Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/94F18FDC9BCE11ECBACDFC3EC4F9AE02.roa
File:                     94F18FDC9BCE11ECBACDFC3EC4F9AE02.roa (raw, json)
Hash identifier:          ktLkwjrPbYLc2ePwMHyWGmFV+Gaw5gbKPteIFxNqVzk=
Subject key identifier:   AB:8C:C7:DE:34:A2:40:4C:FF:4B:C4:39:D4:E7:6D:6B:6E:CC:0B:9B
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       37A2
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/94F18FDC9BCE11ECBACDFC3EC4F9AE02.roa
Signing time:             Sat 05 Mar 2022 05:40:10 +0000
ROA not before:           Sat 05 Mar 2022 05:40:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14242 (0x37a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Mar  5 05:40:10 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=6222f7b9-4cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:6d:01:3f:95:8e:c6:98:c0:f3:00:a5:73:
                    99:2a:03:1f:28:72:bb:3a:6e:95:bc:db:be:ab:05:
                    19:19:da:eb:17:b0:35:61:7d:60:7b:d2:5d:4c:52:
                    b6:bd:1f:2e:18:18:86:58:d5:d4:ad:a0:e6:6c:8b:
                    97:7c:c8:b3:76:f0:7b:db:62:6b:94:51:c5:ab:4d:
                    81:c7:64:ce:70:40:57:7e:aa:54:75:c0:34:9f:69:
                    76:ab:85:d2:46:01:d8:47:f3:1c:27:69:0d:e7:ce:
                    3a:4d:12:45:0a:d8:48:84:4c:cd:71:60:76:ed:bc:
                    4c:86:da:20:cf:38:4a:50:bf:a4:d8:ac:c9:1f:b3:
                    d9:58:4c:35:b0:81:db:e0:92:7c:23:c1:af:23:0b:
                    10:35:24:9e:8f:21:1e:45:e5:76:fb:70:e7:1b:56:
                    00:2c:e4:4d:ec:c7:88:8d:19:98:b7:99:43:ce:34:
                    2a:dc:09:49:09:7b:2e:20:1b:db:34:00:80:b1:10:
                    a1:14:2f:1b:57:12:0a:ff:a3:f8:26:55:19:94:df:
                    53:00:18:f0:b3:b9:ae:93:4d:04:8c:90:9f:04:35:
                    da:21:8f:ee:e7:1c:6e:48:c5:26:fa:d6:23:cd:e1:
                    bc:af:9a:7b:13:99:c0:3d:2a:63:6f:f7:a4:9f:f2:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8C:C7:DE:34:A2:40:4C:FF:4B:C4:39:D4:E7:6D:6B:6E:CC:0B:9B
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/94F18FDC9BCE11ECBACDFC3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:9a:c3:6c:c0:9f:bc:57:3d:56:f2:8e:6f:2d:c4:0a:03:
         75:92:52:e6:f7:d4:40:bc:11:9a:ea:c8:09:66:f5:59:98:8e:
         67:7a:40:17:a8:2b:90:05:d4:d3:3f:d8:b9:99:81:3b:e5:78:
         ad:88:5c:f8:6e:2d:4b:2a:87:e8:d0:63:97:6e:0f:61:88:33:
         48:0f:c4:29:65:82:29:86:42:e8:3f:b9:ea:47:11:81:2f:0c:
         c1:d8:64:44:32:cb:69:f5:64:0c:17:63:c2:c4:d7:18:72:ec:
         57:36:84:fa:f7:5c:69:94:17:6d:10:96:f1:96:c2:47:3c:4e:
         5f:98:3d:d8:4d:8f:fc:a4:18:eb:ba:40:7e:7e:2f:fc:f3:30:
         bb:38:35:80:fa:78:82:31:a0:a9:a0:47:58:01:3b:72:2b:14:
         78:dd:72:b7:20:ae:4d:3b:79:6e:9d:ff:1f:ac:2a:98:46:52:
         58:81:f2:39:9d:c4:79:df:45:e3:ec:35:3d:c1:98:65:59:9f:
         13:80:df:5d:80:ca:9f:fb:15:0b:82:29:af:06:39:a5:3a:7a:
         d9:ed:bf:2a:7f:74:af:64:ee:d0:c2:9b:e0:26:c4:25:6f:1e:
         f2:57:08:11:01:45:46:42:af:51:08:90:25:5c:7e:0f:d3:6a:
         37:57:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----