Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer
File:                     ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer (raw, json)
Hash identifier:          FKNNCzw4rJvGaxKOGBOI3k6HepUrwq2hBt1SCSc+eMc=
Subject key identifier:   02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C1DE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 04 Oct 2023 01:00:15 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 9663
                          AS: 151188
                          IP: 103.224.92.0/24
                          IP: 103.244.163.0/24
                          IP: 2001:df2:45c0::/47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115166 (0x1c1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  4 01:00:15 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4c:4a:9e:07:dc:40:ff:3e:f9:28:27:71:ea:
                    42:44:95:19:68:9e:fb:f4:e7:f1:ab:cf:d1:ac:e3:
                    f2:d1:3f:87:d7:96:1b:be:b1:8e:d1:f6:f2:39:eb:
                    9e:e4:24:9b:63:df:e7:10:a4:51:11:21:68:04:b8:
                    56:70:9e:7a:1e:cf:53:71:2b:ae:77:0f:7e:af:5f:
                    36:cb:74:8c:81:f5:2f:fa:d7:ae:a7:8d:f6:8f:e5:
                    2a:57:fb:56:23:b1:b2:9f:24:95:bd:57:67:c9:e0:
                    37:b0:bd:51:c3:f9:d8:47:51:e0:e8:43:8c:15:ce:
                    05:63:5c:71:f9:41:fa:5a:29:11:59:0f:ce:d8:cb:
                    a9:35:cb:d3:c7:ae:07:80:6e:1c:65:cb:d3:0c:bb:
                    bf:f7:10:5a:bb:03:3f:6d:39:8e:d2:04:bc:39:25:
                    8b:fc:8c:51:c2:9c:f8:ef:25:dc:38:c5:77:91:ed:
                    41:f3:7f:bd:93:6c:80:81:1c:21:0b:be:c0:83:ef:
                    12:54:5f:6b:f6:2e:90:16:82:8d:1e:ab:ef:d9:a5:
                    f7:16:da:b3:56:7d:a8:55:c5:17:8a:95:c3:6a:42:
                    83:29:7d:ea:f9:58:e2:7b:80:29:00:87:56:f8:fd:
                    c9:34:10:a9:b5:8f:f1:5d:4e:e7:60:62:4f:12:02:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9663
                  151188

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.92.0/24
                  103.244.163.0/24
                IPv6:
                  2001:df2:45c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         cd:54:c8:8a:72:99:4c:d4:93:1d:e9:2b:f4:87:4c:da:6a:c6:
         79:b6:28:7f:49:09:85:90:2c:52:92:e9:3b:ae:e9:77:73:1e:
         30:d5:f9:21:0d:fb:af:33:cc:1c:91:51:c5:a6:49:49:a9:ab:
         ec:3d:75:80:9b:a1:98:eb:39:7d:af:9b:c8:f5:ac:6e:4b:a9:
         6f:18:02:03:cc:45:3c:2a:c1:a9:34:b9:59:71:ff:16:28:d2:
         db:96:a2:1d:7d:49:ed:f5:d3:7e:4a:2b:b1:9a:1f:67:27:10:
         04:d3:2f:36:3f:bb:50:c8:17:68:4a:d9:35:85:bd:a1:ae:79:
         4e:1d:bc:9f:b0:2f:c9:8c:43:74:24:05:4a:75:02:c8:d9:cb:
         65:f5:2b:22:9e:13:20:58:91:a4:8f:3e:fe:01:d5:7f:32:8c:
         64:19:4d:df:f9:2c:da:2c:6a:a4:05:f7:57:01:08:5a:38:3e:
         72:fc:e9:50:8e:38:ac:e3:ea:76:6a:f6:7e:b2:95:60:ba:7a:
         25:58:a1:30:6d:9c:c8:93:fb:3b:d7:37:bc:38:67:0a:d2:f2:
         18:f7:79:4f:42:c4:cb:4f:06:bf:17:cf:f4:c4:82:2a:8d:0d:
         ea:1e:f6:29:69:cf:f5:2e:40:8b:0a:6d:57:6d:67:6b:87:e0:
         72:11:fb:f8
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDAcHeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAwNDAxMDAxNVoXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRThERjUxMTAvBgNVBAUTKDAyOTY0OTEwNUJFRjNDMTZCNzY0Qzgz
RTAxMjFGNjNCRjUwMzJDQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuTEqeB9xA/z75KCdx6kJElRlonvv05/Grz9Gs4/LRP4fXlhu+sY7R9vI5657k
JJtj3+cQpFERIWgEuFZwnnoez1NxK653D36vXzbLdIyB9S/6166njfaP5SpX+1Yj
sbKfJJW9V2fJ4DewvVHD+dhHUeDoQ4wVzgVjXHH5QfpaKRFZD87Yy6k1y9PHrgeA
bhxly9MMu7/3EFq7Az9tOY7SBLw5JYv8jFHCnPjvJdw4xXeR7UHzf72TbICBHCEL
vsCD7xJUX2v2LpAWgo0eq+/ZpfcW2rNWfahVxReKlcNqQoMpfer5WOJ7gCkAh1b4
/ck0EKm1j/FdTudgYk8SAlh9AgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUApZJEFvv
PBa3ZMg+ASH2O/UDLKowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4REY1L0VFNTY3MTI4RDk4NTExRURBMjVDQzgzMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOERGNS9FRTU2NzEyOEQ5ODUxMUVEQTI1Q0M4MzFDNEY5QUUwMi9BcFpKRUZ2
dlBCYTNaTWctQVNIMk9fVURMS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICJb8CAwJOlDA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAGfgXAME
AGf0ozAPBAIAAjAJAwcBIAEN8kXAMA0GCSqGSIb3DQEBCwUAA4IBAQDNVMiKcplM
1JMd6Sv0h0zaasZ5tih/SQmFkCxSkuk7rul3cx4w1fkhDfuvM8wckVHFpklJqavs
PXWAm6GY6zl9r5vI9axuS6lvGAIDzEU8KsGpNLlZcf8WKNLblqIdfUnt9dN+Siux
mh9nJxAE0y82P7tQyBdoStk1hb2hrnlOHbyfsC/JjEN0JAVKdQLI2ctl9SsinhMg
WJGkjz7+AdV/MoxkGU3f+SzaLGqkBfdXAQhaOD5y/OlQjjis4+p2avZ+spVgunol
WKEwbZzIk/s71ze8OGcK0vIY93lPQsTLTwa/F8/0xIIqjQ3qHvYpac/1LkCLCm1X
bWdrh+ByEfv4
-----END CERTIFICATE-----