Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/BE10A156591E11ED8B2D104FC4F9AE02.roa
File:                     BE10A156591E11ED8B2D104FC4F9AE02.roa (raw, json)
Hash identifier:          Mf3ok+ICqlXijOBSbACgmPNfId7eMhhkJmj51c4f4MM=
Subject key identifier:   32:C2:B3:A2:4C:8E:17:03:C4:EF:A0:8F:55:66:F6:A7:A6:A2:4B:42
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3D4E
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/BE10A156591E11ED8B2D104FC4F9AE02.roa
Signing time:             Mon 31 Oct 2022 13:20:09 +0000
ROA not before:           Mon 31 Oct 2022 13:20:09 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15694 (0x3d4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Oct 31 13:20:09 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=635fcb89-ab08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:cd:d7:08:c6:a6:ea:d4:f5:19:63:7b:97:
                    cf:3f:58:02:45:b7:61:7a:8d:b8:fb:27:40:40:f2:
                    80:fd:6a:a4:86:3f:5f:12:34:db:80:08:c5:54:09:
                    ec:54:79:89:bc:f6:2d:9e:37:84:d0:a6:92:61:61:
                    c1:f0:17:70:5f:d6:ff:86:98:35:36:a7:bb:03:b4:
                    2f:a0:20:3b:ca:7b:57:48:6e:40:33:6a:c8:7d:c9:
                    82:78:db:5b:19:e4:40:7c:18:2a:bd:d1:5d:b1:93:
                    5f:61:cc:62:89:19:24:fe:29:7e:df:81:77:bb:cd:
                    e4:28:e2:17:a7:2f:e0:c7:d0:0d:70:67:f1:cf:89:
                    be:bf:fd:d5:20:ba:67:c5:7c:29:f6:3a:5c:93:c3:
                    68:63:69:92:2f:d3:74:ef:18:a3:42:46:53:ef:10:
                    f7:37:0e:9b:ed:55:20:83:c2:17:46:55:a7:d5:9b:
                    91:c2:88:5e:1d:cd:0c:c8:9f:47:2f:2d:9b:23:8b:
                    35:17:54:95:13:a7:1f:f6:7b:b8:e0:06:ca:2a:23:
                    91:07:09:31:ea:2e:e9:6e:19:67:82:02:53:04:a6:
                    a2:58:b5:8b:e7:4c:dc:e3:61:ee:45:a1:07:11:c9:
                    ef:58:bd:15:cb:d5:2f:2a:89:18:02:3d:93:d2:de:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C2:B3:A2:4C:8E:17:03:C4:EF:A0:8F:55:66:F6:A7:A6:A2:4B:42
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/BE10A156591E11ED8B2D104FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:54:16:ed:31:f6:9c:d8:f6:5a:87:54:d8:fd:ce:fb:27:
         6f:07:f6:85:b4:bc:3d:cf:55:10:4e:14:04:06:e9:44:dd:8e:
         bd:7b:41:38:3c:81:ca:e6:b0:81:94:b5:66:26:e0:18:40:7f:
         d0:d0:12:fe:ff:c9:bf:5e:1b:5d:2a:f8:14:83:33:ee:60:c3:
         da:3b:96:89:81:85:19:c6:62:6f:8d:20:80:9b:0d:5b:a2:36:
         ad:e9:a3:2c:83:c5:27:68:3e:eb:35:40:67:99:0b:b9:85:6b:
         bb:9b:ef:be:f9:bb:0e:5c:5b:55:7a:a6:be:d1:62:9d:5c:b8:
         26:e4:fd:43:b7:3d:0c:51:93:e3:80:a4:38:19:22:72:9e:71:
         23:e8:7c:cf:99:e6:e8:97:9d:67:63:3b:b9:84:20:62:2c:46:
         de:cc:df:b6:23:62:6a:63:04:1c:1d:5f:ef:c4:b5:9b:08:0d:
         bf:99:80:2a:87:22:7a:08:96:e2:52:3c:b6:96:73:a3:bf:31:
         ab:e8:6d:61:15:a1:c1:00:d9:c7:e5:71:22:47:83:f4:00:30:
         e3:12:ed:57:1e:dd:b3:88:34:c8:3a:c5:75:36:c6:22:2d:b5:
         21:69:1f:61:fe:dd:96:19:44:b2:5c:18:dc:61:0e:a6:c3:77:
         71:96:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----