Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/AXca94v3qiY6P7DOpW2X04NGIhg.cer
File:                     AXca94v3qiY6P7DOpW2X04NGIhg.cer (raw, json)
Hash identifier:          zaNK9YlRo1LDxc1l1S4k30iI0Gz0uRRTIaUXJq9I69c=
Subject key identifier:   01:77:1A:F7:8B:F7:AA:26:3A:3F:B0:CE:A5:6D:97:D3:83:46:22:18
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       13F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5304/AXca94v3qiY6P7DOpW2X04NGIhg.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5304/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 16 May 2022 07:37:38 +0000
Certificate not after:    Mon 15 May 2023 01:30:04 +0000
Subordinate resources:    IP: 202.17.164.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5113 (0x13f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: May 16 07:37:38 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=01771AF78BF7AA263A3FB0CEA56D97D383462218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:02:a4:bd:48:f0:c0:06:05:c6:94:24:d7:
                    e6:71:5d:66:25:06:45:81:13:b2:5c:ea:8b:e3:6d:
                    f1:c3:59:3e:cb:97:d2:a6:0d:4e:a4:6e:4f:ad:b3:
                    a6:bd:3f:09:20:a8:f1:2b:d6:06:c1:25:91:37:19:
                    4d:ae:69:04:5d:44:3f:2c:fb:bb:fd:36:b7:22:51:
                    f5:21:a7:6c:4e:49:a7:54:30:f5:40:b0:4e:a5:d9:
                    dd:1e:e9:86:50:18:b0:10:3d:ac:51:e8:a1:a9:77:
                    4e:b1:b6:23:1b:4b:ba:b6:0a:cb:02:a1:40:16:e9:
                    99:33:68:01:b9:db:f9:93:76:17:14:ae:30:ea:eb:
                    3d:36:55:b2:76:6b:d9:b7:86:3b:c4:48:07:38:88:
                    d5:c3:ac:44:17:d5:f9:72:7c:02:91:33:7a:19:e0:
                    af:c8:12:ca:e7:f5:e0:fb:6f:77:2b:16:f8:a0:6e:
                    ad:b0:76:03:b6:d3:e1:bb:04:15:61:3e:b9:87:b6:
                    c4:f1:c3:d7:de:e8:f3:e6:d6:4f:5d:27:a5:eb:64:
                    df:76:10:16:41:cb:3b:c5:f1:1a:bc:a1:cf:da:99:
                    21:05:28:1e:4d:ad:08:65:ac:ac:1a:51:ed:13:f0:
                    ac:96:0a:fd:11:6c:6a:d6:11:c7:e2:0f:e6:0d:52:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:77:1A:F7:8B:F7:AA:26:3A:3F:B0:CE:A5:6D:97:D3:83:46:22:18
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5304/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5304/AXca94v3qiY6P7DOpW2X04NGIhg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.17.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:e5:ee:b7:85:31:f9:35:f4:33:81:9e:7f:04:74:13:fe:19:
         54:0c:8e:fa:27:6e:41:ed:ae:98:2b:0b:5b:97:8e:f4:8c:ed:
         39:50:ea:a1:e1:25:36:ed:75:eb:db:03:db:f1:fc:1c:b3:c9:
         76:b7:5f:a7:7f:34:53:35:c6:8c:28:99:82:92:0b:44:90:6a:
         95:ad:d7:60:1d:5f:f8:68:f3:fc:9a:75:91:18:f8:1c:d5:6b:
         bd:f4:a8:bd:68:b6:8e:46:b8:57:f2:67:3b:34:74:f0:53:79:
         3a:0e:ec:6f:71:52:d1:8e:e1:a1:e0:11:29:58:cb:75:22:b9:
         aa:86:43:55:28:8a:47:1b:13:1d:5e:63:20:bf:d4:62:e5:0d:
         7e:12:30:a2:9e:e2:02:02:4a:b1:1d:86:b0:7b:19:da:d9:cc:
         56:13:77:d2:a6:7d:b4:c1:9c:3b:13:44:06:6b:2b:b9:14:3f:
         94:82:17:16:04:85:68:d4:b0:bd:f3:82:11:a8:46:9d:71:af:
         a0:5c:c3:63:86:b5:7c:a3:50:92:d5:5b:ee:90:d5:56:8d:39:
         f8:29:f7:85:05:ef:09:b1:a8:7f:ab:96:71:f7:91:c4:c2:5a:
         f2:d6:df:7f:ae:af:a1:73:3b:fe:1c:8c:23:fb:74:84:9e:8a:
         30:51:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----