Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1O9KSNLMqPiqZt74fXi9anNtPJU.cer
File:                     1O9KSNLMqPiqZt74fXi9anNtPJU.cer (raw, json)
Hash identifier:          Ti4m0GBothCAF7HcoWQ4xEeYhzWRdCbT0R5+qkKaW3s=
Subject key identifier:   D4:EF:4A:48:D2:CC:A8:F8:AA:66:DE:F8:7D:78:BD:6A:73:6D:3C:95
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4293
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9161D91/01917072E14711EC82C5474DC4F9AE02/1O9KSNLMqPiqZt74fXi9anNtPJU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9161D91/01917072E14711EC82C5474DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jun 2022 01:06:10 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 137.111.0.0/16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17043 (0x4293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun  1 01:06:10 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A9161D91/serialNumber=D4EF4A48D2CCA8F8AA66DEF87D78BD6A736D3C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:bd:3b:c0:63:7f:0a:2c:48:d4:63:d5:05:
                    c9:01:a7:e3:86:66:f2:37:48:4e:bf:29:0a:45:c9:
                    0f:42:d4:6a:2f:37:b3:d9:49:e8:6f:22:41:92:79:
                    2f:82:44:25:fc:e0:22:48:ea:e0:51:a6:3c:d8:88:
                    ee:20:6e:5f:b4:11:84:dd:29:34:45:55:07:b9:8e:
                    4d:8e:07:de:a5:08:bf:29:cc:c1:b4:8a:b9:30:b4:
                    9f:8e:8e:93:77:41:1e:ac:66:9b:b1:40:ec:45:13:
                    ee:12:d9:de:40:49:b8:56:d9:1f:0f:49:af:26:ac:
                    17:63:da:ae:b0:39:b4:0a:6e:d2:b3:68:97:03:cc:
                    21:23:43:e3:cc:d9:e0:48:7e:4b:51:51:90:3f:6d:
                    8a:b6:b2:aa:01:5f:d2:c9:bb:16:c1:7d:23:a8:76:
                    df:bf:d1:9e:58:f9:9b:2f:ea:13:9e:b4:75:e0:3c:
                    72:03:a3:1c:34:e2:01:42:db:57:dc:1c:4a:44:ae:
                    0f:38:ff:86:8b:07:c5:c6:70:74:4c:82:63:84:85:
                    12:c7:6b:90:2f:fb:bc:d7:b4:43:e9:0f:49:cc:c2:
                    4b:5e:a3:50:77:46:fc:7a:65:d4:d6:42:ee:2e:39:
                    48:6e:18:d6:7c:83:77:99:7a:e9:05:ee:e0:12:73:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EF:4A:48:D2:CC:A8:F8:AA:66:DE:F8:7D:78:BD:6A:73:6D:3C:95
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161D91/01917072E14711EC82C5474DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161D91/01917072E14711EC82C5474DC4F9AE02/1O9KSNLMqPiqZt74fXi9anNtPJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.111.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:06:fd:d8:03:e8:75:49:10:b1:0e:d7:e1:6c:af:40:f0:80:
         d1:ac:5f:f7:63:72:4b:b2:5b:ae:61:42:dc:2c:dd:5d:12:5b:
         92:03:e8:fd:f6:1a:74:2a:f3:4e:8d:66:6d:6b:f1:d6:64:ff:
         d8:67:6f:9f:35:f7:9c:66:6a:fd:b3:93:2c:9d:24:62:17:30:
         54:86:41:8a:5c:f5:bc:fc:29:75:4e:68:89:aa:b1:c6:fe:8e:
         18:66:62:9f:b3:66:9b:3e:c6:97:dc:85:43:89:64:06:a9:02:
         25:5d:14:c8:ed:17:1e:ce:1e:10:cd:ae:2a:a6:d4:e2:36:87:
         25:c1:4b:b2:6f:94:1b:76:4c:e5:0e:c4:52:e0:df:f9:00:95:
         5c:9c:2a:52:ca:fe:09:7b:a3:36:54:fb:b1:d2:19:1c:18:44:
         25:87:6d:12:df:d3:07:39:d7:14:9f:c6:ec:3c:43:76:5f:1d:
         c2:ec:87:c9:28:34:57:db:0f:e9:71:d5:c3:cd:06:d5:e9:ba:
         98:3e:76:c9:3a:06:d1:a9:4f:33:b2:99:bd:e0:42:6a:e3:26:
         32:6f:2d:37:37:1b:e7:b3:28:b7:f1:2e:0c:c2:83:a0:9f:2f:
         d4:8d:29:33:50:51:23:e6:b2:ef:46:36:61:f8:5e:de:f5:f4:
         58:56:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----