Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/94B9E054C14911EDA09D7521C4F9AE02.roa
File:                     94B9E054C14911EDA09D7521C4F9AE02.roa (raw, json)
Hash identifier:          E1AZym10EHz/o9g4wdeKB1EXmMN6ne2yXACycaAtVNQ=
Subject key identifier:   E4:24:CB:17:7B:E2:2F:CD:37:96:83:81:E0:BE:72:F7:02:D4:11:DF
Certificate issuer:       /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial:       0944
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/94B9E054C14911EDA09D7521C4F9AE02.roa
Signing time:             Tue 29 Aug 2023 23:32:36 +0000
ROA not before:           Tue 29 Aug 2023 23:32:36 +0000
ROA not after:            Wed 01 May 2024 00:00:00 +0000
asID:                     55714
IP address blocks:        27.255.0.0/18 maxlen: 18
                          27.255.0.0/24 maxlen: 24
                          27.255.1.0/24 maxlen: 24
                          27.255.2.0/24 maxlen: 24
                          27.255.3.0/24 maxlen: 24
                          27.255.4.0/24 maxlen: 24
                          27.255.5.0/24 maxlen: 24
                          27.255.6.0/24 maxlen: 24
                          27.255.7.0/24 maxlen: 24
                          27.255.8.0/24 maxlen: 24
                          27.255.9.0/24 maxlen: 24
                          27.255.10.0/24 maxlen: 24
                          27.255.11.0/24 maxlen: 24
                          27.255.12.0/24 maxlen: 24
                          27.255.13.0/24 maxlen: 24
                          27.255.14.0/24 maxlen: 24
                          27.255.15.0/24 maxlen: 24
                          27.255.16.0/24 maxlen: 24
                          27.255.17.0/24 maxlen: 24
                          27.255.18.0/24 maxlen: 24
                          27.255.19.0/24 maxlen: 24
                          27.255.20.0/24 maxlen: 24
                          27.255.21.0/24 maxlen: 24
                          27.255.22.0/24 maxlen: 24
                          27.255.23.0/24 maxlen: 24
                          27.255.24.0/24 maxlen: 24
                          27.255.25.0/24 maxlen: 24
                          27.255.26.0/24 maxlen: 24
                          27.255.27.0/24 maxlen: 24
                          27.255.28.0/24 maxlen: 24
                          27.255.29.0/24 maxlen: 24
                          27.255.30.0/24 maxlen: 24
                          27.255.31.0/24 maxlen: 24
                          27.255.32.0/24 maxlen: 24
                          27.255.33.0/24 maxlen: 24
                          27.255.34.0/24 maxlen: 24
                          27.255.35.0/24 maxlen: 24
                          27.255.36.0/24 maxlen: 24
                          27.255.37.0/24 maxlen: 24
                          27.255.38.0/24 maxlen: 24
                          27.255.39.0/24 maxlen: 24
                          27.255.40.0/24 maxlen: 24
                          27.255.41.0/24 maxlen: 24
                          27.255.42.0/24 maxlen: 24
                          27.255.43.0/24 maxlen: 24
                          27.255.44.0/24 maxlen: 24
                          27.255.45.0/24 maxlen: 24
                          27.255.46.0/24 maxlen: 24
                          27.255.47.0/24 maxlen: 24
                          27.255.48.0/24 maxlen: 24
                          27.255.49.0/24 maxlen: 24
                          27.255.50.0/24 maxlen: 24
                          27.255.51.0/24 maxlen: 24
                          27.255.52.0/24 maxlen: 24
                          27.255.53.0/24 maxlen: 24
                          27.255.54.0/24 maxlen: 24
                          27.255.55.0/24 maxlen: 24
                          27.255.56.0/24 maxlen: 24
                          27.255.57.0/24 maxlen: 24
                          27.255.58.0/24 maxlen: 24
                          27.255.59.0/24 maxlen: 24
                          27.255.60.0/24 maxlen: 24
                          27.255.61.0/24 maxlen: 24
                          27.255.62.0/24 maxlen: 24
                          27.255.63.0/24 maxlen: 24
                          42.201.128.0/17 maxlen: 17
                          42.201.128.0/18 maxlen: 18
                          42.201.128.0/19 maxlen: 19
                          42.201.128.0/20 maxlen: 20
                          42.201.128.0/21 maxlen: 21
                          42.201.128.0/23 maxlen: 23
                          42.201.128.0/24 maxlen: 24
                          42.201.129.0/24 maxlen: 24
                          42.201.130.0/24 maxlen: 24
                          42.201.131.0/24 maxlen: 24
                          42.201.132.0/24 maxlen: 24
                          42.201.133.0/24 maxlen: 24
                          42.201.134.0/24 maxlen: 24
                          42.201.135.0/24 maxlen: 24
                          42.201.136.0/24 maxlen: 24
                          42.201.137.0/24 maxlen: 24
                          42.201.138.0/24 maxlen: 24
                          42.201.139.0/24 maxlen: 24
                          42.201.140.0/24 maxlen: 24
                          42.201.141.0/24 maxlen: 24
                          42.201.142.0/24 maxlen: 24
                          42.201.143.0/24 maxlen: 24
                          42.201.144.0/24 maxlen: 24
                          42.201.145.0/24 maxlen: 24
                          42.201.146.0/24 maxlen: 24
                          42.201.147.0/24 maxlen: 24
                          42.201.148.0/24 maxlen: 24
                          42.201.149.0/24 maxlen: 24
                          42.201.150.0/24 maxlen: 24
                          42.201.151.0/24 maxlen: 24
                          42.201.152.0/24 maxlen: 24
                          42.201.153.0/24 maxlen: 24
                          42.201.154.0/24 maxlen: 24
                          42.201.155.0/24 maxlen: 24
                          42.201.156.0/24 maxlen: 24
                          42.201.157.0/24 maxlen: 24
                          42.201.158.0/24 maxlen: 24
                          42.201.159.0/24 maxlen: 24
                          42.201.160.0/24 maxlen: 24
                          42.201.161.0/24 maxlen: 24
                          42.201.162.0/24 maxlen: 24
                          42.201.163.0/24 maxlen: 24
                          42.201.164.0/24 maxlen: 24
                          42.201.165.0/24 maxlen: 24
                          42.201.166.0/24 maxlen: 24
                          42.201.167.0/24 maxlen: 24
                          42.201.168.0/24 maxlen: 24
                          42.201.169.0/24 maxlen: 24
                          42.201.170.0/24 maxlen: 24
                          42.201.171.0/24 maxlen: 24
                          42.201.172.0/24 maxlen: 24
                          42.201.173.0/24 maxlen: 24
                          42.201.175.0/24 maxlen: 24
                          42.201.176.0/24 maxlen: 24
                          42.201.177.0/24 maxlen: 24
                          42.201.178.0/24 maxlen: 24
                          42.201.179.0/24 maxlen: 24
                          42.201.180.0/24 maxlen: 24
                          42.201.181.0/24 maxlen: 24
                          42.201.183.0/24 maxlen: 24
                          42.201.184.0/24 maxlen: 24
                          42.201.185.0/24 maxlen: 24
                          42.201.186.0/24 maxlen: 24
                          42.201.187.0/24 maxlen: 24
                          42.201.188.0/24 maxlen: 24
                          42.201.189.0/24 maxlen: 24
                          42.201.190.0/24 maxlen: 24
                          42.201.191.0/24 maxlen: 24
                          42.201.192.0/24 maxlen: 24
                          42.201.193.0/24 maxlen: 24
                          42.201.194.0/24 maxlen: 24
                          42.201.195.0/24 maxlen: 24
                          42.201.196.0/24 maxlen: 24
                          42.201.197.0/24 maxlen: 24
                          42.201.198.0/24 maxlen: 24
                          42.201.199.0/24 maxlen: 24
                          42.201.200.0/24 maxlen: 24
                          42.201.201.0/24 maxlen: 24
                          42.201.202.0/24 maxlen: 24
                          42.201.203.0/24 maxlen: 24
                          42.201.204.0/24 maxlen: 24
                          42.201.205.0/24 maxlen: 24
                          42.201.206.0/24 maxlen: 24
                          42.201.207.0/24 maxlen: 24
                          42.201.208.0/24 maxlen: 24
                          42.201.209.0/24 maxlen: 24
                          42.201.210.0/24 maxlen: 24
                          42.201.211.0/24 maxlen: 24
                          42.201.212.0/24 maxlen: 24
                          42.201.213.0/24 maxlen: 24
                          42.201.214.0/24 maxlen: 24
                          42.201.215.0/24 maxlen: 24
                          42.201.216.0/24 maxlen: 24
                          42.201.217.0/24 maxlen: 24
                          42.201.218.0/24 maxlen: 24
                          42.201.219.0/24 maxlen: 24
                          42.201.220.0/24 maxlen: 24
                          42.201.221.0/24 maxlen: 24
                          42.201.224.0/24 maxlen: 24
                          42.201.225.0/24 maxlen: 24
                          42.201.228.0/24 maxlen: 24
                          42.201.229.0/24 maxlen: 24
                          42.201.230.0/24 maxlen: 24
                          42.201.231.0/24 maxlen: 24
                          42.201.232.0/24 maxlen: 24
                          42.201.233.0/24 maxlen: 24
                          42.201.234.0/24 maxlen: 24
                          42.201.235.0/24 maxlen: 24
                          42.201.236.0/24 maxlen: 24
                          42.201.237.0/24 maxlen: 24
                          42.201.238.0/24 maxlen: 24
                          42.201.239.0/24 maxlen: 24
                          42.201.240.0/24 maxlen: 24
                          42.201.241.0/24 maxlen: 24
                          42.201.242.0/24 maxlen: 24
                          42.201.243.0/24 maxlen: 24
                          42.201.248.0/24 maxlen: 24
                          42.201.249.0/24 maxlen: 24
                          42.201.250.0/24 maxlen: 24
                          42.201.251.0/24 maxlen: 24
                          42.201.252.0/24 maxlen: 24
                          42.201.253.0/24 maxlen: 24
                          42.201.254.0/24 maxlen: 24
                          42.201.255.0/24 maxlen: 24
                          103.17.200.0/22 maxlen: 22
                          103.17.200.0/24 maxlen: 24
                          103.17.201.0/24 maxlen: 24
                          103.17.202.0/24 maxlen: 24
                          103.17.203.0/24 maxlen: 24
                          110.34.32.0/24 maxlen: 24
                          110.34.33.0/24 maxlen: 24
                          110.34.34.0/24 maxlen: 24
                          110.34.35.0/24 maxlen: 24
                          110.34.36.0/24 maxlen: 24
                          110.34.37.0/24 maxlen: 24
                          110.34.38.0/24 maxlen: 24
                          110.34.39.0/24 maxlen: 24
                          180.92.128.0/24 maxlen: 24
                          180.92.129.0/24 maxlen: 24
                          180.92.130.0/24 maxlen: 24
                          180.92.131.0/24 maxlen: 24
                          180.92.132.0/24 maxlen: 24
                          180.92.133.0/24 maxlen: 24
                          180.92.134.0/24 maxlen: 24
                          180.92.135.0/24 maxlen: 24
                          180.92.136.0/24 maxlen: 24
                          180.92.137.0/24 maxlen: 24
                          180.92.138.0/24 maxlen: 24
                          180.92.139.0/24 maxlen: 24
                          180.92.140.0/24 maxlen: 24
                          180.92.141.0/24 maxlen: 24
                          180.92.142.0/24 maxlen: 24
                          180.92.143.0/24 maxlen: 24
                          180.92.144.0/24 maxlen: 24
                          180.92.145.0/24 maxlen: 24
                          180.92.146.0/24 maxlen: 24
                          180.92.147.0/24 maxlen: 24
                          180.92.148.0/24 maxlen: 24
                          180.92.149.0/24 maxlen: 24
                          180.92.150.0/24 maxlen: 24
                          180.92.151.0/24 maxlen: 24
                          180.92.152.0/24 maxlen: 24
                          180.92.153.0/24 maxlen: 24
                          180.92.154.0/24 maxlen: 24
                          180.92.155.0/24 maxlen: 24
                          180.92.156.0/24 maxlen: 24
                          180.92.157.0/24 maxlen: 24
                          180.92.158.0/24 maxlen: 24
                          180.92.159.0/24 maxlen: 24
                          192.135.90.0/24 maxlen: 24
                          192.135.91.0/24 maxlen: 24
                          192.144.78.0/24 maxlen: 24
                          192.144.79.0/24 maxlen: 24
                          2406:f500::/32 maxlen: 32
                          2406:f500::/36 maxlen: 36

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2372 (0x944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
        Validity
            Not Before: Aug 29 23:32:36 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=64ee8014-a1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:55:f3:c5:77:17:e6:97:69:70:f8:98:f8:
                    32:a2:1c:53:32:64:e1:7f:0f:43:35:25:18:52:6a:
                    fd:40:01:ae:07:4d:2c:38:96:ba:82:b9:1e:a4:5a:
                    29:b6:a8:2f:17:4f:83:25:26:50:76:97:90:61:ff:
                    1b:18:0a:d0:65:48:b2:9a:94:06:a7:f9:66:a4:fa:
                    70:86:a4:46:2b:f9:cf:cb:de:ee:71:68:8c:99:06:
                    05:cd:ac:88:74:f9:b3:96:22:f7:57:ae:8a:d6:5f:
                    22:19:5b:7c:57:02:65:8c:7a:61:d8:24:79:03:ce:
                    e4:93:24:b6:ad:50:45:93:ea:a2:51:b0:94:1a:33:
                    c4:c0:fe:19:4f:39:05:a3:2b:ed:5c:fc:13:7a:99:
                    90:0e:dd:17:3e:1d:2b:70:ed:08:11:e5:2a:17:c0:
                    7b:f8:34:f9:14:de:88:20:a5:af:6e:0a:36:03:52:
                    bf:49:39:b5:5a:72:f2:0f:46:42:0c:b7:ab:73:a3:
                    af:ba:1b:19:33:72:d5:21:c8:31:e6:26:50:02:3a:
                    80:44:a8:f2:20:40:b6:fb:e7:ed:a5:30:29:fe:38:
                    01:2f:43:90:29:96:02:99:24:13:bd:74:d7:69:d7:
                    03:ff:a5:b3:da:66:e4:67:2b:40:ca:2f:17:1f:37:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:24:CB:17:7B:E2:2F:CD:37:96:83:81:E0:BE:72:F7:02:D4:11:DF
            X509v3 Authority Key Identifier:
                keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/94B9E054C14911EDA09D7521C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.255.0.0/18
                  42.201.128.0/17
                  103.17.200.0/22
                  110.34.32.0/21
                  180.92.128.0/19
                  192.135.90.0/23
                  192.144.78.0/23
                IPv6:
                  2406:f500::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:e6:0f:1e:b8:04:78:70:33:4f:28:7c:b4:f7:5d:30:82:fd:
         d3:80:7b:f2:2c:b3:ee:5f:98:e7:9c:f4:8a:34:50:3c:22:e4:
         e3:c5:93:7f:28:d0:7a:2d:3c:bf:96:ba:3e:d4:63:69:9b:e7:
         e7:11:c8:1f:79:a2:53:3d:36:c4:f0:2d:19:c5:b8:d9:a4:ff:
         5d:28:83:e1:dd:e4:9d:19:b1:84:2d:dc:04:66:c1:61:96:53:
         85:d9:d3:7d:0c:1e:4a:ba:98:81:72:e3:56:ab:6e:2e:8d:7c:
         62:73:32:fe:f3:51:57:77:c0:7c:66:fa:38:b0:d8:93:80:fe:
         b8:c8:51:fd:eb:e6:ef:cd:66:7f:81:29:65:4a:89:e9:60:c6:
         80:08:a4:1f:01:f1:ad:70:a1:76:e6:2f:0f:c0:bc:11:e5:ea:
         cb:92:16:12:54:ec:17:d9:ea:ad:70:1c:af:b8:5f:51:f5:bc:
         83:f2:7f:0e:e5:6f:72:11:e0:ff:eb:da:82:a8:e8:6e:f9:1f:
         22:4c:cd:d7:4a:70:a4:65:f5:3b:f2:7c:77:6c:8b:f4:ef:73:
         68:04:18:06:d7:76:f3:56:f2:79:bd:44:65:e9:64:bd:16:23:
         5a:d6:53:0d:18:1e:28:b6:06:44:df:5b:99:85:bc:59:a0:4c:
         4e:77:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org