Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7C5ACCAC869F11EC8815DD4EC4F9AE02.roa
File:                     7C5ACCAC869F11EC8815DD4EC4F9AE02.roa (raw, json)
Hash identifier:          EmQhn0+yzv/aoXTbrg1TgLyauJ/XQfX/cW6IXg9+t48=
Subject key identifier:   1C:A8:3D:47:26:5B:BC:70:55:D6:92:71:C5:67:34:40:95:BC:D3:98
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3673
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7C5ACCAC869F11EC8815DD4EC4F9AE02.roa
Signing time:             Sun 06 Feb 2022 03:20:08 +0000
ROA not before:           Sun 06 Feb 2022 03:20:08 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13939 (0x3673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Feb  6 03:20:08 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=61ff3e68-0dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:d5:81:0a:06:f5:43:20:53:0f:8a:f3:c3:
                    81:2a:78:c8:0c:93:2e:76:39:1b:fa:f2:1d:22:79:
                    ee:d4:e4:73:8c:fb:12:00:12:40:ec:7d:cf:77:73:
                    f4:96:e0:d9:47:e9:05:bf:9f:b5:1f:8c:2a:5c:08:
                    af:23:23:89:83:4a:d1:08:7e:42:e4:8e:2c:12:41:
                    01:d3:f5:98:c9:ec:ed:d7:87:de:17:6d:1b:ad:e2:
                    80:93:c4:59:85:1b:96:1f:24:ea:13:a4:9b:04:e3:
                    65:a3:a0:a4:2e:d7:d5:2f:f4:a8:60:79:b8:4d:fa:
                    7d:a0:85:7e:27:09:7e:5d:90:21:5f:c8:b5:22:7b:
                    09:e6:b9:ca:0d:a0:96:d8:60:c5:06:05:0e:f4:55:
                    94:2b:01:10:b5:d3:95:c7:3c:92:5d:d6:38:34:99:
                    a1:c7:c9:fc:4b:f8:10:d0:56:50:34:78:cb:c9:1a:
                    cc:ee:b8:9d:b3:3b:92:54:ef:d7:73:4e:7e:6b:d1:
                    8e:33:a5:a3:4a:b4:e0:b4:a7:53:2f:5d:33:6d:c7:
                    e4:e5:f0:59:c4:3f:71:1c:c1:f3:e5:3e:6a:b2:96:
                    25:06:6b:bd:d3:f7:ee:51:0b:4c:d7:0f:5f:e4:5b:
                    7c:74:f1:37:d8:58:0e:e5:d5:c6:c8:f1:25:50:fe:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:3D:47:26:5B:BC:70:55:D6:92:71:C5:67:34:40:95:BC:D3:98
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/7C5ACCAC869F11EC8815DD4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         03:1a:be:a0:a6:45:80:86:8f:dd:50:ab:08:e1:03:e2:c4:10:
         dc:16:39:60:65:74:64:05:f0:a0:be:de:c8:6c:9b:d8:19:68:
         01:15:e6:57:cc:f2:6e:42:a1:33:e9:f6:f5:4d:76:fc:40:34:
         b3:f0:09:e9:5b:78:03:e9:da:af:56:d0:f1:cc:db:24:eb:92:
         dd:2a:2d:d6:2e:8f:04:19:02:c7:4a:27:7c:92:71:4e:77:ae:
         51:ec:a7:8f:83:89:7c:d0:b8:e3:26:8f:6b:1c:25:6a:1b:c3:
         af:a5:b5:e3:03:87:ff:bb:8b:65:c5:d5:83:f1:b9:33:bf:0c:
         64:89:aa:4f:b6:40:a6:06:86:a7:f2:37:15:76:b8:95:de:aa:
         89:83:18:62:84:31:d1:93:13:31:79:93:5e:6f:78:ec:eb:24:
         64:73:8c:0a:4f:0a:de:27:2c:db:6a:c1:80:20:81:d5:77:53:
         77:48:0b:04:86:65:73:dc:b6:fe:f4:d2:b2:dc:af:b6:64:ac:
         fc:98:65:2f:27:6e:2d:94:54:a1:11:2e:ca:e1:cd:84:14:1d:
         37:c3:be:37:3e:87:cf:92:4a:a1:d8:69:88:e4:fe:5c:43:79:
         e1:72:42:3d:43:d0:39:00:18:dd:7a:37:d9:d5:f7:7e:ed:30:
         a8:89:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org