Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1C48F3E053C011ED88BE5A71C4F9AE02.roa
File:                     1C48F3E053C011ED88BE5A71C4F9AE02.roa (raw, json)
Hash identifier:          7FbCoK53m7X/XgD+4ViHz2/UNwlm6H6E0WyT4pmOyGI=
Subject key identifier:   E0:31:76:41:AB:58:55:DC:CE:C8:1A:D1:DB:6C:5D:A6:D0:CE:42:EB
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3D0F
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1C48F3E053C011ED88BE5A71C4F9AE02.roa
Signing time:             Tue 25 Oct 2022 01:40:10 +0000
ROA not before:           Tue 25 Oct 2022 01:40:10 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15631 (0x3d0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Oct 25 01:40:10 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=63573e7a-6d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:71:57:50:05:8a:75:d5:a2:61:79:30:d7:
                    48:1e:27:e4:79:43:d9:42:94:af:37:c5:d9:43:cc:
                    c6:14:60:91:d5:04:6e:11:6f:60:0f:97:61:0e:c0:
                    2b:14:68:b4:42:e1:95:2a:f5:75:5e:3c:72:8e:41:
                    17:17:6c:86:1b:19:c8:dc:29:13:6e:08:71:19:dd:
                    c6:80:72:5c:87:f2:c0:6e:3c:74:8b:ec:34:69:ce:
                    6e:45:d1:17:72:de:43:99:83:02:d0:91:0f:6a:4d:
                    1d:51:f3:55:d7:d4:30:34:32:8e:60:e6:04:35:2a:
                    59:be:aa:0f:71:55:99:3b:fe:a2:93:4d:36:20:71:
                    a8:85:18:b3:a2:eb:8f:91:09:40:e7:06:f8:55:f5:
                    89:d4:0d:ea:17:15:22:f4:1a:c6:ec:8c:26:7a:f0:
                    ea:41:36:84:10:a0:a2:d5:44:51:16:68:9f:e9:45:
                    32:2b:35:35:54:db:28:3b:97:5c:69:6d:7b:fa:81:
                    66:ba:16:a9:8f:fe:ea:ff:33:ad:f7:49:20:49:35:
                    3f:dc:64:5f:08:56:b8:9b:8b:db:ee:36:6c:78:02:
                    67:db:7d:30:a9:2c:52:8c:27:08:15:ee:9c:b5:70:
                    98:b6:de:2e:c4:36:7f:78:98:b5:7e:0d:70:fd:1e:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:31:76:41:AB:58:55:DC:CE:C8:1A:D1:DB:6C:5D:A6:D0:CE:42:EB
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/1C48F3E053C011ED88BE5A71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         c5:c8:54:67:72:d5:bd:0d:3d:29:97:79:67:00:f5:91:90:c0:
         e3:b8:f8:57:b2:8d:ed:ed:1e:51:da:e0:eb:22:4c:c1:99:33:
         d7:89:24:20:c7:f7:3c:70:40:93:63:6d:32:0c:aa:32:90:f9:
         c5:63:13:5b:fa:04:40:40:e5:6d:b0:0b:1a:91:57:f1:77:2e:
         19:82:99:ee:2a:c3:8e:13:08:0a:34:08:ad:03:d1:5e:db:8c:
         88:26:93:f3:4d:2a:b8:2e:1a:96:a2:f2:91:22:a2:43:f5:5a:
         63:03:74:84:22:09:6c:38:5f:10:da:e3:d6:e6:23:25:57:14:
         fe:bb:7e:4a:83:03:22:eb:4f:cf:5e:11:5f:4e:d9:08:96:7d:
         1b:38:1c:fc:85:e8:dd:5c:b8:e6:90:e4:f9:9b:10:32:26:ec:
         92:cd:0c:46:dc:7a:c6:d1:e9:a9:c7:cd:7d:f5:89:8c:ad:36:
         c0:4e:71:24:23:d1:df:82:a1:18:30:96:00:d4:ec:70:63:da:
         30:2c:55:e7:5a:58:90:af:de:42:36:1e:94:b7:ec:be:ba:1e:
         9b:fc:48:36:99:e1:da:96:1b:b5:e0:9a:94:1e:7e:19:27:1b:
         35:26:18:63:64:34:24:81:59:93:49:72:0d:dd:c8:14:a8:82:
         84:f6:ad:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----