Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83142284F06511EC9445D064C4F9AE02.roa
File:                     83142284F06511EC9445D064C4F9AE02.roa (raw, json)
Hash identifier:          ceoyGT4OdmQ4qIax8r1wjcM+UXGYmMOWqmohWoQsffU=
Subject key identifier:   8A:3B:45:E8:CB:67:87:F3:F5:7A:D4:E3:0E:E7:79:44:98:1A:76:CD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       57A6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83142284F06511EC9445D064C4F9AE02.roa
Signing time:             Mon 20 Jun 2022 06:52:13 +0000
ROA not before:           Mon 20 Jun 2022 06:52:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        103.162.192.0/23 maxlen: 24
                          103.166.180.0/24 maxlen: 24
                          103.167.152.0/23 maxlen: 24
                          103.167.238.0/23 maxlen: 24
                          103.181.4.0/23 maxlen: 24
                          103.181.86.0/23 maxlen: 24
                          103.181.194.0/24 maxlen: 24
                          103.189.82.0/23 maxlen: 24
                          2001:df6:9580::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22438 (0x57a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 20 06:52:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62b0191c-166d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:76:6f:88:51:4c:39:87:de:da:9d:cb:16:
                    54:64:7e:da:c1:b3:41:ef:77:b7:57:fb:5c:29:88:
                    e9:5f:79:05:bb:f8:73:07:29:08:04:64:8b:8f:71:
                    d9:ed:8c:48:41:31:10:1f:d2:c9:93:af:3d:00:2a:
                    d3:d7:33:fc:d2:9d:73:ca:46:5d:4e:df:22:60:68:
                    0a:ae:81:30:e4:92:b0:75:51:f0:4c:93:e3:70:bf:
                    f2:d6:cc:d2:49:18:7f:68:0a:3d:39:f3:59:ec:7d:
                    28:92:40:24:f0:a5:a3:df:98:53:59:57:e7:4d:86:
                    e1:26:4a:ba:92:60:fc:8a:bf:bc:e7:47:2e:79:f1:
                    48:dd:f3:35:3b:8d:6d:fc:0f:fd:a7:99:49:bc:fa:
                    c7:1a:bd:01:ed:6b:26:dd:e3:55:c5:43:f1:d8:b5:
                    8e:0f:3c:82:05:b9:ea:44:d1:83:9a:95:eb:27:45:
                    03:40:59:b5:82:a6:4b:c2:a9:19:2a:5b:8f:3c:43:
                    7e:90:5e:47:e5:61:4d:73:e8:7c:0d:7e:c6:2f:1d:
                    b4:a1:5c:02:dd:76:84:a2:8f:b3:5a:d0:a0:8f:37:
                    82:c6:51:72:e4:cd:b2:b3:d6:03:9d:3e:b5:97:0f:
                    20:c2:2e:13:b4:ea:b3:a5:23:4a:88:cd:e9:ea:9d:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3B:45:E8:CB:67:87:F3:F5:7A:D4:E3:0E:E7:79:44:98:1A:76:CD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83142284F06511EC9445D064C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.192.0/23
                  103.166.180.0/24
                  103.167.152.0/23
                  103.167.238.0/23
                  103.181.4.0/23
                  103.181.86.0/23
                  103.181.194.0/24
                  103.189.82.0/23
                IPv6:
                  2001:df6:9580::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:4d:e7:8c:8b:67:93:a6:d8:06:45:b2:4f:1d:7f:bf:92:5f:
         85:65:ff:4b:5b:fd:1d:f3:64:91:81:d8:60:f1:da:77:d0:19:
         48:55:b5:c5:f9:cc:53:78:46:1c:15:da:7e:90:7c:85:0f:76:
         18:65:7e:59:b0:98:75:65:c1:43:72:93:07:90:84:73:11:88:
         27:3e:18:8a:2d:c8:6f:5c:65:61:71:b5:23:05:06:03:dd:b0:
         b9:b1:26:81:30:7a:8d:13:79:df:01:17:3a:3e:74:8b:7c:1d:
         d5:ba:e1:a0:84:61:3e:b2:9c:fd:b9:f8:e2:66:32:bf:ed:5d:
         1f:5b:a6:1e:b1:74:e3:61:76:58:2a:3f:fd:4a:27:69:51:2c:
         10:de:9e:0b:31:a3:55:d1:54:b1:a0:c9:90:25:2f:3d:b4:b8:
         8b:29:48:62:33:40:48:16:46:b6:d4:2a:b1:b1:7f:5f:0e:57:
         f9:6c:35:62:fb:76:44:e2:ca:43:d0:af:26:b6:10:cf:22:ef:
         43:11:70:44:3c:9c:33:a2:41:03:6d:26:4d:4d:33:70:21:a7:
         17:1c:c4:80:f1:33:69:05:f3:8a:ee:de:b7:0f:da:20:82:44:
         2d:86:59:88:3d:2b:dc:c7:f8:97:74:be:03:26:cf:32:99:68:
         4f:07:a6:3b
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgICV6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNjIwMDY1MjEzWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmIwMTkxYy0xNjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2hh2b4hRTDmH3tqdyxZUZH7awbNB73e3V/tcKYjpX3kFu/hzBykIBGSLj3HZ
7YxIQTEQH9LJk689ACrT1zP80p1zykZdTt8iYGgKroEw5JKwdVHwTJPjcL/y1szS
SRh/aAo9OfNZ7H0okkAk8KWj35hTWVfnTYbhJkq6kmD8ir+850cuefFI3fM1O41t
/A/9p5lJvPrHGr0B7Wsm3eNVxUPx2LWODzyCBbnqRNGDmpXrJ0UDQFm1gqZLwqkZ
KluPPEN+kF5H5WFNc+h8DX7GLx20oVwC3XaEoo+zWtCgjzeCxlFy5M2ys9YDnT61
lw8gwi4TtOqzpSNKiM3p6p2lEQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFIo7RejL
Z4fz9XrU4w7neUSYGnbNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODMxNDIyODRG
MDY1MTFFQzk0NDVEMDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWgYIKwYBBQUHAQcBAf8E
SzBJMDYEAgABMDADBAFnosADBABnprQDBAFnp5gDBAFnp+4DBAFntQQDBAFntVYD
BABntcIDBAFnvVIwDwQCAAIwCQMHACABDfaVgDANBgkqhkiG9w0BAQsFAAOCAQEA
tE3njItnk6bYBkWyTx1/v5JfhWX/S1v9HfNkkYHYYPHad9AZSFW1xfnMU3hGHBXa
fpB8hQ92GGV+WbCYdWXBQ3KTB5CEcxGIJz4Yii3Ib1xlYXG1IwUGA92wubEmgTB6
jRN53wEXOj50i3wd1brhoIRhPrKc/bn44mYyv+1dH1umHrF042F2WCo//UonaVEs
EN6eCzGjVdFUsaDJkCUvPbS4iylIYjNASBZGttQqsbF/Xw5X+Ww1Yvt2ROLKQ9Cv
JrYQzyLvQxFwRDycM6JBA20mTU0zcCGnFxzEgPEzaQXziu7etw/aIIJELYZZiD0r
3Mf4l3S+AybPMploTwemOw==
-----END CERTIFICATE-----