Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/145C4014ABDC11EDAE837666C4F9AE02.roa
File:                     145C4014ABDC11EDAE837666C4F9AE02.roa (raw, json)
Hash identifier:          yvXII2H8eC8/4AcSWd7seCv70e6l3lDzHrAtXyVXwOE=
Subject key identifier:   09:5C:2C:F4:21:A6:9C:BB:91:C8:17:C6:5E:F2:7C:B2:6B:C7:27:DA
Certificate issuer:       /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial:       2A64
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/145C4014ABDC11EDAE837666C4F9AE02.roa
Signing time:             Mon 13 Feb 2023 20:22:04 +0000
ROA not before:           Mon 13 Feb 2023 20:22:04 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     58443
IP address blocks:        103.227.30.0/23 maxlen: 24
                          103.255.248.0/24 maxlen: 24
                          2400:7180:1::/48 maxlen: 48
                          2400:7180:5::/48 maxlen: 48
                          2400:7180:a::/48 maxlen: 48
                          2400:7180:110::/48 maxlen: 48
                          2400:7180:111::/48 maxlen: 48
                          2400:7180:120::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10852 (0x2a64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
        Validity
            Not Before: Feb 13 20:22:04 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63ea9bec-751d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ff:b8:2b:c6:70:f7:6e:6a:3f:38:6b:25:eb:
                    ce:b7:1c:f7:f7:65:77:73:36:05:e8:20:72:dd:5a:
                    be:28:6f:e4:d6:3a:79:05:d9:68:01:85:ea:61:f7:
                    bd:e6:93:31:71:7e:9b:c1:b5:a8:7d:d5:d3:86:c6:
                    42:60:cd:05:c5:e7:6a:9e:60:e1:4e:31:e6:88:f0:
                    38:cd:f1:1e:dd:4c:2e:25:83:0e:f9:f4:63:ee:87:
                    7c:12:9c:6f:cf:bb:49:68:10:9b:db:9a:3e:3b:89:
                    48:70:28:e4:e1:6c:2a:af:84:33:d0:80:4a:78:56:
                    8e:c9:a3:ce:c7:78:d1:bd:35:4d:18:79:63:e3:51:
                    34:a7:76:7f:79:cb:c0:af:38:91:3a:46:70:67:94:
                    67:16:05:bc:8f:46:4b:ca:d3:2e:59:49:30:3b:b8:
                    20:c7:9e:5b:b5:0f:49:8c:88:ba:f5:04:22:cc:ec:
                    22:b8:19:20:0a:98:17:20:43:a1:19:1f:de:a3:51:
                    3b:05:d7:12:3f:b7:87:6b:93:92:a1:a6:6e:cc:dd:
                    64:d4:e2:0c:77:f1:44:9b:37:cc:7e:56:ec:a2:3d:
                    a8:ec:3e:20:d5:19:9a:dc:cc:5f:79:38:68:59:6f:
                    c5:dd:d7:d9:5f:30:01:87:da:45:fd:c9:cf:13:7e:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:2C:F4:21:A6:9C:BB:91:C8:17:C6:5E:F2:7C:B2:6B:C7:27:DA
            X509v3 Authority Key Identifier:
                keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/145C4014ABDC11EDAE837666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.30.0/23
                  103.255.248.0/24
                IPv6:
                  2400:7180:1::/48
                  2400:7180:5::/48
                  2400:7180:a::/48
                  2400:7180:110::/47
                  2400:7180:120::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:46:30:af:34:fc:c5:1c:86:cd:b3:ad:6a:ab:be:a7:cc:25:
         bd:94:68:6b:89:63:42:ad:18:8d:ea:95:72:33:47:42:5b:31:
         ee:be:23:b8:e6:ff:b0:bb:82:38:e3:83:a2:95:3c:5a:fa:f2:
         a8:bd:6e:72:0d:49:3f:f9:62:e4:7e:31:45:ae:2b:a5:91:fc:
         48:14:8d:a3:ef:8a:17:1a:d2:15:0b:10:f1:6b:5e:bc:a6:6c:
         c5:dc:0a:6d:22:47:56:9e:13:05:c7:e0:54:0a:f5:53:59:e2:
         8b:96:e9:e3:14:68:7d:73:27:2a:7f:52:ff:0d:7f:4f:ac:50:
         9c:61:44:6f:7e:ed:50:cc:5f:68:da:5b:83:2e:9c:15:12:f6:
         dc:1b:1b:56:62:08:9e:aa:a4:4b:8c:60:b7:81:a6:71:6b:8d:
         6e:ad:de:8a:1e:97:f1:91:60:66:8d:8b:8b:9f:36:d8:bf:94:
         d1:c3:6e:0c:8d:f1:52:84:c9:65:05:58:01:9a:95:67:a4:83:
         8d:de:81:34:da:60:ea:84:8b:70:4b:fd:c0:4e:c9:97:9f:bf:
         c5:f9:2c:4f:74:f5:57:7e:25:0b:06:cd:34:14:f9:57:3e:ba:
         08:82:f6:8f:c8:cc:49:29:62:cf:53:9a:bf:a0:c6:90:76:04:
         3f:bd:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----