Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/B310D714778A11ED9BC70C33C4F9AE02.roa
File:                     B310D714778A11ED9BC70C33C4F9AE02.roa (raw, json)
Hash identifier:          qwaX9W4ITtJvlRJFYcDaglBcVS7JLCQUi1lJwZISzUQ=
Subject key identifier:   0E:36:1A:BD:56:03:75:58:57:A5:85:28:25:A1:82:11:95:AF:55:60
Certificate issuer:       /CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B
Certificate serial:       0738
Authority key identifier: 6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/B310D714778A11ED9BC70C33C4F9AE02.roa
Signing time:             Wed 18 Jan 2023 07:10:04 +0000
ROA not before:           Wed 18 Jan 2023 07:10:04 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     55342
IP address blocks:        103.157.184.0/23 maxlen: 24
                          183.81.170.0/23 maxlen: 23
                          2406:2940::/32 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B
        Validity
            Not Before: Jan 18 07:10:04 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=63c79b4b-7eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:f9:6a:4d:1f:ed:ef:8c:ce:bd:2b:82:ee:
                    62:fc:80:b0:62:36:33:f2:bf:f6:51:ca:3a:fb:a5:
                    19:e6:09:af:06:79:9a:03:ef:88:97:e7:3e:d9:45:
                    fa:80:23:f5:81:60:8d:dd:47:21:f0:44:c0:30:70:
                    fc:23:4e:ac:f7:f7:22:13:79:80:4d:b4:63:4f:33:
                    14:b7:f9:f2:ef:90:84:a2:53:d9:bc:85:7d:32:ed:
                    a8:b5:b3:34:6c:38:62:02:8a:3e:fd:f5:eb:e2:e9:
                    c7:72:18:70:4e:e3:39:44:a8:d9:ae:24:fb:45:6c:
                    76:a0:5a:ff:fd:1f:7c:a4:8e:e9:9d:b4:e0:4b:84:
                    8c:34:2e:e6:d9:e5:cf:ab:61:fd:b0:45:f8:bb:e6:
                    f8:5c:a9:5c:37:1b:63:d6:a6:8a:f4:3b:fe:53:64:
                    14:b7:48:62:ed:5c:fb:92:7d:3d:e7:c8:2c:f1:3b:
                    e9:0b:c7:ec:ec:c0:24:c4:21:ec:66:04:5a:c5:6b:
                    fe:74:67:40:3d:ef:26:f9:09:f5:fd:1f:14:22:bd:
                    4e:4b:27:c5:08:f2:9b:51:66:1e:0b:7e:65:32:1a:
                    cf:46:05:4a:d0:8d:1c:5c:20:b2:44:bf:7b:45:e8:
                    f5:7b:5e:b8:88:71:4c:98:4a:dd:6a:fc:4c:a4:a1:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:36:1A:BD:56:03:75:58:57:A5:85:28:25:A1:82:11:95:AF:55:60
            X509v3 Authority Key Identifier:
                keyid:6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/B310D714778A11ED9BC70C33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.184.0/23
                  183.81.170.0/23
                IPv6:
                  2406:2940::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:12:a2:ef:8b:6c:07:15:d3:0e:2c:5e:9e:9a:c1:a6:e7:
         e2:b3:2e:94:38:0e:b2:4c:5a:be:0a:d0:43:0a:9d:01:08:14:
         41:51:22:bf:50:eb:90:2d:56:26:b6:62:a2:d6:73:56:ae:4c:
         d2:1c:bc:05:9c:c7:fe:fc:d7:6d:de:31:ad:ac:1f:fe:75:f3:
         d6:c9:58:c2:e9:09:c3:f6:74:4c:15:0d:8d:d4:47:fb:ba:e1:
         ea:bb:0e:29:a0:87:fc:9f:6c:07:70:67:3d:61:9c:c2:70:e1:
         36:06:e0:5d:22:a1:52:6c:21:a0:ae:ac:af:6a:75:b2:81:3a:
         60:30:a1:b6:56:f7:1b:25:18:8d:8a:d4:d5:37:6a:4b:0f:f1:
         08:80:f5:6f:9f:71:42:24:43:80:ff:69:a9:3a:35:02:32:10:
         ff:f1:c2:36:b7:91:40:90:9d:ce:6a:e7:4a:f7:fb:02:95:c1:
         93:1d:de:ca:72:6b:64:bf:91:36:50:76:15:d6:77:cd:ce:ad:
         b2:b5:94:46:1a:30:f5:af:a1:e2:47:65:07:54:25:c5:10:cf:
         40:53:de:35:eb:06:9f:86:dd:24:0e:f5:b7:2d:7f:a2:a6:32:
         0e:b4:a2:28:c3:e9:a8:68:76:fc:42:8e:a5:20:bf:be:26:fd:
         7c:58:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----