Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kX5cjpM8uxdVPeVKERnR3pF8_To.cer
File:                     kX5cjpM8uxdVPeVKERnR3pF8_To.cer (raw, json)
Hash identifier:          lsEfJKwpqzzLQhm0MNBE+G+lU6/ErZvdkbhLBoJh6S4=
Subject key identifier:   91:7E:5C:8E:93:3C:BB:17:55:3D:E5:4A:11:19:D1:DE:91:7C:FD:3A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0172EC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912B256/3188E72218A511EB8D422172C4F9AE02/kX5cjpM8uxdVPeVKERnR3pF8_To.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912B256/3188E72218A511EB8D422172C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 12 Oct 2022 13:40:44 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 9792
                          IP: 203.1.240.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94956 (0x172ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 12 13:40:44 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A912B256/serialNumber=917E5C8E933CBB17553DE54A1119D1DE917CFD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c9:db:44:d9:46:14:7a:f4:c5:9f:d7:2b:83:
                    f9:d4:8f:a3:ed:96:55:96:17:84:f3:de:4e:59:f1:
                    97:e8:39:52:67:c2:2c:fc:c3:21:c0:42:0f:63:0d:
                    91:22:db:68:ca:b7:38:f2:5e:30:1f:dd:11:e5:6b:
                    ef:72:a1:a4:1a:0e:9c:86:93:79:ad:4d:e7:da:25:
                    39:9b:51:60:fb:1a:7d:94:4a:b8:cb:d6:92:0c:0a:
                    4e:ac:30:c2:58:9b:89:d1:71:f6:b6:42:c8:53:6a:
                    a7:e0:e4:38:62:aa:6f:f5:ed:4b:88:f8:cd:d6:83:
                    1a:03:6d:d1:4e:61:ed:0e:a5:c2:d6:7a:e5:e3:ff:
                    6e:85:ef:81:03:51:11:38:f7:fa:6e:ee:5d:72:16:
                    5f:56:ea:a9:43:f7:b0:7b:9a:69:c2:bc:d9:f4:ee:
                    f3:f0:e2:04:69:e9:7b:a4:b3:5b:ac:13:ec:38:e4:
                    2f:c9:1c:26:7f:ed:87:a1:fa:b3:d9:54:84:30:5f:
                    2d:54:f9:42:07:2e:ad:d4:23:7d:20:39:fe:3d:b2:
                    f0:a4:21:1f:7d:38:88:7d:9f:72:65:fb:9c:0e:15:
                    85:ae:85:60:01:4c:c1:33:11:28:3d:91:d6:df:07:
                    9d:1f:19:c5:76:d2:bf:09:29:a7:88:92:9c:df:8a:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7E:5C:8E:93:3C:BB:17:55:3D:E5:4A:11:19:D1:DE:91:7C:FD:3A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B256/3188E72218A511EB8D422172C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B256/3188E72218A511EB8D422172C4F9AE02/kX5cjpM8uxdVPeVKERnR3pF8_To.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9792

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.1.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:33:24:a1:9d:b1:81:72:7e:b3:b5:65:a5:9d:93:1c:32:e1:
         0f:c2:75:8d:15:fd:c8:64:7f:5b:f4:68:4e:69:ea:10:e3:b8:
         b4:fc:c0:d6:73:e7:de:0e:f2:b1:de:3b:10:20:6f:45:98:d7:
         f0:cc:1c:2d:19:1a:b9:f5:b8:28:a3:4f:a5:ca:05:95:6c:b5:
         dc:82:7e:e5:ee:7e:76:af:01:d4:04:f3:2d:11:71:c6:15:72:
         40:8b:33:7f:9a:a6:3e:21:76:75:11:85:8f:00:19:7a:ef:26:
         56:ad:42:69:ea:4b:99:f1:71:a6:45:91:1e:3e:17:5d:f8:35:
         2f:dc:f9:95:de:c8:d0:b6:96:89:4b:c9:48:7a:09:f3:cb:1e:
         71:bf:22:15:65:c5:a0:ac:4a:d4:c7:7f:ab:69:84:fa:d5:9e:
         5d:f8:49:1b:fa:e8:17:2f:32:a6:19:be:53:76:a4:86:6e:27:
         4b:4b:5d:5c:8d:65:34:e5:39:0e:5e:13:db:38:6d:77:84:19:
         2b:a5:9b:8b:70:d6:c8:42:db:54:20:28:20:e8:4e:3e:e1:9a:
         4e:7c:53:b8:c4:a8:59:fb:a8:00:26:34:5c:e0:ae:bf:ad:76:
         45:2c:48:8e:9c:e5:c8:bb:da:ae:9a:9e:02:e8:a1:ea:ad:8c:
         98:c6:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----