Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F9FCA7E5B7211ED9CA4A718C4F9AE02.roa
File:                     0F9FCA7E5B7211ED9CA4A718C4F9AE02.roa (raw, json)
Hash identifier:          pKe4cWoQZMzcRoTDLcZOuxyAjLVzR4dYtDzYSuQEfWk=
Subject key identifier:   92:4A:EC:4C:C8:BB:90:30:2B:08:6B:E5:39:E5:BE:9A:AB:6B:66:39
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5FA3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F9FCA7E5B7211ED9CA4A718C4F9AE02.roa
Signing time:             Thu 03 Nov 2022 12:21:37 +0000
ROA not before:           Thu 03 Nov 2022 12:21:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142465
IP address blocks:        2407:93c0::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24483 (0x5fa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov  3 12:21:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6363b250-e8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:03:8b:49:16:28:bd:9f:bb:1c:d1:d0:28:
                    e9:7b:17:45:06:a8:c4:8d:39:0e:42:d9:6b:33:80:
                    2e:4f:51:0d:75:93:24:89:95:0c:8a:19:e3:66:09:
                    96:b9:f7:18:09:6b:f1:81:d5:bd:ff:36:98:e1:86:
                    1f:be:aa:bd:75:e2:d6:86:28:a2:ec:b9:ef:07:55:
                    25:7b:e3:81:be:1e:ce:dc:49:56:c5:31:15:98:66:
                    fb:e6:4e:73:3d:93:06:b1:84:96:14:6e:89:07:40:
                    bf:31:e7:ca:f4:ae:cc:a3:41:59:d7:30:12:ce:65:
                    b4:89:40:5d:78:12:bd:c6:22:cd:a9:85:e4:a4:7e:
                    62:b3:16:43:7e:f0:1b:62:83:e2:25:e8:82:92:9a:
                    bf:53:e6:9f:2b:78:e2:aa:e1:52:91:f0:18:93:99:
                    d5:9b:91:92:19:26:07:7c:cd:c1:fa:23:80:4a:33:
                    40:09:91:05:11:da:89:fa:02:e5:09:2d:52:54:6a:
                    8d:00:65:61:a9:2f:c1:4c:ec:48:a3:b6:df:27:8e:
                    f7:28:a6:e6:22:c5:8f:cc:cd:00:04:10:57:e8:b4:
                    aa:cc:e3:1d:28:78:96:af:6c:b8:74:3c:07:f3:6c:
                    78:8e:34:f6:51:d1:dd:11:99:ec:1e:d3:2a:2b:af:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4A:EC:4C:C8:BB:90:30:2B:08:6B:E5:39:E5:BE:9A:AB:6B:66:39
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F9FCA7E5B7211ED9CA4A718C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:93c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:75:1b:97:6e:a9:08:bd:4d:d9:12:3f:ab:3d:e8:1a:6e:08:
         27:d0:89:1e:30:21:64:25:7b:3e:4d:58:2a:a9:6c:35:5b:99:
         2b:40:2a:26:62:47:eb:37:4f:5a:58:7b:2c:8c:bb:87:fc:eb:
         6e:47:0c:10:8e:e0:6f:ae:0c:b4:0a:33:a3:34:34:c1:45:b0:
         32:13:0e:3d:2f:d2:d6:14:b6:18:17:18:71:f1:3a:f9:fd:ce:
         d2:c3:c1:36:c2:0d:22:f4:6f:df:df:c5:7b:8f:b1:ab:de:8b:
         05:cb:36:eb:30:41:e3:fb:46:dc:55:3e:94:58:a1:78:d4:d7:
         c8:b9:45:88:5d:dd:b4:6c:99:8d:20:94:04:c7:3e:ae:48:6b:
         ff:ad:62:2b:2f:94:33:88:61:aa:63:d9:a2:d6:c3:3c:c3:d7:
         3d:b0:61:a4:e5:b4:f5:3f:e1:c8:92:9d:40:b7:6e:fe:4d:77:
         7e:a7:83:49:61:19:53:12:96:f8:95:24:e7:f2:69:2c:c8:e8:
         6a:78:b1:ea:ad:ef:e3:94:67:0f:70:9a:58:a3:35:bc:ea:ef:
         e2:a6:e0:76:88:03:8d:86:35:dc:25:53:7d:16:49:38:52:70:
         8e:68:1d:4c:74:ec:0b:98:d5:e4:3d:e2:30:76:9c:bd:2c:7e:
         01:0a:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----