Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1330CD38DE9411EC9289256FC4F9AE02.roa
File:                     1330CD38DE9411EC9289256FC4F9AE02.roa (raw, json)
Hash identifier:          6dHqSccww18Du0pMO/R1eMUg8MckGMvWFNE9fDieIO0=
Subject key identifier:   4F:D5:7A:6A:34:C9:CC:B1:31:B3:57:CA:F8:0C:35:18:DE:24:E4:AD
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3ADE
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1330CD38DE9411EC9289256FC4F9AE02.roa
Signing time:             Sun 29 May 2022 03:10:10 +0000
ROA not before:           Sun 29 May 2022 03:10:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15070 (0x3ade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: May 29 03:10:09 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=6292e411-4a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:34:9a:13:85:25:f3:f8:87:a2:47:0e:f0:
                    0b:94:12:6d:07:a3:cd:ec:e8:a6:3f:5c:06:ba:9d:
                    d4:20:59:e6:47:71:e2:ef:8d:f7:80:45:b6:83:9e:
                    c2:0d:57:d7:e4:2d:ae:e5:7e:ee:d7:7e:25:f5:a1:
                    8a:2d:b2:ba:2e:5d:5b:30:8c:80:8c:19:f8:91:36:
                    96:e2:0b:d6:78:8e:fb:c3:dc:92:7e:2b:18:14:78:
                    73:47:4c:d9:b8:09:03:a9:a1:fe:59:39:8b:6c:5b:
                    a3:9d:72:48:83:7e:7c:54:04:d1:97:25:00:f0:dc:
                    c2:cc:8e:55:a2:74:b7:ac:00:a7:58:81:8c:f3:90:
                    21:fe:a3:3d:a6:ce:ae:a6:31:e2:2f:b0:ab:f2:50:
                    3b:58:cd:80:c6:f0:1f:0f:89:33:88:d7:bb:aa:90:
                    84:c9:2a:10:0d:43:ee:f7:6c:f8:b0:6d:ed:a5:49:
                    0e:ce:96:85:64:d9:30:30:d5:ad:22:e8:69:71:21:
                    78:1f:43:6f:6d:be:9a:52:46:cc:97:cb:13:5e:1e:
                    c9:13:d9:71:b9:3d:05:f8:cd:1e:f5:22:c7:9f:56:
                    9e:8b:0b:cb:18:84:bd:d2:4a:23:81:62:ec:64:6c:
                    1a:7a:dd:47:07:60:79:65:aa:f8:03:54:d3:30:02:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D5:7A:6A:34:C9:CC:B1:31:B3:57:CA:F8:0C:35:18:DE:24:E4:AD
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1330CD38DE9411EC9289256FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:42:98:c0:e2:5e:02:59:32:0e:33:33:ae:b0:8c:c3:7c:5d:
         b7:1a:a1:a5:26:17:34:a2:f5:fc:f1:d6:c6:5a:86:0b:7e:2f:
         65:a9:b9:b9:0a:8a:ce:a1:1e:a1:fb:0b:dd:0e:01:2c:34:7a:
         f3:a5:cc:19:e9:a2:8c:c5:de:ee:fd:90:1d:e7:20:15:a5:01:
         85:5a:48:34:c1:be:55:69:8e:ed:4e:02:9c:d2:df:a7:73:5d:
         c9:5a:99:ca:09:81:6c:08:f3:b5:b4:70:ee:b2:0e:e0:ab:ef:
         a6:2b:82:4d:9a:bd:f1:e5:86:b0:e8:1b:c9:ac:c3:10:8c:c4:
         76:84:bb:c7:b6:9b:8e:48:bf:03:0a:97:fb:f5:08:c8:e4:0f:
         5b:ed:e6:23:bc:5d:03:4d:80:75:a3:ac:77:26:cf:e7:8e:ff:
         e8:47:88:d9:2b:43:dc:05:85:7f:20:9c:54:dd:4e:d1:12:d3:
         fc:46:18:3c:8f:86:95:45:86:19:71:3e:1b:1d:cb:c5:1c:23:
         b9:1b:c7:1e:8b:1b:a4:b0:e1:e6:50:c2:c7:f8:25:98:60:3c:
         6f:8d:d5:86:ee:de:72:e3:a4:3a:77:01:e3:51:f6:35:b0:e3:
         77:2a:75:a3:57:86:83:2b:0d:d7:23:03:53:b5:10:5a:15:08:
         fc:6e:7c:b1
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICOt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC
RkE4OEQwMTUwHhcNMjIwNTI5MDMxMDA5WhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjkyZTQxMS00YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKs0mhOFJfP4h6JHDvALlBJtB6PN7OimP1wGup3UIFnmR3Hi7433gEW2g57C
DVfX5C2u5X7u134l9aGKLbK6Ll1bMIyAjBn4kTaW4gvWeI77w9ySfisYFHhzR0zZ
uAkDqaH+WTmLbFujnXJIg358VATRlyUA8NzCzI5VonS3rACnWIGM85Ah/qM9ps6u
pjHiL7Cr8lA7WM2AxvAfD4kziNe7qpCEySoQDUPu92z4sG3tpUkOzpaFZNkwMNWt
IuhpcSF4H0Nvbb6aUkbMl8sTXh7JE9lxuT0F+M0e9SLHn1aeiwvLGIS90kojgWLs
ZGwaet1HB2B5Zar4A1TTMAKOtwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFE/Vemo0
ycyxMbNXyvgMNRjeJOStMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE
NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvMTMzMENEMzhE
RTk0MTFFQzkyODkyNTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnq9owDwQCAAIwCQMHASABDfdTgDANBgkqhkiG9w0BAQsF
AAOCAQEAVkKYwOJeAlkyDjMzrrCMw3xdtxqhpSYXNKL1/PHWxlqGC34vZam5uQqK
zqEeofsL3Q4BLDR686XMGemijMXe7v2QHecgFaUBhVpINMG+VWmO7U4CnNLfp3Nd
yVqZygmBbAjztbRw7rIO4KvvpiuCTZq98eWGsOgbyazDEIzEdoS7x7abjki/AwqX
+/UIyOQPW+3mI7xdA02AdaOsdybP547/6EeI2StD3AWFfyCcVN1O0RLT/EYYPI+G
lUWGGXE+Gx3LxRwjuRvHHosbpLDh5lDCx/glmGA8b43Vhu7ecuOkOncB41H2NbDj
dyp1o1eGgysN1yMDU7UQWhUI/G58sQ==
-----END CERTIFICATE-----