:b1:5a:c0:96:26:ef:9a:7b:4c:76:cc:c0:25:04:43:8b:c3:
         10:09:e4:7e:b1:ac:49:a6:ec:2e:3f:2e:b8:36:f0:d3:a0:d4:
         1a:46:ee:3f:1b:2c:df:55:fb:54:70:23:75:a5:47:8e:f6:7e:
         f6:50:7e:0d:86:03:47:60:56:df:a3:7b:ad:4c:14:a2:a3:9a:
         09:cf:f3:e2:8c:b4:98:f0:2f:bf:75:a4:29:ea:0e:5c:c3:aa:
         7e:c7:99:d5:65:d4:3d:ab:c8:bb:e2:d0:a7:bb:c0:2c:a3:da:
         f4:77:ab:17:96:a8:e2:f5:25:fb:03:78:70:35:53:8d:20:5b:
         be:2f:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org