Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer
File:                     ffVKoQDp9LZlNekg64ni4UvKzbA.cer (raw, json)
Hash identifier:          ce0a1E6MvO7wsUmuzpawDOgE7pWRMtnTG0zenvzx8E8=
Subject key identifier:   7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       0AFF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 24 Jun 2024 10:50:32 +0000
Certificate not after:    Tue 24 Jun 2025 10:46:45 +0000
Subordinate resources:    IP: 147.92.128.0/17

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 07:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2815 (0xaff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Jun 24 10:50:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:a6:c8:a4:df:99:d0:1d:87:cb:a5:08:d5:
                    93:92:59:92:ab:71:24:e6:30:55:ce:ba:2b:0b:2a:
                    e0:9c:18:75:ab:d0:48:4f:06:89:58:29:58:e2:86:
                    ab:d8:0a:bc:2a:5e:d9:79:0a:cd:85:32:6b:ae:4e:
                    de:78:36:d0:5f:1c:8a:d7:99:85:19:53:e6:b5:15:
                    0b:c3:50:3a:0e:3b:6f:00:c3:1d:e4:9d:52:1f:e9:
                    a9:9f:94:f1:ee:09:bd:d6:a1:c9:ba:5a:64:fc:59:
                    79:2e:4f:73:e8:df:42:58:14:7d:26:fd:78:19:a0:
                    f1:e7:03:76:01:4c:32:ad:58:1c:4f:e0:56:8f:57:
                    73:e0:68:6c:1e:d3:f0:48:6a:de:4b:da:d2:6b:20:
                    0e:f9:6a:99:c2:fc:ba:f7:3f:62:7b:81:32:2c:ab:
                    7c:b0:d4:68:2e:72:9e:e3:fe:7c:13:e5:ca:16:3d:
                    96:a3:62:22:42:52:7b:f5:67:da:46:f1:69:2b:4a:
                    af:92:e2:00:a6:ad:fa:38:c6:c6:b0:4f:9f:17:de:
                    db:c9:5e:29:23:64:0e:b3:bb:73:a5:9d:74:72:84:
                    97:36:de:1d:a5:ec:68:b3:02:f6:2c:20:59:f5:0d:
                    fc:ea:7c:da:9f:01:ab:09:76:cb:2a:81:3d:5f:65:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         97:32:f4:34:37:ee:95:44:8c:c9:08:39:36:4f:f8:f7:4d:33:
         0b:4a:68:5b:59:be:46:a6:b2:60:b0:45:ed:f4:df:a6:56:de:
         86:df:50:c5:b1:38:e0:26:ce:5c:e3:f5:57:36:e4:93:5b:6c:
         ba:89:ec:da:24:8b:62:c3:c1:c2:5c:e3:53:31:40:65:0d:d2:
         12:f0:97:b1:6b:95:67:13:02:3e:6a:93:3d:dd:1b:c8:0b:48:
         cf:a8:55:f1:a9:b5:b0:07:cf:28:ab:45:5f:d3:a5:76:95:1f:
         76:22:19:58:90:77:0c:73:ed:a4:d2:1d:ab:d6:f1:57:98:fd:
         79:57:d1:13:16:91:40:f6:b0:ec:e4:64:e3:fe:30:55:59:d8:
         8a:cf:d9:d3:37:ea:d9:de:d6:a4:70:e9:e1:99:ae:8e:73:c9:
         1f:f0:94:00:fb:9a:2c:ef:f5:b5:f8:7c:db:23:dc:26:da:5c:
         db:85:26:ac:58:ca:7e:ba:91:2d:de:c2:83:0d:a5:c9:31:d3:
         6d:91:79:42:5c:77:16:93:be:10:8d:35:93:c1:48:87:d7:d6:
         0a:1e:46:09:2f:85:d8:0b:d0:fc:99:52:5d:d8:8d:9d:87:08:
         d5:5f:c9:13:1f:f5:51:19:c2:ce:b3:3f:1f:93:e3:ec:dc:75:
         b5:4b:62:c6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG
MTE0OEU2NTM0REYyMB4XDTI0MDYyNDEwNTAzMloXDTI1MDYyNDEwNDY0NVowMzEx
MC8GA1UEAxMoN0RGNTRBQTEwMEU5RjRCNjY1MzVFOTIwRUI4OUUyRTE0QkNBQ0RC
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO5kpsik35nQHYfLpQjV
k5JZkqtxJOYwVc66Kwsq4JwYdavQSE8GiVgpWOKGq9gKvCpe2XkKzYUya65O3ng2
0F8citeZhRlT5rUVC8NQOg47bwDDHeSdUh/pqZ+U8e4JvdahybpaZPxZeS5Pc+jf
QlgUfSb9eBmg8ecDdgFMMq1YHE/gVo9Xc+BobB7T8Ehq3kva0msgDvlqmcL8uvc/
YnuBMiyrfLDUaC5ynuP+fBPlyhY9lqNiIkJSe/Vn2kbxaStKr5LiAKat+jjGxrBP
nxfe28leKSNkDrO7c6WddHKElzbeHaXsaLMC9iwgWfUN/Op82p8Bqwl2yyqBPV9l
YFkCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBR99UqhAOn0tmU16SDrieLhS8rNsDAf
BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC
OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD
ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC85NTgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzk1OC9mZlZLb1FE
cDlMWmxOZWtnNjRuaTRVdkt6YkEubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHk1yAMA0GCSqGSIb3DQEBCwUA
A4IBAQCXMvQ0N+6VRIzJCDk2T/j3TTMLSmhbWb5GprJgsEXt9N+mVt6G31DFsTjg
Js5c4/VXNuSTW2y6iezaJItiw8HCXONTMUBlDdIS8Jexa5VnEwI+apM93RvIC0jP
qFXxqbWwB88oq0Vf06V2lR92IhlYkHcMc+2k0h2r1vFXmP15V9ETFpFA9rDs5GTj
/jBVWdiKz9nTN+rZ3takcOnhma6Oc8kf8JQA+5os7/W1+HzbI9wm2lzbhSasWMp+
upEt3sKDDaXJMdNtkXlCXHcWk74QjTWTwUiH19YKHkYJL4XYC9D8mVJd2I2dhwjV
X8kTH/VRGcLOsz8fk+Ps3HW1S2LG
-----END CERTIFICATE-----