Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
File:                     CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer (raw, json)
Hash identifier:          BHC4U1u9y10Rt2TuMvYjdlbjbHYcb0ahUTabyX0sI8g=
Subject key identifier:   09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022642
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 Dec 2024 18:34:25 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 135637
                          IP: 103.77.100.0/23
                          IP: 2407:9280::/32
Validation:               Failed, certificate revoked on Wed 19 Feb 2025 21:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140866 (0x22642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Dec 31 18:34:25 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91C612E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:17:46:e0:7f:80:dd:94:ad:d9:74:fe:3a:
                    6d:cb:dc:13:cb:1e:fa:7a:0a:1b:63:1a:22:41:60:
                    be:b9:a3:0e:b5:6a:fa:37:85:93:6c:23:c1:68:ce:
                    07:d5:c8:d3:e7:48:4f:cc:5b:55:df:23:1c:52:31:
                    fb:43:0d:c5:45:67:ca:fa:06:a2:c0:50:ee:23:90:
                    63:08:f9:ee:91:0b:3f:82:75:e8:08:79:03:8e:f1:
                    6b:dd:6e:90:a4:05:28:c4:37:44:5d:5f:d1:a1:1f:
                    01:27:89:57:53:9a:68:5e:ca:0e:15:2f:23:fb:85:
                    78:e9:90:93:a8:11:93:49:5e:5e:80:15:23:8e:73:
                    77:04:78:05:2d:e4:52:02:42:24:8d:05:d0:cc:7b:
                    6a:3c:65:69:dd:c9:e8:d7:76:0b:d9:21:e4:80:c3:
                    41:d9:db:39:c0:d5:7c:93:ce:02:4d:eb:1d:3b:3d:
                    8e:54:69:ae:f5:95:b4:81:ae:d1:2a:73:ed:21:48:
                    ec:95:26:82:aa:a6:f2:a2:fb:e5:82:78:97:43:77:
                    15:fd:de:c5:ef:d4:d0:85:12:12:0d:34:72:50:62:
                    75:4b:a9:1b:dd:12:12:b9:ab:48:be:62:dd:58:91:
                    eb:53:a9:8d:f5:a2:eb:28:7a:fd:90:ac:91:27:62:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135637

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.100.0/23
                IPv6:
                  2407:9280::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:99:e4:1e:69:16:01:91:a9:3d:e5:cb:f1:34:b0:5f:bc:68:
         65:e8:25:ce:9e:20:ad:a6:8d:2d:9f:b5:9f:c8:2b:0a:73:7a:
         7f:c8:e0:d8:81:cd:07:d7:a5:ae:29:51:31:83:c8:5d:3d:bb:
         5c:4d:36:b0:2d:33:78:d1:f3:ed:57:a4:0a:cd:0d:2e:15:79:
         1e:84:e7:e3:25:a9:94:83:3d:9d:61:c9:ba:d4:c7:50:4d:80:
         85:fb:07:29:bd:b4:4e:10:4f:9c:3a:72:e2:35:cd:a6:8a:07:
         14:db:77:a5:9a:15:70:d2:40:a1:ce:9c:c4:0e:88:e8:18:db:
         f1:51:d8:31:c2:8a:12:24:c6:20:58:b2:f3:fa:87:ac:9d:b0:
         8a:25:71:ec:16:70:3e:17:80:83:55:98:c4:e0:97:08:77:6d:
         8a:46:25:e7:e3:a9:97:35:ac:40:6e:34:8c:18:53:95:54:12:
         d3:cd:76:e6:17:71:a2:d0:41:0d:84:e9:11:17:bd:76:da:16:
         3d:49:14:e3:a3:3b:5e:7a:e6:ca:06:3f:59:e6:54:c4:20:77:
         c9:92:c2:0b:b6:98:9d:cb:30:32:2f:f3:cc:69:1d:83:8b:00:
         12:62:b4:7e:56:b4:51:85:01:fd:29:e2:a6:40:a4:cf:72:21:
         36:4b:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:18:45 2025 by rpki-client