Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxrR1F0TAKCvIW2bcZVX57RRsPU.cer
File:                     SxrR1F0TAKCvIW2bcZVX57RRsPU.cer (raw, json)
Hash identifier:          exqgATFZJPLNUsL9AmSW7Am0IheTJ35svlcR2J2jLwc=
Subject key identifier:   4B:1A:D1:D4:5D:13:00:A0:AF:21:6D:9B:71:95:57:E7:B4:51:B0:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01682A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/SxrR1F0TAKCvIW2bcZVX57RRsPU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Aug 2022 01:20:53 +0000
Certificate not after:    Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources:    AS: 45953
                          AS: 46069
                          AS: 59206
                          IP: 180.95.0.0/17
                          IP: 2402:1900::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92202 (0x1682a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 15 01:20:53 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=A919813C/serialNumber=4B1AD1D45D1300A0AF216D9B719557E7B451B0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:c7:2d:5e:1d:b2:e1:4f:e2:61:eb:9c:05:
                    17:4e:67:59:75:af:53:6b:f5:0c:62:26:24:1d:60:
                    b2:fb:14:c4:da:5b:e9:d7:51:14:82:78:be:69:0d:
                    30:a5:81:96:68:15:2b:c3:d1:86:35:7a:c8:57:fe:
                    7f:98:39:43:bd:d9:ad:2e:c2:59:41:a1:a4:31:d3:
                    12:af:e7:ad:7b:31:06:e3:58:8b:4e:08:b6:0e:67:
                    18:55:ea:23:bf:20:b4:f0:a7:8b:7e:8e:d8:06:7a:
                    24:4b:79:45:ba:43:3b:79:91:88:4f:93:9b:ab:1f:
                    5c:c0:3c:34:1c:c0:fe:d3:74:c3:4f:0d:4e:fc:9d:
                    56:97:15:cf:d9:86:09:bc:31:dc:2a:38:63:e8:f6:
                    44:4c:7e:11:32:3a:2f:30:6a:d8:18:4f:79:27:8d:
                    9e:fa:12:dc:f2:e6:6c:2d:8e:5d:9b:2f:48:e4:35:
                    be:f2:9f:16:65:08:b2:c6:90:34:93:2c:e4:a6:98:
                    61:24:36:07:43:9f:80:c1:eb:cf:c3:cc:5f:a1:fa:
                    c0:43:18:07:2d:97:d6:85:af:05:bc:7e:b7:be:9d:
                    92:02:2c:a7:23:55:a9:3e:86:25:59:0c:56:a3:c8:
                    7d:1e:24:d5:b9:30:ac:a5:eb:af:a9:d5:17:a4:03:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1A:D1:D4:5D:13:00:A0:AF:21:6D:9B:71:95:57:E7:B4:51:B0:F5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/SxrR1F0TAKCvIW2bcZVX57RRsPU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45953
                  46069
                  59206

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.95.0.0/17
                IPv6:
                  2402:1900::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:55:1b:ff:54:45:a9:b3:08:79:b3:fc:d4:de:c0:0f:89:
         52:49:67:5e:5d:d1:93:67:3c:21:6d:4d:1d:4d:4c:e6:cd:e0:
         36:4d:c4:dc:e2:02:80:33:17:7c:0d:16:3a:e4:03:9b:c3:a3:
         e6:4e:0d:a9:41:5f:e0:6b:d2:61:46:51:85:f3:a7:7a:4a:fa:
         3d:c8:18:6b:41:ae:95:1a:b9:ff:55:b9:b5:13:1f:12:78:25:
         f8:71:25:ca:95:7a:31:1e:3d:45:1c:ce:74:00:0b:00:6c:7d:
         04:e6:c0:a9:b2:10:14:78:f6:b5:6f:76:9b:f5:f5:be:3d:4f:
         62:a7:ce:b7:1b:9b:e9:ac:ed:08:53:59:34:83:9e:ca:fb:be:
         1c:d4:7b:8c:15:f2:e9:cf:5e:6d:52:a4:2f:c4:61:91:3d:76:
         db:f0:f5:e0:54:15:76:80:0f:ba:63:86:ca:13:22:ea:ad:ce:
         e9:5b:07:24:29:4e:52:e1:5d:46:ad:d1:21:54:73:9a:1c:1d:
         a6:d5:26:ac:10:ab:cb:23:a0:cb:0e:3e:b1:07:67:66:83:98:
         cd:2c:55:34:af:af:fa:86:4a:68:b6:c1:bd:04:2c:f1:93:aa:
         92:16:5a:f6:a9:ec:b4:10:9a:38:7f:81:82:47:66:76:26:68:
         04:c7:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----