Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5BE5A8088DBA11ECA662A56AC4F9AE02.roa
File:                     5BE5A8088DBA11ECA662A56AC4F9AE02.roa (raw, json)
Hash identifier:          p5dplLtOLQEXOwn3D/8jTdr8OUIO1HIkeDfj/nDmbmU=
Subject key identifier:   90:D8:F3:9F:C9:16:C2:C6:42:33:F8:99:1E:EF:5A:48:6F:B1:19:B2
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       36D9
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5BE5A8088DBA11ECA662A56AC4F9AE02.roa
Signing time:             Tue 15 Feb 2022 05:40:09 +0000
ROA not before:           Tue 15 Feb 2022 05:40:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14041 (0x36d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Feb 15 05:40:09 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=620b3cb9-d94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:12:91:01:b4:7a:d8:56:37:a4:fc:f1:a7:
                    cf:37:75:33:ea:09:34:94:59:a4:cf:01:82:7c:93:
                    27:6f:06:fc:ed:f2:57:3b:8a:11:95:73:79:12:8d:
                    fd:79:f5:76:81:bb:46:27:ea:ad:bf:13:20:45:19:
                    db:c7:fa:6c:d2:f0:47:fe:1a:1e:bb:45:28:77:00:
                    3b:1c:aa:33:42:94:ef:83:ce:fe:f0:6e:3e:d7:2c:
                    93:69:c0:74:69:0b:d3:02:e7:1a:f4:90:57:d4:e9:
                    24:2e:0a:d2:ce:5b:aa:5c:45:9d:97:fc:80:fb:e0:
                    b0:c3:c9:71:42:d6:e4:47:92:1d:a0:42:74:c1:b5:
                    fb:89:15:30:d0:2d:df:b0:15:96:50:04:78:e6:0f:
                    a9:ec:81:2d:f4:16:ac:c9:e9:b8:1c:11:1a:96:d3:
                    f0:e4:57:eb:5a:13:2d:c4:b0:30:a5:6c:00:f1:9b:
                    18:c0:31:41:e9:04:73:91:e4:c5:73:90:af:61:b2:
                    4e:27:ac:d3:4a:db:90:75:bb:9d:5e:61:d2:4c:8e:
                    59:8e:0d:68:fa:73:78:3b:ed:0f:f7:a3:0e:5e:90:
                    ff:84:93:f8:7a:1f:ad:30:e9:4d:52:bf:2d:8e:32:
                    15:08:3f:ca:1b:ef:8d:5c:35:58:7d:8b:a9:32:6e:
                    a2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D8:F3:9F:C9:16:C2:C6:42:33:F8:99:1E:EF:5A:48:6F:B1:19:B2
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5BE5A8088DBA11ECA662A56AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:2d:0e:0d:15:75:2b:a9:7a:2c:a1:57:ab:a6:e3:92:8a:
         78:4c:3b:d9:15:35:2f:b8:fb:79:14:69:bc:76:cb:db:39:73:
         e9:61:16:55:ba:8f:d4:8c:5e:48:9c:14:af:b5:1f:49:6f:33:
         34:45:75:ca:67:c6:e2:75:56:28:69:50:45:95:17:fe:d9:50:
         a8:44:03:20:bc:95:56:d8:c0:91:f1:2a:c8:81:00:b3:7f:dd:
         fe:9f:8a:c0:d2:29:7e:fa:8d:08:97:ae:a7:c3:1d:ed:93:fe:
         bd:90:30:8b:65:02:1d:93:28:16:00:ad:26:90:82:59:52:c0:
         83:b7:12:4d:3a:b3:5a:b0:64:cc:2c:16:c9:83:b0:51:52:2c:
         3d:e6:9b:c9:13:b7:f5:4c:e0:f1:10:25:71:57:f6:24:0e:fb:
         9c:61:f8:4e:0b:1e:5d:a1:e3:00:f8:10:61:a4:62:66:6e:54:
         47:48:1e:77:13:bc:ff:6d:6e:eb:1a:72:23:5f:d3:80:fd:c1:
         4f:0a:df:69:38:9c:58:7f:73:f7:20:78:03:65:2d:f3:c7:08:
         b3:68:db:79:c8:bd:ef:25:60:58:1f:b5:57:6e:97:f5:4e:fe:
         7c:b4:6d:62:99:d4:42:a0:2f:ff:52:ee:2d:47:23:5c:3e:9f:
         55:88:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----