Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EP-kt8pv6hK7bpekhWAY-6Hh_gM.cer
File:                     EP-kt8pv6hK7bpekhWAY-6Hh_gM.cer (raw, json)
Hash identifier:          r0+tCLIlZjzzwZn2ZehRKw1E6vzXXpI+Y0YuHbKOdww=
Subject key identifier:   10:FF:A4:B7:CA:6F:EA:12:BB:6E:97:A4:85:60:18:FB:A1:E1:FE:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       FEF2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915FDB1/2B90914EB70411E8AB23B340C4F9AE02/EP-kt8pv6hK7bpekhWAY-6Hh_gM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915FDB1/2B90914EB70411E8AB23B340C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Jan 2021 13:55:40 +0000
Certificate not after:    Thu 31 Mar 2022 00:00:00 +0000
Subordinate resources:    AS: 137251
                          IP: 103.105.218.0/24
                          IP: 2001:de8:4000::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65266 (0xfef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 26 13:55:40 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A915FDB1/serialNumber=10FFA4B7CA6FEA12BB6E97A4856018FBA1E1FE03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:77:0e:c1:c0:5d:63:cb:12:00:0b:a8:f2:
                    22:b3:de:cf:cb:72:f4:5d:e5:e9:32:82:14:a1:cf:
                    a6:35:8e:e7:cc:ff:46:52:c9:9a:c1:8d:04:31:30:
                    0e:1c:17:e4:a8:ac:ad:5a:d0:6c:5e:81:a6:4c:52:
                    99:f7:d9:30:66:62:b4:49:b4:93:5e:35:51:38:b6:
                    9a:b7:02:08:34:af:45:75:71:8a:1c:9e:35:60:16:
                    b0:65:0a:80:46:15:13:6e:a2:80:a1:0a:b6:26:51:
                    98:e6:0c:19:8f:14:78:1f:12:18:d4:9a:42:6d:df:
                    3e:99:ca:2f:2c:98:da:f6:fd:95:2f:b4:8c:12:98:
                    83:4f:80:81:7e:2f:17:df:fe:6a:8d:d6:3f:9e:b4:
                    34:cc:4d:64:04:d0:24:fd:37:47:c5:cf:ab:cf:47:
                    a3:4b:24:60:28:13:ed:e7:a5:97:51:c3:5d:56:92:
                    d1:a6:6d:b0:38:3b:54:75:f5:bc:fd:2b:30:8c:32:
                    a7:c0:c2:2c:eb:e9:8f:2b:cd:3f:ab:a2:30:04:8d:
                    78:b0:51:80:d1:1d:d2:1c:3d:4c:00:1f:ff:f2:7a:
                    4f:b7:db:61:7b:1b:67:c0:c5:4c:4c:70:1e:7a:9d:
                    45:cc:dc:51:0d:d1:23:40:3a:71:4e:60:25:47:43:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FF:A4:B7:CA:6F:EA:12:BB:6E:97:A4:85:60:18:FB:A1:E1:FE:03
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDB1/2B90914EB70411E8AB23B340C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDB1/2B90914EB70411E8AB23B340C4F9AE02/EP-kt8pv6hK7bpekhWAY-6Hh_gM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137251

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.218.0/24
                IPv6:
                  2001:de8:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:92:a4:76:d6:81:12:70:f3:90:d1:96:bd:b7:85:f8:d7:a9:
         71:4f:b3:73:bb:49:17:94:bc:0f:58:72:f3:4c:52:f1:4c:e1:
         e5:37:67:1d:ce:eb:12:07:45:d2:bd:e4:26:68:b9:b0:4b:cf:
         97:82:98:ff:fe:7a:78:e4:ca:57:d3:cc:d2:63:df:9b:e5:36:
         4b:ce:9a:b1:31:22:e0:47:d4:f9:71:25:2f:5c:1a:d9:02:a2:
         09:4d:db:c5:5d:24:ae:b1:90:28:5f:40:4c:ca:b5:fd:2f:af:
         87:b5:c9:cc:d9:bb:22:26:5c:11:31:65:eb:16:95:bc:0f:e5:
         59:30:19:0b:9b:98:4d:73:c8:60:ae:95:83:c2:0b:41:80:8f:
         bc:eb:6d:f8:78:b3:03:df:a8:70:14:a9:ca:79:20:0a:67:5f:
         a0:d1:20:61:43:4e:51:2a:dd:34:9d:02:d0:55:7a:32:7d:42:
         6b:f4:f0:51:aa:05:66:62:71:37:36:71:26:a7:1b:7c:ff:35:
         f6:ff:e9:bb:ae:98:a5:2c:e2:53:9e:e7:85:21:3f:1d:64:e5:
         8e:15:2f:ec:92:4e:25:59:ad:14:b3:5f:fe:7a:27:80:2b:69:
         41:52:4d:ba:9f:66:8f:fd:08:5b:0b:e5:ed:29:4a:8d:3b:56:
         b2:b3:ee:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----