Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1A3449DC4BCE11EDB1D8007EC4F9AE02.roa
File:                     1A3449DC4BCE11EDB1D8007EC4F9AE02.roa (raw, json)
Hash identifier:          YeqZFM0G1Dz5vQVmQ6/S26cahcUsXCgMTtIl5bYOEh0=
Subject key identifier:   55:44:4A:DE:1E:99:DB:BA:EB:88:9F:D8:D3:49:67:C0:21:B5:E2:BF
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3CA0
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1A3449DC4BCE11EDB1D8007EC4F9AE02.roa
Signing time:             Fri 14 Oct 2022 14:40:09 +0000
ROA not before:           Fri 14 Oct 2022 14:40:09 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15520 (0x3ca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Oct 14 14:40:09 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=634974c9-98cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1e:d7:11:aa:df:f3:85:a3:df:c9:0e:07:25:
                    ef:f8:f7:17:06:c4:51:ec:2c:35:9a:75:b0:5e:37:
                    48:cc:09:ac:79:3a:6c:32:96:d4:14:5a:2f:15:e5:
                    3c:85:27:cb:92:9e:8b:8a:91:bd:72:9e:f7:6f:4a:
                    e2:2d:04:70:20:e8:f6:8d:55:e1:07:64:b4:f8:a9:
                    d2:a8:ba:a6:47:53:95:31:a5:e1:4d:2a:00:eb:87:
                    1d:c0:72:79:31:49:4d:95:80:ac:a2:a2:65:f2:1a:
                    17:4b:2e:41:e1:9c:49:a4:bf:31:51:28:b4:b4:74:
                    bb:24:03:72:da:b7:28:df:82:9b:9a:d4:20:d2:56:
                    e5:6c:97:bb:18:d2:7a:db:e6:99:f8:2d:37:77:cd:
                    26:68:02:b8:4e:37:2d:e3:c5:ed:c4:3d:e7:be:ec:
                    28:6b:a8:82:77:5b:49:47:09:d4:7a:80:6f:9d:2d:
                    1f:46:fc:a4:67:e5:0b:77:c1:0e:63:a4:39:43:38:
                    d5:8b:84:df:b1:f7:2d:82:9e:59:39:32:bb:5f:a8:
                    c1:9e:d3:96:38:e7:58:e4:7c:74:8f:ee:d3:22:53:
                    c6:37:dd:68:ee:53:a1:fc:38:90:0c:60:da:96:90:
                    7c:7f:56:9d:a6:8e:b9:1e:55:4b:24:82:bc:fd:ca:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:44:4A:DE:1E:99:DB:BA:EB:88:9F:D8:D3:49:67:C0:21:B5:E2:BF
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1A3449DC4BCE11EDB1D8007EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/24
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         c3:98:2b:ce:5c:d4:32:92:0a:90:9d:52:93:34:b8:e6:36:16:
         70:74:85:63:1f:51:58:5d:46:80:0b:25:99:34:f3:df:92:3e:
         da:a7:e9:83:10:36:fd:c8:91:bb:19:e9:b1:c5:c8:59:88:8a:
         3a:c3:c2:ef:88:77:ae:09:b0:4c:80:29:56:b2:5c:b5:45:b8:
         06:68:9b:3d:43:89:f4:19:1f:75:05:fb:fe:e0:2c:7c:02:c8:
         8f:5c:7b:07:5c:f2:f1:b8:b8:b3:6a:94:c9:c3:df:87:9f:9e:
         94:ac:5d:b5:e3:82:77:3e:b8:e0:65:9f:bf:89:ea:30:3c:ff:
         f2:4b:61:40:20:6f:06:57:e2:36:e9:bd:21:26:35:17:e4:4f:
         46:4f:fc:11:fa:56:a2:91:fd:11:40:dd:df:5c:b1:d2:12:00:
         cc:1a:e0:33:dc:95:23:67:e9:5b:fb:9e:5f:b6:de:57:03:09:
         11:3c:54:54:b3:53:bb:e9:3b:dd:28:41:6a:02:0c:cf:35:46:
         34:50:cf:87:67:c1:b2:bf:a8:36:76:fa:6a:e9:b9:fc:c9:e0:
         e6:48:19:fa:a6:eb:ed:a8:ba:f8:24:1c:5a:25:28:5c:e6:6a:
         f4:61:de:b5:f5:89:fb:d1:49:00:af:ac:46:23:87:54:56:f3:
         78:10:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----