Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fbrUpQINchG7EwFRFSoyfe0pleE.cer
File:                     fbrUpQINchG7EwFRFSoyfe0pleE.cer (raw, json)
Hash identifier:          +IUHeBN9dlB2KCImFs5YeSnzLnSc18NQWNwCNYQODRE=
Subject key identifier:   7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02257D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/7DBAD4A5020D7211BB130151152A327DED2995E1.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Mon 30 Dec 2024 14:01:30 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 58925
                          IP: 103.25.124.0/22
                          IP: 2406:db00::/32
Validation:               Failed, certificate revoked on Tue 31 Dec 2024 07:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140669 (0x2257d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Dec 30 14:01:30 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A9126DA80000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:5b:03:d8:68:2f:b2:dd:25:7a:88:6c:65:
                    6b:f8:6d:b3:b3:30:c6:38:37:54:21:70:35:fe:f6:
                    5a:47:7a:c4:5a:e6:8b:0d:6e:d5:86:4f:41:27:d6:
                    2c:e5:23:f7:c0:6c:3e:e9:dd:7a:f7:f5:72:00:12:
                    8f:f6:7a:5b:a5:ed:bf:2e:28:01:1b:32:b4:6f:10:
                    b3:02:08:c5:d7:fd:bf:51:29:9c:e4:d2:6e:53:0f:
                    42:0f:6b:81:b5:8c:e5:9c:c5:67:38:2b:f0:d3:4d:
                    5e:bb:77:9e:4d:76:8d:9b:24:5f:51:de:de:a5:f3:
                    64:e4:30:db:f9:de:94:ce:7c:0c:59:c6:a5:a5:b6:
                    65:fc:3f:f8:0c:a1:60:7f:23:8e:5e:5c:43:91:2c:
                    36:e6:4c:20:6f:f3:77:a4:0c:52:4f:aa:1f:90:7c:
                    e5:30:aa:06:86:c3:a7:ae:53:c8:cd:3e:2c:8e:e1:
                    77:5d:e2:1b:8b:05:24:a7:cf:e2:29:9e:6f:aa:67:
                    1e:c2:cf:51:b6:e8:ba:23:06:e4:a3:f6:ed:47:7f:
                    d3:79:64:86:67:81:3d:78:43:ad:d5:cd:11:36:1e:
                    e0:e7:ed:52:65:ec:1c:90:2e:7c:30:38:bb:bc:12:
                    5d:bd:e4:92:40:1e:79:9c:3e:b3:60:16:b5:ea:4d:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BA:D4:A5:02:0D:72:11:BB:13:01:51:15:2A:32:7D:ED:29:95:E1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/0/7DBAD4A5020D7211BB130151152A327DED2995E1.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58925

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.124.0/22
                IPv6:
                  2406:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:53:5b:67:46:c1:30:ac:c7:98:fc:d6:db:f5:a6:b6:1d:5f:
         83:08:d5:a8:f9:60:1f:01:7e:ab:5f:ac:3b:34:64:f8:c1:5d:
         d8:3d:a7:b1:df:1d:fd:e6:a3:e1:83:d7:ee:75:9d:a9:f1:a4:
         7d:cf:f8:01:91:94:65:10:99:e1:3f:cd:e9:f3:74:b4:7c:ef:
         c7:5d:5c:e2:92:cc:c7:b8:aa:d1:95:53:b1:1a:fb:53:de:6c:
         06:0c:da:15:33:1d:1f:4c:9c:78:4d:23:61:ed:f4:2f:8a:1c:
         c3:a4:28:54:15:db:8a:26:d0:41:36:75:7e:7c:1e:2e:32:4d:
         cf:68:8b:5a:cf:7b:0a:66:19:a8:3c:09:33:cb:26:ab:82:16:
         1d:4d:56:51:76:2a:e8:76:f5:de:05:03:0a:2d:4a:e1:b2:a2:
         15:1c:d5:35:70:64:c9:5f:70:a1:96:b1:b0:42:58:22:49:9b:
         67:03:11:21:41:7f:89:95:85:f7:22:05:98:cb:9e:ac:f0:39:
         41:a3:89:44:46:64:89:55:78:aa:ad:c1:b7:42:1c:ee:60:f7:
         ed:32:d5:14:91:1e:42:fb:3e:9f:5f:4c:0a:75:fa:e3:95:5b:
         87:06:3a:52:1e:00:40:0c:d8:46:bc:e5:f4:35:8e:05:6a:c5:
         a8:a6:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----