Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/pwkf8V8nS6kTDNP1XbbmfMWiasw.cer
File:                     pwkf8V8nS6kTDNP1XbbmfMWiasw.cer (raw, json)
Hash identifier:          RciYkuayeBNd/kV3gmbazyFrNfXlpwCzZTErRAMjdOk=
Subject key identifier:   A7:09:1F:F1:5F:27:4B:A9:13:0C:D3:F5:5D:B6:E6:7C:C5:A2:6A:CC
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       3A5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/pwkf8V8nS6kTDNP1XbbmfMWiasw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sun 15 Sep 2024 01:37:48 +0000
Certificate not after:    Mon 15 Sep 2025 01:30:03 +0000
Subordinate resources:    IP: 103.95.163.0/24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 23:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14938 (0x3a5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Sep 15 01:37:48 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=A7091FF15F274BA9130CD3F55DB6E67CC5A26ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:67:57:e4:7f:b7:71:1f:4c:32:2a:db:8f:
                    0b:87:b6:d1:91:d0:12:b0:16:b4:73:7b:b3:49:27:
                    44:4b:89:a0:5d:e6:84:00:a7:35:95:7a:66:12:d0:
                    7a:9f:5d:5d:95:b0:6c:f6:f8:03:75:11:5f:70:2e:
                    f2:04:bd:8e:ce:29:33:45:62:d0:57:e1:ab:36:dd:
                    1e:08:73:1e:a1:91:cd:e4:49:5f:da:4d:af:45:7c:
                    4c:dc:c9:0b:4c:83:65:74:0d:c1:fe:d2:bc:89:e2:
                    88:bf:3f:ee:bb:e3:8d:fa:29:43:4e:1f:d8:48:fe:
                    63:85:ef:21:b7:ae:0a:28:7f:3d:73:2e:68:cb:5d:
                    be:f2:f9:34:3a:0d:d6:27:c6:9e:a4:30:4c:6b:b7:
                    38:b4:92:d7:53:ea:4f:8b:b4:f8:ea:55:ac:ea:59:
                    1e:09:7b:79:b3:e5:7d:d5:da:4d:08:bf:e2:30:c5:
                    11:50:36:12:58:3e:39:8b:8f:a8:b5:6f:03:b6:79:
                    aa:41:40:17:62:f4:fe:d3:70:a9:9f:a9:fb:7d:a9:
                    3f:e6:68:5e:5a:94:ac:54:5e:1d:02:39:bb:52:73:
                    df:40:a1:38:0d:e5:3d:67:ea:eb:9c:be:2a:6e:fa:
                    ce:2e:29:70:15:83:0d:d2:e3:4d:8d:88:77:67:11:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:09:1F:F1:5F:27:4B:A9:13:0C:D3:F5:5D:B6:E6:7C:C5:A2:6A:CC
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/pwkf8V8nS6kTDNP1XbbmfMWiasw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:59:2c:d3:bf:94:40:cd:2e:a9:a9:94:0a:aa:e9:a3:c5:97:
         7e:b9:59:72:0b:8e:96:33:75:c9:de:fd:71:ed:fe:0d:e6:af:
         ca:17:e9:cb:95:7e:f3:e5:fb:d4:e9:98:78:98:ce:d8:15:69:
         d5:3f:bb:fa:b4:89:10:5a:9c:7a:43:65:43:dc:75:a8:a4:74:
         ad:80:fe:35:ed:4c:e7:46:5d:a5:81:31:63:77:68:97:1d:f9:
         fb:93:be:6a:8a:48:7f:00:22:24:ef:e6:9f:57:1b:6d:77:e1:
         b7:59:f7:cb:a7:89:3f:64:7b:a9:fb:6e:ce:e1:0d:a8:f8:37:
         50:ad:1b:3e:5f:b7:d3:93:94:f1:65:84:89:3d:c5:08:d6:3d:
         ad:88:66:c1:6c:08:e8:c5:af:57:f9:91:c8:0e:c3:21:d4:d9:
         40:38:65:be:30:fe:71:07:6b:cd:b5:36:c0:09:87:eb:ec:e2:
         07:4f:02:31:d8:93:52:16:bf:00:85:f1:94:b7:36:5c:b3:8f:
         a0:32:11:90:b8:3a:ef:50:51:cc:16:da:be:61:7a:11:32:6b:
         4c:bf:19:0b:c1:48:01:7f:a3:19:6f:e3:18:64:46:df:5a:8e:
         b4:55:8e:c6:6f:82:eb:04:13:45:3a:7f:16:b7:d7:82:b7:bf:
         7e:f5:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----