Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/E1A3A8ECBB7711ECBFBE9A71C4F9AE02.roa
File:                     E1A3A8ECBB7711ECBFBE9A71C4F9AE02.roa (raw, json)
Hash identifier:          zOTM76Rm7Aq5wHNeadtuN4HeKpunubPKPTWsoRw58Yo=
Subject key identifier:   59:8B:FB:34:23:C5:F5:7F:10:A9:42:91:DA:B1:94:42:17:04:39:DC
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       38CC
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/E1A3A8ECBB7711ECBFBE9A71C4F9AE02.roa
Signing time:             Wed 13 Apr 2022 22:20:10 +0000
ROA not before:           Wed 13 Apr 2022 22:20:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14540 (0x38cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Apr 13 22:20:10 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=62574c9a-e1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:05:a1:e0:bd:ea:19:56:d3:c9:3b:d0:08:
                    71:ff:96:ec:f9:35:4b:2a:02:7a:c7:3c:91:46:1f:
                    76:a8:42:a8:30:f0:65:f9:ad:27:6e:f7:1d:78:8f:
                    85:a4:1e:04:86:25:d1:db:8d:d7:09:03:d0:d1:2e:
                    5c:e1:7c:2c:cf:85:55:fc:a2:e7:ca:32:cb:4c:e9:
                    4f:39:52:28:a0:48:8e:f7:f4:ed:39:1f:fe:eb:17:
                    6d:91:9c:a1:29:00:7a:3f:5c:40:91:59:74:c2:4f:
                    c2:a7:03:29:55:c3:58:1f:67:f0:c9:1d:73:68:ea:
                    eb:42:2a:d6:38:d2:05:07:7e:52:f8:59:10:69:ba:
                    dc:5c:42:6b:3f:f9:e4:9d:9f:99:15:b3:0c:22:a9:
                    df:e2:27:2f:c0:12:70:a0:f9:d0:e8:39:be:93:03:
                    9c:67:d9:6c:e3:f4:ae:32:79:c6:90:4b:a7:1b:18:
                    09:0b:3a:d8:39:21:e5:53:bf:ef:1a:45:3b:04:39:
                    61:46:1e:8d:1c:48:93:2d:35:13:34:ed:98:a7:66:
                    de:6d:67:6e:a0:20:d3:7a:c9:15:13:c5:f6:55:2c:
                    dc:36:7f:c5:f9:2b:4f:13:c5:0f:8f:0d:38:ad:06:
                    08:59:4b:45:05:80:9d:0f:28:8e:41:ff:7b:e2:cd:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:FB:34:23:C5:F5:7F:10:A9:42:91:DA:B1:94:42:17:04:39:DC
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/E1A3A8ECBB7711ECBFBE9A71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:87:5e:69:fe:3a:c9:cc:64:d6:f2:b2:b7:e2:52:f1:74:f7:
         38:ef:a3:05:1c:84:b6:6c:22:49:d7:09:32:31:ce:ab:07:07:
         08:40:32:5d:0e:0e:56:80:3d:55:83:40:87:ea:6d:c2:31:42:
         d2:a8:92:73:c4:ed:30:a1:32:8d:32:41:7c:0c:b2:46:c7:24:
         44:9d:a3:b8:91:bc:42:82:3a:1d:29:b2:9b:ef:4b:0a:b7:9e:
         81:89:ea:dc:a2:b9:25:c9:18:92:58:e9:56:89:08:ef:3c:51:
         84:3f:d9:c4:f7:22:7c:11:43:bd:93:44:27:70:7a:9b:63:2d:
         d4:6e:3e:a6:bb:8f:4f:86:16:da:5f:e6:4a:47:73:a1:39:de:
         c3:01:4d:f3:26:54:3f:26:8c:f6:a2:35:d8:ae:d9:cf:fc:d8:
         04:cd:71:53:47:9b:ec:bc:d4:1d:11:10:26:1a:1a:e6:68:3b:
         27:71:76:e2:56:8b:e3:83:81:60:e8:3c:4f:da:e9:f5:5e:a5:
         7e:39:19:2a:52:14:56:af:7f:97:a5:85:b5:c7:4e:e2:b4:12:
         4f:08:e7:06:82:52:50:5a:af:3c:1f:47:64:03:24:e2:94:df:
         df:c9:3c:20:3d:6e:9d:a7:eb:6b:d4:b8:28:84:47:e6:0c:f3:
         86:3f:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----