Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7799C04408B611EDACE57065C4F9AE02.roa
File:                     7799C04408B611EDACE57065C4F9AE02.roa (raw, json)
Hash identifier:          8vhSNFtJ8sG8wGNoBJg3YdM7L+oITUrSL/z/Tf6rsiI=
Subject key identifier:   58:5E:5B:70:42:44:D1:3E:E0:CF:5E:8A:1D:23:58:AC:79:C7:E7:10
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0335
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7799C04408B611EDACE57065C4F9AE02.roa
Signing time:             Tue 23 Aug 2022 03:02:08 +0000
ROA not before:           Tue 23 Aug 2022 03:02:08 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     55423
IP address blocks:        203.130.152.0/24 maxlen: 24
                          203.147.6.0/24 maxlen: 24
                          203.156.150.0/24 maxlen: 24
                          203.156.183.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 23 03:02:08 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=63044330-8956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:fd:d0:95:89:93:51:d8:d7:34:62:69:2a:
                    41:9d:69:b4:f1:cf:17:74:ad:22:7b:56:71:bb:d6:
                    a9:11:8e:ae:9e:08:2c:37:48:40:30:41:48:ba:f1:
                    51:94:95:d1:2e:d5:90:ee:ac:08:8b:b9:8b:c6:66:
                    43:b5:e1:6b:aa:13:51:9f:a1:3c:5b:0b:13:7c:ad:
                    a3:97:cc:6d:98:c3:9e:46:1b:0a:a4:7a:99:17:29:
                    7d:90:36:e7:17:ca:ac:06:a4:b6:88:5b:e8:ef:93:
                    f2:65:f6:25:b9:2a:6f:e0:aa:a0:0d:56:25:31:6f:
                    c5:3d:6c:a3:99:c5:65:13:d3:19:0f:84:24:b0:45:
                    a6:3a:d4:9f:d7:01:a2:af:3b:ce:a5:7a:8f:20:c6:
                    4b:64:d1:51:22:b8:1e:bd:81:2e:fe:cf:68:99:5c:
                    26:b0:1a:c0:ab:a4:89:0f:ca:35:7e:79:0b:a7:39:
                    09:c8:70:fc:5e:da:32:21:ff:4f:3a:2f:c5:11:de:
                    f0:50:45:34:74:16:bf:3a:31:47:55:c8:05:8d:5e:
                    15:a8:aa:1e:5a:1b:7e:fe:7a:de:2e:71:14:26:9c:
                    52:22:b4:03:85:69:a3:b7:be:1e:67:12:2d:1a:f3:
                    b4:ae:e2:c3:20:7e:a4:46:1f:7a:2e:bb:fe:5b:e1:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:5B:70:42:44:D1:3E:E0:CF:5E:8A:1D:23:58:AC:79:C7:E7:10
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7799C04408B611EDACE57065C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.152.0/24
                  203.147.6.0/24
                  203.156.150.0/24
                  203.156.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:98:2f:be:11:82:bc:7f:57:1b:0e:73:a5:65:f9:df:50:6e:
         d3:ff:f0:89:d1:34:12:22:6c:e5:7f:ef:f8:ac:bf:dd:1c:3f:
         4b:65:8a:c9:8e:8b:a5:8f:3a:23:8b:e1:21:d3:0a:f5:99:33:
         23:48:e7:3b:b8:03:d0:fa:c9:74:c5:02:9b:24:03:9b:56:f6:
         24:0a:4e:ad:35:00:a5:ce:28:cc:69:c4:f6:a2:1b:72:ef:58:
         d9:b7:4a:05:75:09:02:70:64:26:22:a7:8c:72:42:a8:bb:c7:
         f1:2b:7f:ae:79:59:d5:f4:b3:47:27:de:fd:87:0a:a5:36:6a:
         81:da:91:dc:37:69:ae:03:59:0f:b2:41:7e:5d:ce:e7:81:43:
         15:93:2c:c7:28:d3:a9:bc:13:51:bb:f9:49:bc:f4:b7:6d:f2:
         13:c0:df:e2:1f:20:cb:79:cc:43:f5:83:61:47:5b:2f:4b:aa:
         71:0d:52:85:24:b0:f7:02:24:07:39:3e:6d:20:9c:44:28:52:
         2d:13:e4:0a:5b:f7:8d:0c:bf:2e:ab:f6:20:15:2d:3f:fb:28:
         6e:df:bb:72:8b:8a:4a:0a:83:9b:6f:7d:95:d5:6d:42:98:17:
         4c:f7:56:49:4b:50:dd:a0:30:a5:0a:4d:d9:fe:4a:1f:c0:fe:
         d3:19:b7:ca
-----BEGIN CERTIFICATE-----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