Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
File:                     XDlbosoKv2WIhyaHTHgktpt4mZU.cer (raw, json)
Hash identifier:          bjQW+6Ftlh2aJh/FZ1BHSwfLo4K8qoIsQdmL7hYD+c0=
Subject key identifier:   5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023A78
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Mar 2025 17:54:52 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    IP: 103.135.56.0/22
                          IP: 2404:75c0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146040 (0x23a78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar 28 17:54:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A91E66E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8f:7a:58:e0:ee:2d:0c:4b:15:0f:cb:e7:9c:
                    61:67:13:d5:c5:4c:66:74:29:ed:ce:ae:3f:f5:50:
                    ba:1c:4b:f6:73:60:a7:d4:98:fc:9c:c2:76:5c:f6:
                    e9:7a:60:92:53:3f:e7:24:51:cb:b7:90:22:15:da:
                    cc:25:8a:c1:bc:d0:98:9c:3f:a5:39:40:b4:c8:12:
                    1c:e8:d8:eb:16:5e:9c:8f:90:68:ce:41:82:21:93:
                    93:3b:2c:d1:e4:24:2c:ed:14:06:d6:80:7a:8a:e7:
                    3d:b8:2f:19:90:6d:31:f2:2f:30:39:d9:16:e3:22:
                    bd:97:b4:49:e0:2c:cf:ae:d3:79:d8:64:14:b8:b4:
                    c5:44:6d:c9:3f:8c:9b:1d:f9:9a:2b:05:89:fd:1c:
                    f1:02:3e:51:a0:c5:18:64:7b:95:55:be:38:75:08:
                    73:1a:74:6c:fc:a2:a9:b2:2a:30:03:bd:ac:e2:da:
                    22:95:36:0d:90:cb:d3:67:e0:19:01:ca:4a:c7:0f:
                    8d:14:37:2f:3b:2e:5b:35:af:be:0c:af:95:05:4c:
                    ed:f8:e6:e6:94:07:7d:8d:ae:52:dd:58:dd:85:d5:
                    17:56:d0:a3:de:09:be:96:95:84:0d:75:98:5b:02:
                    8f:7a:27:e2:a9:9e:b1:e3:be:7e:0b:9e:b0:d1:46:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.56.0/22
                IPv6:
                  2404:75c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:24:e2:04:27:af:df:45:83:0b:01:72:58:ae:03:f8:a6:ae:
         a4:14:ca:b5:46:e8:7a:02:37:3c:7c:0c:7c:2b:6f:70:c1:39:
         84:bd:44:bd:cd:bb:8a:e6:52:89:25:7a:54:63:dc:7f:31:ba:
         37:44:a4:96:af:cc:c7:3d:85:86:c9:98:98:9d:a5:0f:82:4a:
         09:7e:12:5f:7b:42:8e:57:10:b1:fa:80:28:35:1a:49:44:05:
         10:bc:9d:6f:6d:fc:d6:6d:46:c7:18:c2:85:51:c8:8a:fa:b3:
         a1:9d:8a:c3:28:79:7c:a3:52:8f:db:38:8a:7f:bb:36:26:33:
         f3:64:59:a3:8c:ca:cf:d3:0e:0d:b1:2b:a7:f6:69:54:fc:8f:
         44:7a:34:6e:97:32:ac:13:90:f9:92:d5:36:9c:be:3c:ee:9c:
         2d:7f:00:95:ee:34:b5:4c:1f:7f:65:db:c3:ca:ab:ed:34:2d:
         9e:e4:15:a7:aa:99:8f:e7:7b:0c:9e:12:bd:57:c8:2c:1f:5b:
         c2:58:67:7b:71:79:98:13:c9:de:05:61:28:bd:73:87:8e:f7:
         cc:f3:4a:2d:62:40:2c:e8:b0:8c:6a:27:39:97:1a:b6:32:66:
         4a:fe:6f:4c:ec:e2:41:f9:43:13:4f:cb:97:c2:3c:65:26:22:
         7c:c8:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----