Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/88DDCB54DF7811EDACC0BD77C4F9AE02.roa
File:                     88DDCB54DF7811EDACC0BD77C4F9AE02.roa (raw, json)
Hash identifier:          +5j4VixhvrzE3pCRIyJTOPrZONqF9oK/PPMzU5h2l7U=
Subject key identifier:   E7:9A:AC:08:92:49:B5:26:0E:13:FE:F4:14:1D:26:D2:31:DB:F1:06
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0A44
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/88DDCB54DF7811EDACC0BD77C4F9AE02.roa
Signing time:             Thu 20 Apr 2023 12:40:30 +0000
ROA not before:           Thu 20 Apr 2023 12:40:30 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     9387
IP address blocks:        113.203.244.0/24 maxlen: 24
                          223.29.224.0/20 maxlen: 20
                          2401:4100::/32 maxlen: 32
                          2401:4100::/33 maxlen: 33
                          2401:4100:8000::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2628 (0xa44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Apr 20 12:40:30 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=644132be-9ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:6c:90:ff:a1:b9:97:cc:11:33:c6:b5:2a:
                    56:95:9d:45:db:dc:78:c1:d5:a9:1e:5f:b4:29:00:
                    b9:31:5e:5f:a9:32:98:ef:24:ad:50:58:e0:f7:11:
                    84:97:64:fb:d6:01:2c:56:6b:62:3a:1f:ac:29:2b:
                    49:85:bd:96:25:35:71:74:7e:59:9c:90:0f:dc:5f:
                    aa:70:47:5d:f4:55:c0:0b:25:dd:6f:3f:cd:e3:98:
                    ce:94:49:07:f6:34:3a:65:f3:d8:a7:0d:86:77:bd:
                    3f:54:5e:e1:6f:d1:5a:33:e2:4c:25:2e:8d:fd:9b:
                    77:11:88:12:45:7e:b7:41:ec:c1:ad:4d:89:79:93:
                    3e:e3:03:a2:8c:54:e2:85:91:92:07:19:1b:5b:bb:
                    8b:c0:2c:03:eb:a0:7e:47:91:ea:35:45:e4:7b:e0:
                    c1:79:04:c8:43:44:ee:c2:1e:ef:d6:68:3d:26:c3:
                    90:9d:af:59:ff:b0:43:50:a5:f7:b0:42:77:42:61:
                    99:50:f2:9f:aa:0f:2d:f7:d8:fe:7d:c2:fa:eb:e0:
                    c3:c0:10:2d:5e:a9:be:c3:9a:47:eb:5b:ca:a7:f1:
                    2f:21:22:9d:3b:03:4e:92:41:73:fe:e9:1b:b9:07:
                    f5:ab:d5:40:04:22:fc:07:cb:a4:87:44:ab:cf:7a:
                    9e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:AC:08:92:49:B5:26:0E:13:FE:F4:14:1D:26:D2:31:DB:F1:06
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/88DDCB54DF7811EDACC0BD77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.244.0/24
                  223.29.224.0/20
                IPv6:
                  2401:4100::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:36:b5:41:1e:66:45:34:5e:57:c3:d4:3d:4c:6d:4c:f3:51:
         8a:e2:64:52:aa:b1:ce:71:bf:32:bb:59:eb:3f:00:12:4e:dc:
         66:be:4a:68:1f:9c:7d:e4:99:df:4b:a6:8d:10:8e:f6:a1:01:
         7f:b4:81:18:95:5c:e9:6e:72:9b:84:2a:24:a3:f1:6c:a2:2f:
         61:b9:c7:80:56:d0:4a:b8:5c:ec:5b:d5:f0:1a:bd:ca:f5:f9:
         6c:fa:68:ac:9e:c6:33:c1:a7:0c:bf:b7:68:43:a7:92:92:49:
         16:04:7b:56:17:f5:2c:14:cd:3f:8f:83:e5:fc:76:11:10:f0:
         71:6a:c1:62:ea:64:51:14:fe:08:04:7a:be:56:60:2e:06:5b:
         bf:93:30:ec:c8:63:0c:de:43:76:75:fe:4e:12:10:be:d4:dc:
         c2:65:db:b6:21:a3:cb:58:20:49:60:af:f6:ae:b0:6a:12:25:
         20:02:6b:2c:a1:63:0e:bf:91:84:19:b0:63:44:d2:c2:01:5c:
         22:68:f4:74:18:b1:fd:50:82:10:79:6e:31:d6:a9:0d:2a:47:
         77:2b:d0:33:c2:21:3b:9a:94:45:fd:22:01:04:84:05:27:a9:
         da:ef:33:7d:64:ca:0e:35:c8:bf:26:d4:a4:99:f9:4c:1b:2d:
         ae:8a:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----