Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
File:                     4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer (raw, json)
Hash identifier:          rU6Qd9+Ygc4ffWg1aAd5XN9HzukdozMYvN7T0CQ/Ets=
Subject key identifier:   E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0227CC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 07 Jan 2025 14:09:40 +0000
Certificate not after:    Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 138464
                          IP: 103.126.20.0/22
                          IP: 2405:7840::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141260 (0x227cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Jan  7 14:09:40 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=A914CBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:7a:19:4d:e4:07:f0:2c:79:a5:cc:d3:a9:
                    f3:56:c8:d5:0d:8c:e3:e8:57:ec:42:38:7a:3a:c0:
                    7a:58:1e:a8:84:41:fb:8f:5b:ec:41:3d:88:6a:d5:
                    52:90:12:97:b6:2c:ac:97:12:77:91:80:01:bb:e0:
                    93:5e:60:42:20:b5:a8:3c:49:fc:af:08:1d:d1:8c:
                    db:ef:07:a1:f7:b3:00:3d:64:66:c9:a2:3a:44:d1:
                    49:f9:e4:2d:37:34:c9:3f:7b:73:e7:97:76:db:2f:
                    41:18:c2:8f:bb:2a:86:cc:46:b9:64:c2:dd:7c:33:
                    ad:85:89:77:0a:a1:42:b0:39:38:6e:69:4a:50:1a:
                    5a:f7:bb:44:19:4e:97:0d:53:99:33:3c:f0:44:d3:
                    17:4f:28:52:c6:22:56:38:df:82:a9:54:01:ab:4f:
                    fc:48:37:6b:42:be:9d:92:78:9a:14:12:9f:ab:17:
                    93:61:e2:b7:cf:fc:f7:1d:ad:96:e5:d0:24:ce:25:
                    b6:cc:3d:05:fa:1e:a6:3c:c4:b2:62:91:04:3e:19:
                    81:ac:eb:bf:53:20:34:c5:05:5d:9c:99:5b:0f:71:
                    7e:f8:eb:30:f9:64:5f:dc:e8:2c:d8:f6:f6:59:4f:
                    71:62:72:9d:0b:b3:cc:4a:27:2d:e6:70:4d:da:29:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138464

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.20.0/22
                IPv6:
                  2405:7840::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:35:28:22:c3:24:90:2c:5c:7b:f8:80:a2:ca:b9:b9:4f:21:
         9e:c5:31:5e:81:8a:22:d6:1b:9e:26:d9:01:af:be:46:06:51:
         94:a3:92:74:e7:96:89:0f:14:ae:70:73:d4:a1:37:3b:39:dc:
         b1:e5:38:e3:c6:d7:d7:8b:f1:88:72:bb:97:22:5f:70:fe:32:
         22:9d:65:f9:b2:d5:43:1a:77:20:57:a7:6a:2d:26:cd:c3:53:
         e4:86:5e:e0:49:b2:69:c1:02:ed:b3:71:a2:23:8a:b1:32:6a:
         d6:23:02:22:3a:c0:17:0e:9f:de:1c:5f:42:66:3e:d5:0e:ad:
         19:69:a3:a5:46:02:27:ab:7c:1d:25:84:15:bf:cc:54:85:b8:
         68:9b:7e:41:8c:1b:58:8c:64:21:e8:0f:c4:8e:0b:ba:e4:27:
         41:39:9d:0d:3e:ee:4a:68:3a:ac:94:bd:8e:90:cd:f9:27:73:
         c6:54:2c:e8:c6:96:89:22:79:73:b4:d1:01:7c:89:6c:32:3b:
         16:e6:1c:ac:08:e6:88:da:7e:52:55:34:ae:55:df:bd:d2:8f:
         78:25:8e:b6:96:d7:a7:d1:9d:34:5d:eb:82:21:dc:8c:1d:8a:
         a9:d2:64:46:dd:7b:47:19:f5:8c:b5:39:e4:b3:fa:f4:e7:31:
         0a:82:4a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----