Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2DF5404AF44111ED835FDB78C4F9AE02.roa
File:                     2DF5404AF44111ED835FDB78C4F9AE02.roa (raw, json)
Hash identifier:          PHqhyznYLyw89l+KyBk+XmYq7U2FwR1oHS6BPX+61ds=
Subject key identifier:   FA:FE:61:AD:9D:53:17:52:8C:8A:24:4A:42:BF:E1:12:79:7B:8D:21
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       16B0
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2DF5404AF44111ED835FDB78C4F9AE02.roa
Signing time:             Thu 18 May 2023 07:17:02 +0000
ROA not before:           Thu 18 May 2023 07:17:02 +0000
ROA not after:            Wed 01 May 2024 00:00:00 +0000
asID:                     9443
IP address blocks:        14.137.64.0/18 maxlen: 18
                          14.137.192.0/19 maxlen: 19
                          58.178.0.0/16 maxlen: 16
                          58.179.0.0/16 maxlen: 16
                          111.220.0.0/16 maxlen: 16
                          112.141.0.0/16 maxlen: 16
                          112.213.128.0/18 maxlen: 18
                          116.240.0.0/16 maxlen: 16
                          121.79.126.0/23 maxlen: 23
                          122.148.0.0/16 maxlen: 16
                          122.149.0.0/16 maxlen: 16
                          122.150.0.0/16 maxlen: 16
                          122.151.0.0/16 maxlen: 16
                          123.2.0.0/16 maxlen: 16
                          123.3.0.0/16 maxlen: 16
                          125.168.0.0/16 maxlen: 16
                          202.4.64.0/19 maxlen: 19
                          202.14.191.0/24 maxlen: 24
                          202.14.192.0/22 maxlen: 22
                          202.61.12.0/24 maxlen: 24
                          202.61.13.0/24 maxlen: 24
                          202.62.128.0/19 maxlen: 21
                          202.67.64.0/18 maxlen: 18
                          202.76.128.0/18 maxlen: 18
                          202.86.113.0/24 maxlen: 24
                          202.86.114.0/23 maxlen: 23
                          202.86.116.0/23 maxlen: 23
                          202.86.118.0/24 maxlen: 24
                          202.128.112.0/20 maxlen: 20
                          202.128.114.0/23 maxlen: 23
                          202.130.195.0/24 maxlen: 24
                          202.130.203.0/24 maxlen: 24
                          202.130.205.0/24 maxlen: 24
                          202.130.214.0/24 maxlen: 24
                          202.130.217.0/24 maxlen: 24
                          202.136.32.0/20 maxlen: 20
                          202.138.0.0/18 maxlen: 18
                          202.147.128.0/20 maxlen: 20
                          202.154.64.0/18 maxlen: 18
                          203.16.9.0/24 maxlen: 24
                          203.16.170.0/24 maxlen: 24
                          203.21.47.0/24 maxlen: 24
                          203.21.104.0/24 maxlen: 24
                          203.23.116.0/24 maxlen: 24
                          203.24.100.0/23 maxlen: 23
                          203.30.143.0/24 maxlen: 24
                          203.30.211.0/24 maxlen: 24
                          203.34.15.0/24 maxlen: 24
                          203.56.5.0/24 maxlen: 24
                          203.57.110.0/24 maxlen: 24
                          203.62.135.0/24 maxlen: 24
                          203.91.224.0/19 maxlen: 19
                          203.91.224.0/20 maxlen: 20
                          203.91.240.0/21 maxlen: 21
                          203.123.64.0/20 maxlen: 20
                          203.132.224.0/19 maxlen: 19
                          203.134.0.0/17 maxlen: 17
                          203.134.128.0/18 maxlen: 18
                          203.142.128.0/19 maxlen: 19
                          203.161.160.0/20 maxlen: 20
                          203.190.192.0/20 maxlen: 20
                          203.191.160.0/19 maxlen: 19
                          203.212.128.0/19 maxlen: 19
                          210.50.0.0/16 maxlen: 16
                          210.86.240.0/20 maxlen: 20
                          211.26.0.0/16 maxlen: 16
                          211.27.0.0/16 maxlen: 16
                          218.214.0.0/16 maxlen: 16
                          218.215.0.0/16 maxlen: 16
                          2403:4800::/32 maxlen: 32
                          2403:9e00::/32 maxlen: 32
                          2403:fc00::/32 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5808 (0x16b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: May 18 07:17:02 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=6465d0ed-b52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:6d:7c:14:be:c8:a4:03:dc:8f:e1:b9:6c:
                    93:2f:00:1a:f6:dd:70:51:3d:05:05:33:56:61:aa:
                    7b:7c:5c:ab:93:c6:47:cc:9c:33:e0:80:3c:82:c2:
                    fd:b4:22:ed:d9:5b:b1:87:69:53:70:0d:ab:81:e8:
                    3d:2a:a8:3c:92:d4:74:1a:20:26:e8:a4:4d:70:02:
                    b0:49:43:27:01:bd:56:df:2e:88:1a:f6:4a:7b:7b:
                    3e:4c:77:6f:21:d0:96:b8:86:2e:9b:b8:79:fa:fc:
                    84:fc:ba:51:10:b2:8d:3f:b0:21:c5:34:8d:16:61:
                    b9:6e:40:3f:13:9d:b7:bc:0f:fa:11:6f:32:c1:17:
                    51:44:8f:92:7f:1e:43:f1:48:e1:45:02:26:b9:ef:
                    c8:90:b3:3e:08:8c:fc:ba:62:ed:ef:b1:64:cd:34:
                    02:b5:e6:03:46:1c:4c:6d:cf:c7:58:87:de:ca:f5:
                    be:55:2b:76:65:ed:d7:0d:3b:7d:03:c0:70:1c:32:
                    86:7b:37:0b:0e:a9:f3:70:a1:b7:3c:04:c5:fb:ef:
                    82:22:75:02:bd:35:5d:63:bf:19:2f:85:c9:8f:73:
                    e0:aa:d1:6c:b8:8f:c8:ce:29:73:40:00:fb:09:43:
                    03:35:77:4f:35:4c:8c:70:c7:b4:5f:8b:68:74:e9:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:61:AD:9D:53:17:52:8C:8A:24:4A:42:BF:E1:12:79:7B:8D:21
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2DF5404AF44111ED835FDB78C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.64.0/18
                  14.137.192.0/19
                  58.178.0.0/15
                  111.220.0.0/16
                  112.141.0.0/16
                  112.213.128.0/18
                  116.240.0.0/16
                  121.79.126.0/23
                  122.148.0.0/14
                  123.2.0.0/15
                  125.168.0.0/16
                  202.4.64.0/19
                  202.14.191.0-202.14.195.255
                  202.61.12.0/23
                  202.62.128.0/19
                  202.67.64.0/18
                  202.76.128.0/18
                  202.86.113.0-202.86.118.255
                  202.128.112.0/20
                  202.130.195.0/24
                  202.130.203.0/24
                  202.130.205.0/24
                  202.130.214.0/24
                  202.130.217.0/24
                  202.136.32.0/20
                  202.138.0.0/18
                  202.147.128.0/20
                  202.154.64.0/18
                  203.16.9.0/24
                  203.16.170.0/24
                  203.21.47.0/24
                  203.21.104.0/24
                  203.23.116.0/24
                  203.24.100.0/23
                  203.30.143.0/24
                  203.30.211.0/24
                  203.34.15.0/24
                  203.56.5.0/24
                  203.57.110.0/24
                  203.62.135.0/24
                  203.91.224.0/19
                  203.123.64.0/20
                  203.132.224.0/19
                  203.134.0.0-203.134.191.255
                  203.142.128.0/19
                  203.161.160.0/20
                  203.190.192.0/20
                  203.191.160.0/19
                  203.212.128.0/19
                  210.50.0.0/16
                  210.86.240.0/20
                  211.26.0.0/15
                  218.214.0.0/15
                IPv6:
                  2403:4800::/32
                  2403:9e00::/32
                  2403:fc00::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:cf:d9:b9:52:0e:54:38:f8:a8:a7:90:ad:cf:7e:91:07:51:
         2d:24:bc:3f:6c:fb:1b:be:a7:e8:c3:12:5a:8d:ef:4a:3c:74:
         ff:49:9d:61:71:2a:e7:84:97:b0:19:ed:9a:27:79:e9:ab:79:
         91:64:79:c6:16:30:a0:3c:b1:a6:e8:bb:87:fd:37:f2:84:37:
         6f:39:a3:c4:96:8f:41:5f:97:f9:c0:68:81:f9:83:9c:d7:b5:
         b2:af:5c:ef:b3:7a:1f:37:d7:ba:15:0b:e6:ca:7f:3b:b1:b9:
         6c:69:01:33:f4:9a:62:9e:cb:f0:4d:1c:80:86:c5:76:e1:f8:
         5f:41:73:a9:72:b2:0c:75:a1:9f:1c:4d:af:c8:1e:b6:b7:72:
         6c:56:6f:61:95:80:17:d5:a6:56:a9:a1:57:b6:f2:5a:b7:bd:
         de:a2:e4:b3:7d:ce:1b:87:fe:d2:7b:72:7b:21:c9:7b:4a:2c:
         01:78:8a:de:1d:60:11:9c:28:0c:70:e3:e1:45:2e:ad:d5:27:
         1a:8e:bd:c4:a0:af:e4:f1:6d:ac:2a:03:f6:d4:47:62:ba:ed:
         8c:f8:57:f4:5c:bc:22:b0:1e:76:a4:e1:76:dd:7d:6b:e2:c2:
         b9:4d:29:30:10:55:d8:b0:9b:8f:07:4b:a8:76:86:0a:eb:16:
         74:bd:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org