Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6F802CE2C26E11ECAE79317EC4F9AE02.roa
File:                     6F802CE2C26E11ECAE79317EC4F9AE02.roa (raw, json)
Hash identifier:          hTa6787KS3ku83m28BT4adk5PJCszH6mU4f8XMjrAo4=
Subject key identifier:   DE:14:AE:FB:23:E7:3D:03:58:54:1D:BD:82:71:0C:02:09:BB:DE:2F
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3932
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6F802CE2C26E11ECAE79317EC4F9AE02.roa
Signing time:             Fri 22 Apr 2022 19:00:12 +0000
ROA not before:           Fri 22 Apr 2022 19:00:12 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14642 (0x3932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Apr 22 19:00:12 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=6262fb3b-efe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:bf:2a:c3:3f:06:ab:6f:7e:ed:2f:2b:2d:
                    1d:54:ab:e1:c2:52:c5:6c:02:d3:40:ac:d3:a3:3b:
                    85:33:15:b5:d6:2b:79:c2:a8:37:c9:56:46:83:46:
                    ad:c2:b0:7e:75:63:1f:99:c9:ba:d7:66:e7:22:b1:
                    b1:c1:8c:3f:bc:d0:16:8e:fd:96:c6:a1:42:18:1d:
                    5d:2a:b9:9b:86:ec:72:97:9f:2a:00:e5:cf:37:38:
                    64:2b:82:9c:4f:81:0d:72:bc:d9:ba:5a:76:86:e4:
                    42:58:ef:08:f3:63:6f:31:31:bd:58:7b:2e:1e:7d:
                    81:8f:20:c3:ab:0f:d1:8c:f2:eb:86:bd:37:83:a7:
                    45:04:4d:05:8b:24:c4:a0:8f:e9:20:9e:fb:a5:51:
                    74:3c:e0:52:86:9d:1f:f7:e2:5d:b9:80:1e:97:71:
                    54:85:8c:5b:ef:51:8a:8d:11:f0:72:d1:f1:03:e8:
                    b3:ec:f5:14:cb:1f:4d:3e:30:ef:e3:1e:ba:d8:b3:
                    cb:3f:f2:3c:3a:3a:a7:47:e7:09:11:bc:7e:c9:4f:
                    f3:e4:a9:cb:16:11:b1:41:a4:ed:06:82:c0:2b:ae:
                    57:37:ef:68:29:d1:ab:af:eb:24:80:ac:18:6a:7c:
                    00:d2:4c:23:fa:bb:3c:71:16:5b:30:0c:63:5c:b8:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:14:AE:FB:23:E7:3D:03:58:54:1D:BD:82:71:0C:02:09:BB:DE:2F
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/6F802CE2C26E11ECAE79317EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/24
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:93:ca:ed:31:3d:9e:05:bb:c4:34:bb:0e:ee:ee:f1:5d:
         27:ac:83:70:76:29:fd:4c:51:b9:52:6e:6a:95:ec:e5:2a:f8:
         a3:a0:02:76:83:4f:03:92:6e:5f:a0:10:65:81:82:b2:b3:8e:
         7e:7b:af:95:ad:ff:3f:6e:d2:02:02:98:93:9a:b9:41:d2:92:
         5d:75:10:77:7c:cb:93:59:1b:dc:ed:71:0e:5f:e2:1b:7b:a3:
         b0:61:0d:dd:3e:37:1f:ae:d9:ea:cf:45:f6:2f:13:18:9e:98:
         d8:6f:63:32:1c:77:c7:48:fe:94:af:7d:50:e0:1b:47:bd:8c:
         8d:85:59:b3:3f:c7:6d:1c:15:d2:45:00:8b:ba:d2:fb:64:72:
         52:44:2d:21:4f:78:c4:e6:90:87:e7:39:75:a9:c8:3e:c5:77:
         fd:0c:39:38:b4:ad:86:f9:88:1b:7c:69:45:c0:a1:85:72:9d:
         cf:99:a5:f7:49:dc:eb:2d:9a:61:39:7f:49:8b:a8:ca:7a:0f:
         4d:9b:cf:0c:af:b0:c1:12:b4:b0:24:82:9f:39:9e:8e:d8:0e:
         bd:31:41:eb:13:43:95:d1:a8:fb:50:ec:79:c5:e7:cc:26:c9:
         d4:30:f0:7e:66:e1:8d:18:94:d0:5c:81:a5:26:b3:bb:ac:bd:
         2e:53:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----