Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NNo5MrfdE8YNon6wm7CcYzUvSaQ.cer
File:                     NNo5MrfdE8YNon6wm7CcYzUvSaQ.cer (raw, json)
Hash identifier:          WW45ULbuc5atHh4iJrWHBCZj3ANiPU2FUVpslMaZxx0=
Subject key identifier:   34:DA:39:32:B7:DD:13:C6:0D:A2:7E:B0:9B:B0:9C:63:35:2F:49:A4
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       3A1B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91146F0/0A795D72023111EB81A9C73FC4F9AE02/NNo5MrfdE8YNon6wm7CcYzUvSaQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91146F0/0A795D72023111EB81A9C73FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 28 Apr 2022 23:52:09 +0000
Certificate not after:    Sun 28 Aug 2022 00:00:00 +0000
Subordinate resources:    IP: 85.217.216.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14875 (0x3a1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Apr 28 23:52:09 2022 GMT
            Not After : Aug 28 00:00:00 2022 GMT
        Subject: CN=A91146F0/serialNumber=34DA3932B7DD13C60DA27EB09BB09C63352F49A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:de:3a:82:a1:6a:4c:ad:1c:40:00:5e:15:
                    0f:d3:92:f7:00:87:7b:d4:a9:98:0d:21:ab:0d:bd:
                    0e:15:e1:ce:5f:87:92:dd:ff:ef:cd:b7:bb:cf:3e:
                    2d:3b:b2:07:09:6f:56:1e:c9:44:c6:79:53:89:e4:
                    da:81:53:df:d3:85:8d:7b:20:21:a1:c9:c4:b3:ae:
                    3e:f3:63:3c:09:90:89:5c:ba:73:03:09:c5:ab:88:
                    6f:1c:57:16:51:c4:79:68:31:fd:f8:d6:a2:4b:0f:
                    6c:e9:74:18:55:a0:cd:ac:5f:e5:d4:e5:5e:48:71:
                    2e:1e:08:40:a4:81:ff:64:64:78:de:06:9d:6c:68:
                    76:b6:8f:4a:05:9a:57:bf:73:5d:09:56:b3:57:fe:
                    67:a5:df:75:ab:a3:ad:1d:99:d3:0f:e1:dc:d3:29:
                    98:40:00:ea:22:5e:40:79:d5:81:51:84:8e:d5:07:
                    44:5f:13:49:98:aa:28:8d:e9:79:fd:19:a2:91:9c:
                    30:0e:2e:d2:3f:f5:1f:26:06:54:ac:60:a4:28:3e:
                    a1:18:02:e1:aa:5c:45:54:ad:b2:31:b0:12:f3:ed:
                    52:59:62:14:36:fa:eb:2d:5a:48:14:9a:13:96:4d:
                    df:9c:98:0c:63:9c:9a:8a:28:c2:31:fc:d6:bf:26:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:39:32:B7:DD:13:C6:0D:A2:7E:B0:9B:B0:9C:63:35:2F:49:A4
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91146F0/0A795D72023111EB81A9C73FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91146F0/0A795D72023111EB81A9C73FC4F9AE02/NNo5MrfdE8YNon6wm7CcYzUvSaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.217.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:4d:b8:d7:d4:ce:82:0e:e9:ed:3a:9f:54:20:f1:48:82:a4:
         25:2f:be:7b:0d:3d:54:13:d5:7c:e6:56:30:a5:2f:fc:fb:7f:
         15:76:96:23:34:82:f0:e4:bf:18:d0:be:2f:44:5a:bd:0f:a3:
         7a:5e:b3:13:8d:33:b2:10:c4:17:92:e8:3f:cf:b2:3d:f6:e2:
         ed:ca:01:7c:31:46:48:b1:21:fe:cf:68:95:fb:bc:36:2d:70:
         32:28:74:c9:65:1f:e0:d0:88:9b:29:20:3f:a3:2f:b3:69:0b:
         b5:99:00:92:cc:0b:d1:a6:99:93:86:29:39:41:48:f7:98:a3:
         b2:51:8a:4c:0b:dc:f6:d5:2b:b1:e7:6a:26:65:dd:36:b4:d3:
         3b:2f:1b:9c:5e:ae:36:06:76:c1:1e:b1:92:a6:8c:46:65:e0:
         3f:5c:28:ce:84:d9:f2:c6:d8:91:16:07:c6:93:19:5b:db:36:
         c8:16:ec:00:82:e8:4d:99:c6:55:1b:ce:75:b4:fd:3a:af:af:
         fd:af:c9:4e:99:3b:07:ac:37:72:33:0a:a3:8f:ab:ec:70:a9:
         c3:0e:a0:7b:a5:37:a6:4e:06:ae:4f:40:be:7f:8b:d2:19:20:
         fb:04:5d:73:a1:56:db:71:67:db:d5:4c:5f:1d:3a:5c:66:43:
         a9:eb:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----