Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/C325AA22037611EDA1FEE62AC4F9AE02.roa
File:                     C325AA22037611EDA1FEE62AC4F9AE02.roa (raw, json)
Hash identifier:          7Ug3nddcDtGkjLml9j/SKK9AB7qfXazjn+Tha1zwdOw=
Subject key identifier:   61:65:84:BA:E3:2F:BE:55:9A:97:5C:C6:68:D0:CE:4D:24:15:31:BE
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       41
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/C325AA22037611EDA1FEE62AC4F9AE02.roa
Signing time:             Fri 22 Jul 2022 07:53:46 +0000
ROA not before:           Fri 22 Jul 2022 07:53:46 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     140934
IP address blocks:        103.190.16.0/23 maxlen: 24
                          2400:8aa0::/32 maxlen: 36

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Jul 22 07:53:46 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62da5789-e598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:42:4b:c8:10:40:b3:2c:35:c5:4f:8f:68:
                    ba:bd:73:84:66:a1:66:83:d6:a9:87:fc:59:d8:82:
                    e1:4c:fa:94:71:18:8e:9b:ac:c1:d2:7b:ee:be:fd:
                    43:6b:c1:1d:2d:fb:ee:46:ec:44:8c:ec:1a:95:f4:
                    2c:f8:f8:21:b4:ce:e2:55:d0:a0:37:ef:97:0c:0a:
                    a0:44:ec:01:23:cd:c5:57:40:09:cd:38:56:67:f7:
                    46:aa:e3:d0:15:6e:7a:71:83:c8:1c:e9:23:c1:57:
                    91:97:24:b1:cf:e1:a4:8f:39:a7:82:ad:7d:1b:fe:
                    41:17:ec:ee:70:da:d5:8c:5a:b1:be:5c:6d:0e:8d:
                    f6:f2:b9:dd:d4:fa:c7:29:d0:cb:a4:57:dd:f7:2b:
                    90:f9:c9:5e:d1:f4:d9:d2:b5:b2:19:1c:7f:3d:02:
                    15:e5:f9:ab:1d:9c:87:4b:ac:7c:a0:19:3b:01:41:
                    0e:f4:b1:f4:25:46:1c:ce:35:3a:79:f1:4f:75:ff:
                    51:0d:33:9d:fe:f7:40:01:24:69:54:c1:2f:d8:42:
                    a9:2a:11:9c:55:1c:94:82:a3:ba:a5:6e:ec:03:0a:
                    e2:bf:c6:77:06:d7:dd:1f:e6:e3:e0:f3:c3:3b:50:
                    68:3e:82:cb:73:a0:ff:4f:e4:7d:54:8d:e0:b6:d8:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:84:BA:E3:2F:BE:55:9A:97:5C:C6:68:D0:CE:4D:24:15:31:BE
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/C325AA22037611EDA1FEE62AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.16.0/23
                IPv6:
                  2400:8aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:52:85:fb:c5:27:9c:b3:c2:13:52:27:f1:78:b9:8d:75:41:
         d3:c5:3c:84:d9:45:07:3a:ee:dc:be:e1:65:24:4d:f1:0d:7a:
         f5:c0:bd:2c:82:3f:6a:45:2d:a5:8a:0b:a2:8a:9f:13:e7:fe:
         7a:0d:78:a3:e2:d5:9c:7d:08:f5:d6:ae:8e:e5:ec:26:c0:d1:
         c6:1b:2c:f4:9d:e5:28:a3:dc:82:bc:df:da:1d:c4:d4:21:8a:
         1e:87:92:b1:ad:bb:f9:6f:8a:10:12:27:55:65:86:53:31:8f:
         f0:49:89:7b:79:40:3b:d2:d2:00:2e:7b:20:3d:67:d3:2f:59:
         13:20:c0:a7:1f:f3:d5:fb:e1:11:8a:9f:fd:59:13:08:9e:57:
         1b:89:bb:2d:62:5e:28:74:93:c2:78:87:6b:e0:85:c1:f5:ae:
         95:12:11:22:bf:43:2c:cc:f3:78:8c:0f:45:7f:97:58:7b:89:
         5e:59:44:81:c5:83:53:2f:c8:9e:d6:ad:83:73:bd:8f:47:0e:
         eb:b0:48:8a:c7:fa:82:84:cc:c6:d4:45:df:97:8e:7c:1e:93:
         cd:e5:7d:14:27:e0:a5:73:d3:7a:3c:51:1e:ef:cb:bf:8a:6b:
         b0:08:f3:8f:bb:ae:e7:e9:85:9f:b0:80:65:59:41:c5:7c:c1:
         9a:3d:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----