Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uhxa-2AVPO00LNPCZ00xXkJFAio.cer
File:                     Uhxa-2AVPO00LNPCZ00xXkJFAio.cer (raw, json)
Hash identifier:          YuAHLdjlbWPSSf1EOEK7hshMhoDNkW9sH6OjNwYrg2g=
Subject key identifier:   52:1C:5A:FB:60:15:3C:ED:34:2C:D3:C2:67:4D:31:5E:42:45:02:2A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014230
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9160904/347274EC6F4911E8BEB6AE65C4F9AE02/Uhxa-2AVPO00LNPCZ00xXkJFAio.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9160904/347274EC6F4911E8BEB6AE65C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 31 Jan 2022 06:06:33 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    AS: 17493
                          IP: 43.250.192.0/22
                          IP: 122.248.192.0/18
                          IP: 175.41.128.0/18
                          IP: 2400:6500::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82480 (0x14230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 31 06:06:33 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A9160904/serialNumber=521C5AFB60153CED342CD3C2674D315E4245022A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f1:1b:17:b7:8e:94:f0:7a:95:17:46:fd:f0:
                    fe:91:e8:71:f6:7e:fd:31:e1:ea:ab:7c:66:8f:89:
                    24:35:43:b6:9d:15:e8:b0:e1:c6:6f:e1:cd:e7:18:
                    b7:a1:b4:9f:a5:69:c3:2b:05:85:96:da:f1:8e:37:
                    c2:77:0f:46:f3:97:35:d3:04:9d:6f:09:23:29:99:
                    e3:98:5b:14:a0:0c:90:a2:f8:09:81:ad:3c:71:08:
                    d7:07:a9:8b:5f:95:a0:17:c7:c6:0e:68:8d:ce:aa:
                    17:d2:8c:71:92:e1:6f:66:b6:57:86:07:a5:69:a2:
                    1b:28:01:87:c3:50:d5:de:7b:92:b6:ad:4d:0e:1c:
                    9f:17:2d:49:97:9d:39:8b:aa:db:21:33:93:22:a2:
                    14:32:c6:7e:1e:c5:de:6d:4e:97:7b:c0:e8:46:c3:
                    f0:81:47:8e:0a:1d:d3:55:65:c4:11:57:b3:14:65:
                    fc:7a:fa:ad:62:27:31:a0:40:24:30:7d:9b:6e:be:
                    f3:cd:5f:c8:48:a5:53:9b:32:61:a2:d6:ea:3e:3d:
                    1b:bd:22:84:0c:e6:8f:c5:a5:46:99:a2:f9:ad:ea:
                    54:89:ab:1a:47:4c:5c:bc:d1:ed:ea:99:f2:e7:36:
                    04:e1:db:3c:74:9c:20:43:ef:94:9d:e8:cf:f4:c1:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1C:5A:FB:60:15:3C:ED:34:2C:D3:C2:67:4D:31:5E:42:45:02:2A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160904/347274EC6F4911E8BEB6AE65C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160904/347274EC6F4911E8BEB6AE65C4F9AE02/Uhxa-2AVPO00LNPCZ00xXkJFAio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17493

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.192.0/22
                  122.248.192.0/18
                  175.41.128.0/18
                IPv6:
                  2400:6500::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:90:ee:8f:9b:5e:f6:02:8c:41:5e:12:7c:f8:c5:54:f8:06:
         e5:09:d7:03:39:eb:73:4d:6a:b3:d0:3b:c8:ec:0f:50:ee:53:
         fe:11:a8:d8:98:e9:db:03:56:60:03:39:34:e4:5f:c9:c5:3b:
         5a:21:8d:c0:dd:8c:1d:d1:25:9d:51:d2:3a:ac:69:5d:64:4c:
         9a:1e:c7:4b:0a:6d:85:e8:ba:1e:d7:58:c3:48:79:94:35:07:
         ba:e8:62:65:f2:4b:01:6f:bf:5d:b4:a2:bf:ec:9b:ec:27:1e:
         f6:91:b9:47:2a:bd:9d:89:59:63:75:4d:c5:86:da:3f:a3:fe:
         e5:c3:2c:c8:96:d2:c1:af:7c:da:6d:36:bd:bc:56:fb:57:0a:
         b5:70:4f:ca:d4:2b:e9:dd:a5:ef:93:04:b1:36:58:4a:c0:ee:
         41:45:dc:fc:3f:8a:47:fb:90:1f:de:32:95:71:7e:4a:b7:09:
         66:51:db:78:e4:80:21:65:a8:ce:dd:fd:7e:ea:aa:28:94:5b:
         ac:13:a2:b6:94:48:14:25:01:72:07:16:57:13:71:09:ff:08:
         c0:ec:8f:ea:72:92:4d:93:b2:48:b1:c6:18:83:4a:e2:89:e7:
         90:71:ff:c4:a1:de:b0:6d:0c:b9:24:0a:a9:d8:9f:88:f2:8f:
         c0:34:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----