Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/639BAC64A13811EC992FF474C4F9AE02.roa
File:                     639BAC64A13811EC992FF474C4F9AE02.roa (raw, json)
Hash identifier:          3K3q9Q9ZTIAWuCCl6GhgmQXMq/+HsxFovTCTuyBYhm8=
Subject key identifier:   32:21:57:61:06:09:94:94:70:86:67:1D:80:15:E0:F6:15:9F:0A:6B
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       37E7
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/639BAC64A13811EC992FF474C4F9AE02.roa
Signing time:             Fri 11 Mar 2022 12:40:11 +0000
ROA not before:           Fri 11 Mar 2022 12:40:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14311 (0x37e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Mar 11 12:40:10 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=622b432a-6c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:86:08:47:ab:b8:ee:3b:2b:21:69:36:1d:
                    0d:ba:01:50:af:f3:b5:16:c2:85:af:0b:1f:6d:74:
                    76:79:94:a3:13:f3:69:db:12:37:24:1a:d0:18:a0:
                    e1:76:0e:09:92:15:2f:4d:96:0b:e6:57:7b:0c:fa:
                    2f:d3:35:32:f1:ea:4c:0b:6b:c1:fe:2d:b2:12:f8:
                    ec:8e:7e:f2:dc:46:20:b8:4b:d9:b2:b9:53:a5:8b:
                    54:2b:cf:d1:10:aa:c7:ed:73:b5:6f:84:23:f3:ba:
                    20:6f:9d:6b:e5:44:4e:43:c6:6c:73:49:71:b7:d9:
                    67:4c:b6:75:ad:bb:d5:c2:bf:37:e0:de:e2:23:1b:
                    59:66:51:27:81:fe:05:f7:4b:f0:6f:6f:77:63:ad:
                    22:fe:47:81:55:e9:f5:5a:17:6a:6f:af:64:59:a3:
                    5b:d5:57:8b:10:2a:bf:61:0c:79:26:67:68:3b:fc:
                    14:6b:e7:b5:54:d8:0a:37:09:fe:9b:e6:12:86:24:
                    83:42:f5:23:f3:7a:5d:6b:b8:e6:3f:6b:b1:d7:4b:
                    22:2b:09:4e:05:ab:a9:65:9e:08:ec:55:93:5b:bd:
                    53:ac:a1:18:39:a8:17:a3:42:eb:d8:3b:ac:65:68:
                    c5:96:5e:11:53:65:c7:52:54:fb:63:ba:31:63:99:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:21:57:61:06:09:94:94:70:86:67:1D:80:15:E0:F6:15:9F:0A:6B
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/639BAC64A13811EC992FF474C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/24
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:a6:02:cf:f7:57:05:80:4c:e5:2a:e5:f7:42:4a:fd:18:
         c0:4d:25:23:17:df:a3:e4:e3:e1:4a:db:ec:3f:4f:19:51:e8:
         0b:3b:9d:5c:a3:f7:9c:36:95:48:af:f0:bf:5e:30:9d:8a:32:
         23:70:f6:df:ec:24:52:6c:54:da:ba:cf:7e:43:c7:cc:98:05:
         42:d5:b9:06:72:fe:f1:c7:2d:66:5a:25:ec:35:64:09:38:60:
         c7:68:f1:5f:3e:64:a6:3a:db:b8:aa:15:db:ae:09:e9:8b:27:
         17:42:eb:a1:41:61:9c:79:81:56:19:97:d1:61:a1:7b:fc:0d:
         6e:f7:c8:8c:19:d1:08:e9:ae:30:a3:44:2f:ec:36:6a:25:d9:
         f6:2d:ab:51:2f:d1:82:23:f6:e7:ae:77:a0:2f:6c:01:cd:18:
         5e:f0:82:99:a1:a4:84:91:e3:eb:cf:87:d9:c1:7a:73:50:2b:
         8d:04:73:10:29:fc:08:25:f3:e7:37:eb:d9:f5:d1:eb:7c:d6:
         00:12:ce:50:be:e3:e0:46:db:a3:db:15:91:1a:0a:84:3d:a4:
         fe:48:8d:bc:d5:9f:7d:22:80:25:16:24:95:d3:90:05:24:fa:
         95:7a:04:86:43:e2:9a:f1:a4:9c:a6:5d:99:52:40:a6:14:c1:
         b2:49:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----