Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYZesoKSxYj9ILRkAjLJf7wrA38.cer
File:                     qYZesoKSxYj9ILRkAjLJf7wrA38.cer (raw, json)
Hash identifier:          ZKtrkezsyWUSjSYBud76ImMHAnbOUD7weKkUyVvpg6s=
Subject key identifier:   A9:86:5E:B2:82:92:C5:88:FD:20:B4:64:02:32:C9:7F:BC:2B:03:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CE57
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918B217/8F8CA80AD98311EBB2BE9123C4F9AE02/qYZesoKSxYj9ILRkAjLJf7wrA38.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918B217/8F8CA80AD98311EBB2BE9123C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 22:20:59 +0000
Certificate not after:    Sat 30 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 133213

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118359 (0x1ce57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 30 22:20:59 2023 GMT
            Not After : Mar 30 00:00:00 2024 GMT
        Subject: CN=A918B217/serialNumber=A9865EB28292C588FD20B4640232C97FBC2B037F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:34:20:81:3d:3d:44:81:e7:4d:fd:de:fa:
                    e9:91:f4:8d:df:92:08:46:d3:5c:45:ba:09:81:20:
                    a1:8b:96:20:45:48:f5:8a:b2:06:2e:de:cf:13:7b:
                    54:71:76:f0:d7:07:b6:20:c7:01:d0:9d:c6:96:cc:
                    03:73:24:3a:d2:d2:99:34:dc:ef:26:7c:0a:c0:41:
                    36:b7:be:b3:c1:26:1f:0d:1d:98:83:b5:2c:73:72:
                    7d:ea:dc:32:b9:28:42:a3:d2:da:8f:a7:95:54:27:
                    47:90:54:f8:47:25:e6:be:55:24:15:b9:ba:d1:2b:
                    21:06:1b:59:9a:26:b0:a7:57:fe:f2:8e:99:5a:77:
                    17:63:1b:d8:53:69:c2:84:24:14:eb:f4:d9:2a:5e:
                    4e:41:84:76:6e:39:1c:36:e2:88:ed:28:6d:6a:9d:
                    79:08:8b:78:2a:e0:7d:87:55:3a:2a:3a:22:df:88:
                    83:be:c3:85:e9:63:15:3d:eb:19:16:bc:67:55:43:
                    8f:81:a7:43:02:1c:76:f4:98:83:7a:55:8f:7f:39:
                    10:1e:04:01:53:22:3b:3e:bf:18:53:86:5c:f3:5a:
                    d6:49:9d:ec:ea:0c:53:84:e5:7e:e7:45:be:84:99:
                    ae:2e:d0:b5:f4:b9:57:f2:d4:eb:d5:58:a1:81:e9:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:86:5E:B2:82:92:C5:88:FD:20:B4:64:02:32:C9:7F:BC:2B:03:7F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B217/8F8CA80AD98311EBB2BE9123C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B217/8F8CA80AD98311EBB2BE9123C4F9AE02/qYZesoKSxYj9ILRkAjLJf7wrA38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133213

    Signature Algorithm: sha256WithRSAEncryption
         d4:32:dd:df:df:fc:89:45:28:fb:91:54:9f:6f:9b:c9:35:ce:
         dd:e2:45:d3:38:80:7b:b3:94:3e:eb:18:9a:75:d0:a1:52:9c:
         27:0b:0a:b5:79:83:d3:bf:77:22:3d:fc:5e:95:c1:b9:c3:d6:
         61:a9:ec:d5:1f:56:51:9d:fe:96:cd:cb:1e:74:e9:36:8e:dd:
         40:43:1b:eb:b8:14:0b:40:a9:c9:a6:37:e1:b4:37:cc:62:39:
         d9:7f:b9:b1:11:62:56:73:69:d8:f2:33:7c:d7:49:94:03:97:
         f9:97:e8:63:9c:1d:2e:cc:97:9c:1b:cd:69:be:d5:57:15:35:
         c2:51:43:26:d6:cf:86:9c:2d:0a:53:f6:4d:d6:08:27:1b:fa:
         e3:1e:a3:f6:9e:41:bd:e4:ea:4c:31:e1:41:76:64:01:fa:f5:
         90:80:74:e6:79:3b:30:d0:6f:44:74:7e:04:37:4d:d6:99:39:
         b1:e8:dd:87:ea:da:70:25:f3:5d:80:0f:b0:98:69:f7:a4:31:
         fd:1b:0e:bc:01:18:fe:3c:27:04:dd:12:36:6a:8a:b4:31:ee:
         5f:cd:9f:f0:33:28:33:c6:a0:75:1c:71:d0:53:c1:34:2d:40:
         28:ca:c0:63:58:96:c5:32:da:ff:f7:6c:c9:19:4d:00:e9:46:
         b0:83:d6:13
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAc5XMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEzMDIyMjA1OVoXDTI0MDMzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEIyMTcxMTAvBgNVBAUTKEE5ODY1RUIyODI5MkM1ODhGRDIwQjQ2
NDAyMzJDOTdGQkMyQjAzN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC76zQggT09RIHnTf3e+umR9I3fkghG01xFugmBIKGLliBFSPWKsgYu3s8Te1Rx
dvDXB7YgxwHQncaWzANzJDrS0pk03O8mfArAQTa3vrPBJh8NHZiDtSxzcn3q3DK5
KEKj0tqPp5VUJ0eQVPhHJea+VSQVubrRKyEGG1maJrCnV/7yjpladxdjG9hTacKE
JBTr9NkqXk5BhHZuORw24ojtKG1qnXkIi3gq4H2HVToqOiLfiIO+w4XpYxU96xkW
vGdVQ4+Bp0MCHHb0mIN6VY9/ORAeBAFTIjs+vxhThlzzWtZJnezqDFOE5X7nRb6E
ma4u0LX0uVfy1OvVWKGB6e5BAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUqYZesoKS
xYj9ILRkAjLJf7wrA38wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThCMjE3LzhGOENBODBBRDk4MzExRUJCMkJFOTEyM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4QjIxNy84RjhDQTgwQUQ5ODMxMUVCQjJCRTkxMjNDNEY5QUUwMi9xWVplc29L
U3hZajlJTFJrQWpMSmY3d3JBMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAghdMA0GCSqGSIb3DQEBCwUAA4IBAQDUMt3f3/yJRSj7kVSfb5vJNc7d
4kXTOIB7s5Q+6xiaddChUpwnCwq1eYPTv3ciPfxelcG5w9ZhqezVH1ZRnf6Wzcse
dOk2jt1AQxvruBQLQKnJpjfhtDfMYjnZf7mxEWJWc2nY8jN810mUA5f5l+hjnB0u
zJecG81pvtVXFTXCUUMm1s+GnC0KU/ZN1ggnG/rjHqP2nkG95OpMMeFBdmQB+vWQ
gHTmeTsw0G9EdH4EN03WmTmx6N2H6tpwJfNdgA+wmGn3pDH9Gw68ARj+PCcE3RI2
aoq0Me5fzZ/wMygzxqB1HHHQU8E0LUAoysBjWJbFMtr/92zJGU0A6Uawg9YT
-----END CERTIFICATE-----