Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
File:                     zGryB1D43jn7dcCh0KRBmXytN7g.cer (raw, json)
Hash identifier:          wqtQB7gSUZwGFctG1W7cSayDzara3MMy8UhMh3x0hDs=
Subject key identifier:   CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0234EB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Mar 2025 15:16:48 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    AS: 131583
                          IP: 202.174.160.0/20
                          IP: 2400:7880::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144619 (0x234eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar  3 15:16:48 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A915A9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:db:5a:f3:a5:62:99:c2:76:ac:0f:5e:ef:
                    6f:fa:35:6e:19:88:40:ed:b5:03:25:69:72:d5:26:
                    23:58:9e:81:1d:e4:84:92:ab:06:b6:58:e0:76:35:
                    32:d1:4e:17:9c:36:57:2c:d6:56:0a:33:f3:0e:a8:
                    d2:85:d1:2a:69:1c:92:79:20:9e:ef:ab:12:80:06:
                    4a:d0:94:79:e5:c2:19:3d:d7:6d:63:a4:02:e5:f8:
                    61:43:20:0f:83:62:7a:77:86:a9:b2:ca:2c:81:dd:
                    15:91:0b:f0:8a:b0:d5:5c:de:22:8c:ed:5c:e5:f9:
                    4f:9e:4a:2f:99:03:b0:a0:20:28:b6:aa:79:2a:15:
                    19:db:17:2e:d3:d9:52:98:50:6b:4e:7e:fb:2f:84:
                    da:7b:75:f2:8a:50:9b:cb:f1:93:f3:73:98:2e:f6:
                    be:b2:81:52:a1:c7:f8:00:92:84:86:97:b6:a1:58:
                    0c:2d:a6:56:a0:f0:f9:74:64:73:8a:5e:90:db:3c:
                    99:1d:bb:e6:de:5e:89:25:fc:1b:f9:f8:cc:12:73:
                    c4:96:83:3c:a0:97:f2:bb:1f:6c:af:fb:77:11:35:
                    49:d3:bd:8c:93:d0:49:39:c1:8e:7d:d3:4b:ff:c2:
                    8f:68:f4:9a:bb:6e:ee:3e:65:3c:1f:eb:0e:d8:e8:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131583

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.160.0/20
                IPv6:
                  2400:7880::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:60:6c:6f:4e:b0:74:3c:99:be:d2:89:25:e0:e8:02:bc:44:
         c1:3a:7c:cd:d8:81:74:b5:8b:7e:4c:3a:e5:fc:03:65:91:5e:
         77:3b:10:69:06:70:1e:40:91:ef:82:08:4e:b4:e0:b0:53:5b:
         b2:d2:ec:0e:92:4c:e4:43:0d:4b:60:c3:fe:35:9e:f7:95:44:
         4a:c0:2b:96:c7:8b:41:91:3c:f8:e0:67:8b:53:a8:19:4f:77:
         77:26:d1:1f:17:1c:39:77:47:77:60:89:de:5a:9a:4d:49:ec:
         c7:e6:28:51:a3:93:d2:72:66:24:a9:3d:b2:d2:dd:9b:a1:47:
         0e:68:b0:f6:b9:65:86:94:16:6d:d6:f4:67:4a:7c:ec:bb:bc:
         bb:e7:2e:8c:c1:0b:03:a1:92:b5:de:af:63:b9:67:78:d2:9c:
         38:ab:3d:64:f5:d1:66:f6:e9:71:77:e9:90:8c:ce:bc:68:d9:
         bb:65:2f:6c:e8:f1:8d:c0:c9:c7:3a:16:05:84:9e:e2:0a:89:
         53:60:ef:f1:dd:54:2b:53:03:0a:3c:c0:4a:f1:9a:21:f1:28:
         30:6a:14:23:15:05:5f:3a:78:31:a5:d7:7a:bf:bb:58:0b:48:
         02:97:90:37:31:e4:2a:05:d3:b6:87:81:cc:7f:bc:69:20:79:
         38:da:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----