Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/D7581850261911EA83CE8D17C4F9AE02.roa
File:                     D7581850261911EA83CE8D17C4F9AE02.roa (raw, json)
Hash identifier:          zFLbff1WenJrVBwLJbpk4HSIk0yay5vYqSP7+/BwMQA=
Subject key identifier:   84:B3:A3:CE:DF:2C:F3:64:48:8D:DB:39:BC:98:DF:DC:1E:4C:CB:01
Certificate issuer:       /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401
Certificate serial:       1754
Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/D7581850261911EA83CE8D17C4F9AE02.roa
Signing time:             Sat 01 Oct 2022 17:14:14 +0000
ROA not before:           Sat 01 Oct 2022 17:14:14 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     136902
IP address blocks:        103.98.85.0/24 maxlen: 24
                          103.119.208.0/24 maxlen: 24
                          103.119.209.0/24 maxlen: 24
                          2001:df2:1f00::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5972 (0x1754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401
        Validity
            Not Before: Oct  1 17:14:14 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63387566-fc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:3d:73:ab:fd:b0:7e:6e:83:74:68:d3:38:
                    56:dd:4c:05:4c:59:ed:50:1d:16:6d:7c:91:0a:eb:
                    82:97:08:01:3e:e6:ff:c9:6d:99:a9:ca:58:f5:2e:
                    01:e7:05:ba:3a:89:c0:de:0f:cb:a3:b0:36:32:36:
                    b9:ad:89:da:aa:37:11:46:9e:3b:25:94:58:68:cd:
                    52:a2:ff:36:ce:ca:f3:8b:d0:0d:25:c5:0a:85:aa:
                    1c:cf:f7:83:fe:8d:d1:d1:95:b0:91:76:6d:05:d5:
                    68:e7:3d:bc:98:14:e6:ee:da:6d:81:2a:49:ed:78:
                    57:f1:0b:4d:65:05:d7:da:06:8f:41:ed:71:db:23:
                    44:f4:23:4e:47:a1:1c:cc:c6:f6:92:f0:e6:d3:39:
                    c3:24:45:fc:e7:9c:54:e0:13:04:da:f2:da:23:c1:
                    61:00:a2:00:08:bb:91:da:b3:19:5a:b3:3b:ee:67:
                    00:c2:28:6e:65:c0:b7:50:77:50:45:5f:0e:4e:37:
                    4a:45:42:f2:04:d6:bd:3d:6c:f9:99:2b:e7:c9:16:
                    ec:eb:bd:c6:6c:eb:5e:e5:13:a2:f9:c7:ab:26:63:
                    a4:44:df:35:e2:f1:41:0e:c8:2d:93:73:78:5c:8c:
                    d7:fb:20:96:0f:c3:9c:20:f3:fc:60:1a:db:10:36:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:A3:CE:DF:2C:F3:64:48:8D:DB:39:BC:98:DF:DC:1E:4C:CB:01
            X509v3 Authority Key Identifier:
                keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/D7581850261911EA83CE8D17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.85.0/24
                  103.119.208.0/23
                IPv6:
                  2001:df2:1f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:90:81:8f:d1:34:a2:53:cf:b5:7c:20:4c:0b:f5:e4:18:
         52:63:07:17:2d:ab:87:3f:d8:20:db:c4:be:f6:f3:b0:a6:1f:
         75:b1:cf:f6:2b:73:d0:6d:a4:f9:f9:20:11:11:bf:2d:95:42:
         5a:39:4b:a2:49:a8:32:25:5d:97:50:df:77:74:86:4f:82:de:
         ae:56:b9:42:58:4e:8f:34:37:c9:03:f3:01:73:23:27:8d:b1:
         09:da:bd:76:cb:78:6b:14:dd:ab:40:6a:bd:b8:c9:30:d4:ad:
         df:91:96:28:82:2d:94:71:86:3b:16:e5:78:f4:8b:78:fd:48:
         90:4f:6a:db:02:a0:d4:60:04:6c:02:fb:52:f1:d4:1d:70:8b:
         ab:ce:03:ba:54:0b:74:3b:ae:8b:63:8c:46:f8:89:e5:36:a0:
         1c:e1:b3:64:e3:ff:79:b4:73:16:4b:25:81:e6:ec:0a:e1:0c:
         8b:24:4f:41:11:51:c0:db:6e:bc:84:91:0f:7f:4f:e7:d0:df:
         be:42:e8:72:91:85:e7:61:76:af:20:68:1a:48:8f:29:03:c3:
         e0:b5:55:6c:86:81:6a:bc:bb:26:d4:36:b4:1c:e5:6a:d1:a4:
         0d:47:7f:2a:21:64:29:f6:02:39:3e:a9:f3:32:84:be:ea:26:
         13:ba:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----