Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/TbfW7whrxbMkl8NqcuqFGfdVzwo.cer
File:                     TbfW7whrxbMkl8NqcuqFGfdVzwo.cer (raw, json)
Hash identifier:          2BfGUISCzBhq6XANFcEDdUBUvP+RHnHeHEP74rbJyyQ=
Subject key identifier:   4D:B7:D6:EF:08:6B:C5:B3:24:97:C3:6A:72:EA:85:19:F7:55:CF:0A
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       38B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/211/TbfW7whrxbMkl8NqcuqFGfdVzwo.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/211/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Aug 2024 01:36:30 +0000
Certificate not after:    Fri 15 Aug 2025 01:30:02 +0000
Subordinate resources:    IP: 210.171.160.0/20

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 01:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14512 (0x38b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Aug 15 01:36:30 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4DB7D6EF086BC5B32497C36A72EA8519F755CF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:09:08:ab:59:8a:ca:0c:0d:c6:f2:4a:fe:
                    be:b8:5e:58:42:7b:24:38:1e:d7:19:bf:4c:26:02:
                    96:67:9e:f9:c2:07:3d:77:74:5e:74:24:08:9d:7b:
                    a3:d3:da:fb:61:3a:35:db:a5:cb:4f:af:6a:e6:35:
                    7e:2d:7a:6e:6f:2c:99:0d:f2:6c:a8:c8:02:b7:e4:
                    9e:2f:84:e7:ec:28:a6:6d:d0:25:47:f2:df:a0:23:
                    5f:8e:01:82:16:9f:6a:b5:32:e8:55:68:28:e6:a1:
                    56:44:09:5b:1c:61:5f:ce:84:39:d8:2b:88:38:3a:
                    f7:1c:c6:88:eb:35:4b:aa:2b:21:41:98:c3:82:9d:
                    5e:ca:ee:50:58:e8:30:52:37:6c:b4:de:8a:bd:20:
                    73:af:68:b2:ba:ed:5b:d4:b4:77:fc:7c:c6:ea:29:
                    37:d2:cc:c4:11:38:da:e6:a3:fe:2a:af:04:16:48:
                    7b:97:da:77:c8:19:d8:1b:97:84:47:15:45:ce:53:
                    37:07:c1:81:04:b1:12:4a:04:9c:c2:74:21:27:27:
                    a8:39:3f:14:03:3f:ea:58:80:4e:6d:95:3a:35:95:
                    0c:64:40:37:3f:99:7b:8f:94:3c:ad:c0:75:1a:e9:
                    40:df:65:8c:b5:30:18:56:ad:93:78:25:e4:49:92:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B7:D6:EF:08:6B:C5:B3:24:97:C3:6A:72:EA:85:19:F7:55:CF:0A
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/211/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/211/TbfW7whrxbMkl8NqcuqFGfdVzwo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:17:44:1b:37:35:ad:28:1c:ca:df:49:c6:04:3c:a4:5f:f6:
         2c:7a:c7:f7:e6:b3:42:f8:22:39:97:0d:96:a8:c9:c6:1b:0d:
         c0:2f:87:a7:26:b9:e3:59:1c:34:c8:b2:c4:1d:4d:f9:80:57:
         36:3e:5e:42:a6:dd:ec:d0:ea:5a:b8:1d:ca:ca:5c:8c:ba:33:
         18:31:29:06:cc:72:ff:b8:40:2a:13:a4:2a:c3:12:ff:74:58:
         4e:89:e8:67:f3:56:b4:76:47:e4:7a:8d:b9:17:aa:c6:81:1e:
         cb:c7:4f:37:4e:ad:e7:f5:61:a4:2d:ae:26:15:e2:78:fa:76:
         16:03:5d:ec:d8:23:cd:8a:39:d8:63:f3:50:30:58:31:82:e4:
         ff:78:4a:31:b4:fa:60:6a:6e:63:a3:6b:5a:b7:73:71:6b:cb:
         5e:56:84:6e:fa:37:16:40:9e:b3:50:67:e5:1a:49:10:f2:13:
         5c:3d:38:8c:91:95:4c:c5:30:c0:da:32:69:a4:81:7b:9f:30:
         f2:6a:7f:56:94:54:2c:2f:ab:f6:32:02:e2:28:83:eb:54:99:
         0c:32:03:77:35:ea:4a:a8:c0:fb:9f:ba:01:df:fe:06:03:67:
         89:81:dc:68:51:a5:de:86:3a:21:0a:7e:8b:8a:48:ed:c0:09:
         bf:6b:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----