Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/8BF481DAD84D11EC92A51073C4F9AE02.roa
File:                     8BF481DAD84D11EC92A51073C4F9AE02.roa (raw, json)
Hash identifier:          zRlEtZYjFIG+UvVCzKOm3RO6MA+ypZhl3Cd8p4BDmO8=
Subject key identifier:   9D:35:B8:83:25:3C:11:9F:17:6B:AA:F4:B7:AF:94:FF:2D:1D:07:2C
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3A83
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/8BF481DAD84D11EC92A51073C4F9AE02.roa
Signing time:             Sat 21 May 2022 04:30:10 +0000
ROA not before:           Sat 21 May 2022 04:30:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14979 (0x3a83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: May 21 04:30:10 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=62886ad2-4520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d6:85:57:d7:aa:4e:bf:1c:96:a3:ad:03:dc:
                    8f:d6:50:31:af:44:15:1f:58:42:ad:37:21:ab:b7:
                    85:6a:3d:77:24:1c:d8:a4:bf:37:d6:68:02:83:b8:
                    a3:fc:a1:44:36:e8:b9:35:3d:5d:07:ac:1e:df:a6:
                    c5:ba:c9:b8:74:34:84:b3:4d:2f:87:da:fc:74:63:
                    44:34:39:ff:c0:e8:10:f0:78:36:cf:ad:c1:66:82:
                    c3:7b:20:76:e2:28:fc:3d:41:35:81:7d:17:b5:e6:
                    7a:6c:93:27:94:1a:c7:54:21:d3:48:de:94:e6:5a:
                    85:1a:64:5b:86:bd:3e:65:53:99:85:8a:91:52:14:
                    ff:58:87:1f:85:f4:52:4e:16:8d:66:bf:23:8f:8c:
                    9b:51:a1:42:5a:64:ab:e4:9c:96:2f:06:c5:a8:20:
                    73:5d:90:dc:37:06:48:3c:29:16:8f:5c:2f:64:28:
                    24:33:fc:2b:79:c2:db:15:a2:d8:6e:ba:8f:1d:d0:
                    9d:0a:0e:c5:e0:ae:fb:ee:7e:4d:11:b6:13:8e:da:
                    8c:ce:2a:b3:a3:e5:97:7e:71:15:40:c8:a6:d4:32:
                    ab:e9:5b:66:c6:d9:9d:be:12:22:ae:16:fb:1f:9e:
                    a9:3b:f4:18:e8:c6:bc:37:4f:5e:84:b9:cf:80:39:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:B8:83:25:3C:11:9F:17:6B:AA:F4:B7:AF:94:FF:2D:1D:07:2C
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/8BF481DAD84D11EC92A51073C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         71:3d:ad:69:76:9b:25:66:74:4a:f5:b8:f6:4c:18:f7:a1:bb:
         78:73:8c:69:76:61:22:f4:44:b6:25:91:65:69:e9:53:89:b5:
         a4:32:cd:e9:a1:74:3e:a5:70:5d:c2:66:b3:56:c5:c7:5e:a4:
         fd:78:3e:e3:ce:45:c2:45:78:06:03:4e:7a:8e:1a:b5:55:f2:
         27:cb:1f:bb:d0:8e:cd:c4:20:e1:82:a7:09:53:e0:b0:0a:cb:
         46:df:ca:b9:87:c3:1e:64:d1:63:05:42:a7:b6:03:07:48:a6:
         15:28:5d:2e:ab:df:bb:5d:f4:09:79:ca:9d:91:11:f6:d0:53:
         f9:ec:2e:76:9a:b1:a2:a5:1f:61:c5:5a:f4:48:e1:25:1b:7e:
         78:3b:fe:df:4b:51:0e:6a:9d:92:4b:ca:41:5e:cc:58:a2:c7:
         78:07:a0:c5:94:43:a8:ab:2d:3e:ca:14:af:78:a5:66:ba:16:
         04:40:ed:12:0f:a2:a4:b6:5e:42:b4:13:db:65:4e:06:96:8e:
         09:0b:47:b2:ef:b7:3d:f7:e2:cd:1f:5e:ba:cf:32:38:b4:da:
         dd:82:35:f5:9c:cd:36:f9:4e:6f:7f:bc:51:09:59:54:91:0f:
         3e:ee:9c:d3:67:2d:20:ae:6d:86:8b:a7:8a:23:33:02:b7:29:
         3e:5a:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----