Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer
File:                     -gfo6rqEcKil_kuhPnXZ5f6jOyc.cer (raw, json)
Hash identifier:          jOooOLcCgpQbcDEBUL3mt+ZObpmG33eKHTHKk9MfQCc=
Subject key identifier:   FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028C48
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Feb 2026 15:08:27 +0000
Certificate not after:    Tue 02 Jun 2026 00:00:00 +0000
Subordinate resources:    AS: 139471
                          IP: 103.145.22.0/23
                          IP: 2405:7640::/32
Validation:               Failed, certificate revoked on Thu 19 Feb 2026 14:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166984 (0x28c48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 15:08:27 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=A91F9FA2, serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:86:d7:d6:e0:ac:c6:29:4b:da:ea:58:23:84:
                    22:4a:fd:11:0c:0b:98:d8:82:b6:58:aa:af:72:0f:
                    55:b2:a7:9d:e9:d0:4f:95:6d:9a:ab:ed:7b:a8:75:
                    37:56:64:70:b7:b3:ae:bc:b1:2a:d5:51:f8:30:aa:
                    32:e3:20:b5:1a:1f:11:d0:d1:d2:d7:80:23:fe:41:
                    8c:93:0d:ec:11:1e:e0:a8:cd:25:53:08:5e:a8:1a:
                    94:8b:d6:68:f6:1a:96:97:1c:d6:cc:82:0b:e4:3e:
                    75:af:ce:95:30:6a:c2:aa:5a:fb:03:ea:03:a2:a7:
                    c3:d0:3f:8f:05:f2:ff:9a:b4:aa:ed:30:cc:88:1b:
                    c8:14:23:f5:cd:82:ba:38:34:35:bf:bb:7a:c5:35:
                    46:f3:09:0f:97:6a:e5:15:8f:2f:45:3a:16:c4:7f:
                    29:07:0c:32:db:97:a8:fe:e4:2e:d6:0a:6e:49:57:
                    a8:53:d7:40:76:ba:a8:aa:ef:9e:a2:52:fa:9e:53:
                    36:c5:cb:f6:8f:1f:43:7c:b2:4f:32:b7:89:0f:91:
                    52:72:46:0b:ee:7a:f4:91:90:44:ce:3c:48:04:5c:
                    42:41:4e:eb:68:6e:40:a9:f0:f9:5e:a8:1c:1e:f4:
                    92:58:a6:a3:03:00:f7:26:60:a5:10:ee:62:15:d8:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139471

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.22.0/23
                IPv6:
                  2405:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:a9:b9:02:db:d2:96:2e:11:e2:f7:13:4d:ab:2a:11:88:ac:
         8d:10:2c:a0:29:8b:b4:ef:8a:e0:7a:1a:a5:87:cc:fa:41:86:
         f9:af:c5:06:83:c4:29:2f:5d:9b:f8:95:1d:b3:50:ee:71:4e:
         4e:bb:2f:13:5b:2c:35:6e:6e:23:59:9f:5a:ca:a2:46:b4:1b:
         c0:10:5c:56:8a:89:76:a3:40:d2:bf:c8:5c:fa:08:9e:3f:48:
         c4:ff:50:5b:65:88:f3:c5:c3:c3:b8:1f:79:f8:ab:89:3a:8f:
         a4:0c:28:8b:aa:a9:75:ee:40:f8:41:1d:5a:fc:a3:95:c5:ed:
         f9:3a:05:46:2e:16:35:79:9b:50:18:6b:39:cb:77:c1:a6:73:
         38:e9:20:54:cf:9f:17:7b:c6:57:7a:4f:b4:33:bd:b5:82:45:
         b3:f3:db:76:9c:56:43:8c:da:e9:20:22:d2:12:c6:db:0a:9a:
         5a:d3:27:4f:3d:5c:31:91:14:de:a2:57:01:d0:54:75:e2:32:
         fc:30:66:d4:16:4c:6b:cf:e1:88:86:71:26:a3:23:ea:26:c9:
         fd:5d:fa:df:8d:7e:00:13:d5:6d:d5:20:a4:38:b2:09:00:ef:
         6d:4c:11:57:37:24:16:16:39:b4:46:86:48:e0:48:22:00:c5:
         0a:71:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:06 2026 by rpki-client