Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
File:                     0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer (raw, json)
Hash identifier:          h4uoWNFyc5tJbcoJLtclhz7zmASTOzPGGPe/bkNpeuk=
Subject key identifier:   D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023CB1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 03 Apr 2025 05:57:52 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 103.73.34.0/23
Validation:               Failed, certificate revoked on Thu 03 Apr 2025 14:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146609 (0x23cb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  3 05:57:52 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=A914EC08, serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:5d:e8:0d:68:55:e0:d0:22:98:e5:72:46:
                    46:74:4a:49:ab:80:52:d6:d4:d9:04:b2:aa:03:f1:
                    8a:86:de:a3:14:4e:e0:25:87:b6:67:8d:53:c1:2d:
                    67:32:8e:30:93:68:4b:83:42:eb:3c:d5:85:39:8e:
                    a5:a2:ad:32:70:7f:58:3d:a3:a2:45:b4:af:a9:8b:
                    d0:07:d0:bd:1b:f8:ca:cc:82:01:36:68:7a:23:4a:
                    d6:bc:87:3b:66:d1:46:ee:8f:73:43:55:e7:d7:2c:
                    1c:46:c4:2a:68:1e:74:43:21:d1:a2:42:cd:ed:27:
                    1e:9e:94:83:3a:2c:26:97:66:9f:36:d5:eb:c4:f2:
                    df:10:99:36:ae:b3:9e:3e:d7:16:e2:95:3e:58:7f:
                    27:aa:33:ea:75:63:65:d0:b0:bc:8c:62:c5:7a:a6:
                    d6:d7:3f:d3:32:ce:39:c3:a2:cb:ec:bb:76:c0:e9:
                    1c:51:18:a5:c1:b9:95:c9:cd:6b:5b:fc:c7:bf:90:
                    bd:4f:69:be:85:9a:03:25:14:0c:89:c3:48:27:a2:
                    6f:bf:fb:c4:44:1c:20:2c:69:df:10:27:66:42:3c:
                    f4:fc:19:24:fd:51:77:d2:63:dd:27:f3:77:d9:ee:
                    88:cd:90:a4:2d:52:df:0a:4d:8d:84:b4:a7:b8:9f:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:e2:9e:ec:4b:ba:3c:4e:23:19:6d:e5:33:90:7b:52:5d:
         0c:5f:65:9d:36:f6:32:b1:61:3f:7c:7f:bb:67:5a:bc:01:0f:
         ff:75:25:8c:6e:1e:c0:dc:d6:b9:ce:4e:4c:c2:cb:8b:21:20:
         93:69:b8:1f:99:ee:c9:5a:2c:3f:e7:0e:d2:54:3c:14:17:2e:
         05:8b:76:be:ca:b1:79:6f:ed:c6:78:62:19:3f:d5:db:e1:62:
         33:be:9f:db:5b:69:47:61:1e:63:c0:fd:24:7c:b2:3d:fb:c6:
         5f:aa:19:c9:b8:82:63:3c:0f:70:31:7b:b8:34:52:2a:ec:c0:
         1c:01:8d:35:b2:b8:cd:2f:b8:3d:bc:f2:09:3c:83:c5:39:74:
         a5:f9:47:87:95:7b:0a:5f:6f:15:7c:14:a7:9e:2c:c9:a5:70:
         b9:77:3a:d7:41:cb:e4:22:64:c9:a5:de:9b:0e:38:e9:34:e1:
         18:3c:ff:10:08:0b:e4:df:8d:85:f2:60:81:0d:45:3c:e0:17:
         2e:78:41:c5:7e:eb:91:69:36:3d:45:b7:3f:eb:d5:08:12:3c:
         ca:b0:f3:30:a8:74:94:da:8b:3b:f8:c6:b8:8e:0d:ea:aa:c5:
         44:1f:b3:89:19:21:bb:d4:2f:f7:4d:78:d2:ba:74:a6:07:1e:
         27:bd:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:54:20 2025 by rpki-client