Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/8623BE34916A11ED87921044C4F9AE02.roa
File:                     8623BE34916A11ED87921044C4F9AE02.roa (raw, json)
Hash identifier:          WJGVy7kw0lU00ozfd9dWuPb130fpDCe7mAKWELvNLuk=
Subject key identifier:   2E:F9:DE:99:C6:0F:A8:D2:DC:4A:44:6F:B7:8A:EC:3D:12:11:E2:99
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0249
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/8623BE34916A11ED87921044C4F9AE02.roa
Signing time:             Wed 11 Jan 2023 04:43:42 +0000
ROA not before:           Wed 11 Jan 2023 04:43:42 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     37932
IP address blocks:        147.50.200.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jan 11 04:43:42 2023 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=63be3e7e-a37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:21:39:35:fe:1f:20:67:5a:fb:80:da:6e:
                    5a:92:cb:3e:24:56:d0:50:73:18:00:a5:47:7f:fc:
                    c0:86:2f:5c:3b:fb:4c:93:9e:fb:8e:c5:24:c3:ee:
                    60:20:67:b3:ed:16:73:f5:ea:6c:c1:ae:87:96:46:
                    6b:4f:4b:2f:73:04:7b:f2:9c:a4:52:77:46:e4:12:
                    06:0f:d0:d0:d6:ac:27:c6:80:2a:b9:50:81:02:4e:
                    b1:7d:3b:b8:88:65:49:8c:82:aa:66:b5:6a:02:61:
                    b5:f7:63:08:71:12:d9:e3:f7:44:a8:cd:a9:e2:76:
                    a1:60:98:85:53:55:6c:2d:cf:05:ad:c9:ee:e5:35:
                    0a:8b:d7:8a:6b:49:12:95:e9:c5:51:f3:d5:85:6d:
                    f0:89:2f:a7:9a:3e:21:6b:0e:7b:1b:8d:47:3a:0e:
                    59:34:de:3c:8e:00:b0:ec:c9:d3:de:cc:13:5d:66:
                    a8:6f:cd:11:8b:e9:72:fa:91:68:fd:fd:8f:fa:62:
                    5f:00:10:ba:8c:b7:d5:65:4f:bb:55:53:2d:99:72:
                    bd:1c:2d:69:2e:60:63:82:38:b2:ef:5c:c3:2f:db:
                    9c:16:ac:14:ae:a1:39:9b:a7:11:8b:4a:63:7b:92:
                    e6:bd:df:f5:e4:66:21:84:69:02:23:67:66:b3:82:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:DE:99:C6:0F:A8:D2:DC:4A:44:6F:B7:8A:EC:3D:12:11:E2:99
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/8623BE34916A11ED87921044C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:50:ad:1a:48:48:a8:15:67:26:2f:df:49:cd:ab:4c:a9:81:
         bd:37:e9:91:67:fe:61:4a:0d:ce:17:17:50:5f:36:3c:fc:0c:
         1f:f5:e9:97:c7:52:31:3a:f5:05:f7:9f:f3:6e:10:a7:86:49:
         bc:03:00:12:7f:32:f2:42:5e:50:1a:3f:1d:92:ee:8c:bc:f5:
         3f:fb:ca:03:e2:4e:50:b6:0f:3c:65:56:2c:66:2b:58:9c:be:
         68:83:47:fb:73:e8:ea:91:4a:18:8b:78:85:87:c2:7c:35:9f:
         ed:ea:63:e7:37:83:d2:5c:28:02:d0:9f:ea:64:32:b2:fe:75:
         24:67:e3:9a:aa:19:e5:06:e7:44:80:3f:54:67:a7:46:00:2d:
         f7:97:26:42:77:62:a0:d4:1c:f1:22:2a:20:e1:8d:2e:03:23:
         bf:94:a9:d9:54:0f:a4:c7:7e:c0:39:c5:61:54:2e:53:c7:d6:
         14:e6:f7:06:ac:8e:5a:95:a1:8f:e7:30:78:9e:a1:8e:0a:81:
         a2:09:0e:18:16:58:db:ec:d8:14:56:3b:49:fa:c7:f1:7e:68:
         65:0d:58:1b:75:1e:14:16:c0:a3:04:dc:88:32:b3:b2:3a:72:
         ba:4d:32:56:79:b5:c3:1f:52:9d:37:05:70:2c:88:b9:71:9d:
         f4:71:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----