Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
File:                     eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer (raw, json)
Hash identifier:          tEe2284Qt+nd6ifBEmxOJVfCKqJOkcC39+yHhyQsBI0=
Subject key identifier:   78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0239CA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 26 Mar 2025 04:43:46 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 103.145.116.0/23
                          IP: 2401:f9a0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145866 (0x239ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar 26 04:43:46 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A9192210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:8b:14:a0:0f:11:ae:b3:02:fe:68:a3:10:
                    24:6b:09:ef:8a:c7:bb:32:ec:5a:12:aa:03:81:ee:
                    54:3a:ff:c8:7b:19:05:f6:8a:8f:9e:0b:a8:7f:a2:
                    da:6b:c7:d5:08:a7:10:ad:8d:57:47:c7:8f:86:95:
                    e4:74:bf:5a:69:86:39:44:09:9c:22:f8:2c:47:3d:
                    c9:1f:26:58:36:5a:aa:d8:b1:3d:ca:d3:f8:ce:9b:
                    1f:5f:c5:4f:d7:15:23:a1:33:91:4a:31:56:46:43:
                    11:37:93:c4:11:b5:99:e3:9f:11:94:58:c0:0b:fb:
                    20:d5:4e:44:36:d8:e2:ee:8f:56:87:5f:19:7c:2e:
                    e0:8e:6a:2f:86:aa:21:05:9c:fb:00:2b:95:fe:0e:
                    6a:94:42:aa:fe:bc:65:6e:cd:09:ff:2d:7d:df:8a:
                    de:cf:da:7b:53:d4:5a:92:21:48:0b:7d:00:ed:d4:
                    47:58:88:7b:fa:ca:33:51:5c:cf:37:37:e8:ec:dc:
                    21:e4:5e:d5:39:25:b0:fc:68:c0:dd:cc:a1:fe:04:
                    2e:0d:54:61:bc:2e:58:b0:c2:48:ae:b9:a2:d7:80:
                    2f:60:82:68:c0:b1:1b:69:64:74:dc:8c:18:27:e4:
                    d9:d9:8a:6b:48:f5:db:f0:27:0b:b9:a6:02:94:c9:
                    b9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.116.0/23
                IPv6:
                  2401:f9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:10:44:a1:97:b6:ac:a0:4e:59:97:14:a6:f1:6d:83:ad:a8:
         59:02:2f:70:aa:8d:26:9e:f8:df:f4:7d:73:d8:2c:12:b8:b8:
         7d:78:7d:e4:bc:7e:f3:b3:fd:4a:f6:67:7b:40:15:f8:db:55:
         92:54:8f:39:12:21:06:6e:b2:fc:71:51:65:d5:48:57:b8:77:
         34:b0:19:eb:30:bd:dc:a5:84:99:4e:e0:a2:d9:c0:aa:ad:b9:
         62:8b:01:56:6e:c9:8d:30:6f:4a:cc:24:cb:33:ce:7c:eb:80:
         93:d9:21:fc:f8:ae:8c:9c:3a:3c:16:c5:2e:71:b1:83:87:26:
         63:f5:86:16:5d:ca:0c:dd:e4:8f:70:48:ae:f7:fe:ea:ab:38:
         2c:ea:21:bb:ea:a9:af:60:77:5f:33:ad:22:af:0f:27:ca:09:
         b4:1f:14:21:79:ee:d0:16:ef:05:5f:85:ea:cc:00:c0:d5:fd:
         ce:5a:98:51:5a:c3:e1:20:e1:44:b1:66:4f:15:f0:77:2b:29:
         45:79:2b:7b:cf:81:3e:e6:87:12:02:05:d2:5c:3f:68:82:6d:
         6a:f9:24:5f:85:1f:cb:a6:ab:a6:50:5f:68:6d:bf:2f:9e:e1:
         f0:6c:53:f8:e4:b1:0c:76:dd:67:96:5e:f1:cc:78:81:9d:47:
         d6:c8:d6:03
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAjnKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMyNjA0NDM0NloXDTI1MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTIyMTAxMTAvBgNVBAUTKDc4MUY5NUIwQzhBQjJFRjdGRDczQ0Y4
RkMxMEQyRkE4NkVDQ0RDNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHKIsUoA8RrrMC/mijECRrCe+Kx7sy7FoSqgOB7lQ6/8h7GQX2io+eC6h/otpr
x9UIpxCtjVdHx4+GleR0v1pphjlECZwi+CxHPckfJlg2WqrYsT3K0/jOmx9fxU/X
FSOhM5FKMVZGQxE3k8QRtZnjnxGUWMAL+yDVTkQ22OLuj1aHXxl8LuCOai+GqiEF
nPsAK5X+DmqUQqr+vGVuzQn/LX3fit7P2ntT1FqSIUgLfQDt1EdYiHv6yjNRXM83
N+js3CHkXtU5JbD8aMDdzKH+BC4NVGG8LliwwkiuuaLXgC9ggmjAsRtpZHTcjBgn
5NnZimtI9dvwJwu5pgKUybkHAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUeB+VsMir
Lvf9c8+PwQ0vqG7M3EowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkyMjEwLzVDQTM3M0Q4MTI3ODExRUJBODU5MjQxMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MjIxMC81Q0EzNzNEODEyNzgxMUVCQTg1OTI0MTJDNEY5QUUwMi9lQi1Wc01p
ckx2ZjljOC1Qd1EwdnFHN00zRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAFnkXQwDQQCAAIwBwMFACQB+aAwDQYJKoZIhvcNAQELBQADggEB
ACAQRKGXtqygTlmXFKbxbYOtqFkCL3CqjSae+N/0fXPYLBK4uH14feS8fvOz/Ur2
Z3tAFfjbVZJUjzkSIQZusvxxUWXVSFe4dzSwGeswvdylhJlO4KLZwKqtuWKLAVZu
yY0wb0rMJMszznzrgJPZIfz4roycOjwWxS5xsYOHJmP1hhZdygzd5I9wSK73/uqr
OCzqIbvqqa9gd18zrSKvDyfKCbQfFCF57tAW7wVfherMAMDV/c5amFFaw+Eg4USx
Zk8V8HcrKUV5K3vPgT7mhxICBdJcP2iCbWr5JF+FH8umq6ZQX2htvy+e4fBsU/jk
sQx23WeWXvHMeIGdR9bI1gM=
-----END CERTIFICATE-----