Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/8ECCC3C6CEDF11ECB8A1A318C4F9AE02.roa
File:                     8ECCC3C6CEDF11ECB8A1A318C4F9AE02.roa (raw, json)
Hash identifier:          /ZJdreiRagXp9okSN29lG81p/rATcdjQcGfMzt4rm0A=
Subject key identifier:   7B:75:BD:64:0E:86:2B:88:31:74:A6:C8:58:72:FC:1C:76:A6:01:7C
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       39F8
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/8ECCC3C6CEDF11ECB8A1A318C4F9AE02.roa
Signing time:             Mon 09 May 2022 03:20:10 +0000
ROA not before:           Mon 09 May 2022 03:20:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14840 (0x39f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: May  9 03:20:10 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=6278886a-aa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:85:31:00:73:3b:d0:d5:01:35:c0:16:d6:
                    13:89:20:84:13:28:fc:6b:21:89:9a:18:30:6a:e2:
                    e0:10:b2:66:91:ca:17:40:57:71:fc:36:82:71:12:
                    4d:fe:1c:87:01:4a:7f:41:ed:08:b3:74:6c:90:79:
                    0f:ce:ce:86:ef:3c:b5:6d:ef:c6:8a:14:45:c5:94:
                    11:73:c9:5c:8a:aa:cd:47:6a:ff:ad:4e:68:dd:54:
                    53:6b:5d:07:ac:8d:8e:66:83:c3:c6:36:92:88:89:
                    fc:7c:87:f1:69:c4:d9:be:d8:d5:6c:34:91:4d:26:
                    04:2a:11:53:21:c3:c3:49:a6:1e:63:6d:25:1c:85:
                    17:e4:35:44:39:77:b7:97:bd:52:60:58:b1:43:0c:
                    bc:ef:59:0b:5b:9b:53:32:fa:7b:c8:18:62:38:56:
                    d4:c6:ee:74:e9:4f:9f:aa:5a:38:45:ee:db:21:af:
                    d9:86:0f:8f:35:a4:27:43:62:86:c2:fd:6f:9b:c5:
                    2a:d5:79:9c:44:0a:88:11:be:96:67:52:7b:cc:4c:
                    2e:74:96:0b:5a:2d:06:50:f9:b2:b7:13:21:8f:38:
                    ae:17:2f:27:13:3c:8d:a9:f8:39:14:07:0a:34:51:
                    a1:97:5a:17:2b:57:7b:83:e3:87:99:d3:d2:73:f6:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:75:BD:64:0E:86:2B:88:31:74:A6:C8:58:72:FC:1C:76:A6:01:7C
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/8ECCC3C6CEDF11ECB8A1A318C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         b4:06:1b:0d:27:19:59:11:2c:42:5a:88:e5:9d:b1:4b:85:02:
         e8:55:53:f7:08:10:bb:ca:07:e4:fb:56:2c:7d:be:df:35:fd:
         bc:50:66:bc:0a:84:b6:a3:5b:b9:fb:20:ba:39:96:f1:e6:f4:
         a6:67:e9:ec:63:b3:64:80:54:90:ed:e2:83:eb:1a:74:3f:b0:
         75:31:5b:e5:99:c6:c7:ac:31:4c:42:03:2e:44:5a:70:b1:e6:
         06:5d:e8:7a:d5:1a:d4:80:33:36:86:e7:18:c7:30:87:1d:82:
         d6:a8:3b:1e:9a:e7:c7:4a:94:ff:9a:b6:1a:3a:f3:2a:3d:ca:
         54:04:bc:ef:5a:1f:34:79:2d:cb:6a:62:75:3b:b8:09:5a:21:
         ad:79:04:b6:24:f8:69:59:45:fb:c8:b8:c1:13:84:d9:37:aa:
         ac:a1:10:ff:85:06:90:4a:53:fe:90:ac:12:40:78:40:32:8f:
         be:55:9c:0b:47:91:e9:65:e5:11:46:7d:18:95:0c:6d:86:05:
         ed:14:16:4b:db:82:ac:f1:45:dd:d5:91:b5:70:e8:8f:af:fd:
         e2:f7:10:b8:4d:f7:35:94:e9:ed:43:56:fa:d6:ce:f4:0f:8c:
         06:97:25:ca:1a:3c:06:59:87:d6:24:6c:4a:c2:6c:09:81:17:
         a8:38:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----