Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BefEArz0ghV3F3vIMwVVds4ZPrY.cer
File:                     BefEArz0ghV3F3vIMwVVds4ZPrY.cer (raw, json)
Hash identifier:          G7ZtJzGpyYwPnF4PGwi93zIHhYG4NPfNJh/RGN+Nuc4=
Subject key identifier:   05:E7:C4:02:BC:F4:82:15:77:17:7B:C8:33:05:55:76:CE:19:3E:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020995
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 28 Aug 2024 20:16:45 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 138009
                          IP: 103.119.232.0/22
                          IP: 2403:4ac0::/32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 19:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133525 (0x20995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 28 20:16:45 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A91B8D4F/serialNumber=05E7C402BCF4821577177BC833055576CE193EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:53:28:d9:0e:20:99:08:43:83:df:cf:7b:
                    62:36:43:ba:06:5e:21:dd:7d:85:f8:16:da:ee:03:
                    56:80:e5:41:36:7f:5c:76:bf:21:b6:81:2d:5d:89:
                    ed:5f:63:e7:ac:b4:8d:9a:52:3c:c5:73:26:b2:f8:
                    cb:61:6f:53:22:cd:37:e1:2a:43:95:59:60:99:9a:
                    bd:16:4c:3c:09:2f:95:2e:30:46:9b:0e:97:5a:5e:
                    43:38:b9:6a:04:4a:cd:e5:63:34:25:ca:47:ff:f0:
                    45:02:af:45:28:71:10:d4:69:b5:fa:e3:c2:73:b9:
                    2a:8e:0d:bc:5a:b0:5b:85:51:06:45:88:61:7b:ad:
                    98:3e:98:e2:19:4f:37:a9:be:06:c3:20:f9:19:7b:
                    27:23:41:3f:4a:c0:c0:09:27:9f:03:5d:03:54:b5:
                    bd:77:11:1f:28:5f:11:34:fa:50:c0:1f:84:d7:6b:
                    7a:e3:2b:b9:84:3b:9f:c5:5c:df:d0:ba:06:ad:89:
                    fe:f4:df:d3:04:3d:f5:86:8a:80:fe:59:25:66:23:
                    29:40:c3:78:d2:7c:4f:25:67:1a:53:1a:45:48:86:
                    2c:2d:c7:4e:6b:b1:00:f1:d4:da:5d:d1:94:92:62:
                    a4:ed:02:ba:ed:cc:e3:e6:e4:37:24:d6:99:f6:61:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E7:C4:02:BC:F4:82:15:77:17:7B:C8:33:05:55:76:CE:19:3E:B6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138009

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.232.0/22
                IPv6:
                  2403:4ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:f3:13:4f:a8:ab:3b:2a:d8:8d:1f:47:1c:a9:eb:0c:39:b1:
         67:a7:14:df:20:32:49:4b:88:c6:e4:ed:4b:22:5b:44:b4:c0:
         99:08:e8:dd:47:b6:de:7e:50:4f:a7:61:7b:5c:99:31:09:82:
         99:7b:f7:17:1c:b9:38:57:15:2e:7a:78:0a:3f:95:60:bb:1d:
         b1:41:89:7d:74:e3:34:43:57:8f:b0:d5:60:e2:79:82:d3:a1:
         8e:57:bd:ad:c8:bb:88:09:dd:32:27:16:bd:a9:cd:2f:62:49:
         06:90:f5:0d:d5:34:60:44:11:05:32:c0:71:6e:59:d4:c8:a5:
         74:71:c6:7f:24:fe:c7:61:b3:a9:f1:2c:00:e6:db:ba:58:4f:
         38:f1:de:f9:64:22:5c:93:32:fa:24:0b:70:16:5e:bd:a5:b2:
         63:5e:00:34:95:fa:81:62:44:f2:75:ac:e1:d7:fa:a9:a2:c1:
         b7:45:b6:b5:db:32:1a:f6:a0:df:88:48:84:76:f9:10:71:2b:
         de:bf:74:da:d4:64:3e:9c:4c:da:dd:54:76:e1:1b:64:7e:27:
         9f:95:cc:25:de:aa:a1:5d:94:20:82:e3:9f:7e:38:d0:86:1a:
         f4:f9:0d:c1:da:ed:e6:e6:b6:aa:f2:e7:36:ff:3a:6f:a2:96:
         d3:4b:89:d8
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAgmVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgyODIwMTY0NVoXDTI1MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjhENEYxMTAvBgNVBAUTKDA1RTdDNDAyQkNGNDgyMTU3NzE3N0JD
ODMzMDU1NTc2Q0UxOTNFQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNT1Mo2Q4gmQhDg9/Pe2I2Q7oGXiHdfYX4FtruA1aA5UE2f1x2vyG2gS1die1f
Y+estI2aUjzFcyay+Mthb1MizTfhKkOVWWCZmr0WTDwJL5UuMEabDpdaXkM4uWoE
Ss3lYzQlykf/8EUCr0UocRDUabX648JzuSqODbxasFuFUQZFiGF7rZg+mOIZTzep
vgbDIPkZeycjQT9KwMAJJ58DXQNUtb13ER8oXxE0+lDAH4TXa3rjK7mEO5/FXN/Q
ugatif7039MEPfWGioD+WSVmIylAw3jSfE8lZxpTGkVIhiwtx05rsQDx1Npd0ZSS
YqTtArrtzOPm5Dck1pn2YUwhAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUBefEArz0
ghV3F3vIMwVVds4ZPrYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI4RDRGLzQ0OUVDQzU2RUVFMTExRUJCQURFMkM3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCOEQ0Ri80NDlFQ0M1NkVFRTExMUVCQkFERTJDNzlDNEY5QUUwMi9CZWZFQXJ6
MGdoVjNGM3ZJTXdWVmRzNFpQclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhsZMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3foMA0EAgAC
MAcDBQAkA0rAMA0GCSqGSIb3DQEBCwUAA4IBAQA98xNPqKs7KtiNH0ccqesMObFn
pxTfIDJJS4jG5O1LIltEtMCZCOjdR7beflBPp2F7XJkxCYKZe/cXHLk4VxUuengK
P5Vgux2xQYl9dOM0Q1ePsNVg4nmC06GOV72tyLuICd0yJxa9qc0vYkkGkPUN1TRg
RBEFMsBxblnUyKV0ccZ/JP7HYbOp8SwA5tu6WE848d75ZCJckzL6JAtwFl69pbJj
XgA0lfqBYkTydazh1/qposG3Rba12zIa9qDfiEiEdvkQcSvev3Ta1GQ+nEza3VR2
4Rtkfieflcwl3qqhXZQgguOffjjQhhr0+Q3B2u3m5raq8uc2/zpvopbTS4nY
-----END CERTIFICATE-----