Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8QQGOILGMXc3CO73ERvnNe0ePxI.cer
File:                     8QQGOILGMXc3CO73ERvnNe0ePxI.cer (raw, json)
Hash identifier:          zp8Pr+S6IlAsLRuVEQlJS8KldVZkLlyBA0fT2vO1PYo=
Subject key identifier:   F1:04:06:38:82:C6:31:77:37:08:EE:F7:11:1B:E7:35:ED:1E:3F:12
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       43DC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911189F/87B797160CBD11EDAF9B134FC4F9AE02/8QQGOILGMXc3CO73ERvnNe0ePxI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911189F/87B797160CBD11EDAF9B134FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Jul 2022 08:32:56 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 137.189.0.0/16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17372 (0x43dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 26 08:32:56 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A911189F/serialNumber=F104063882C631773708EEF7111BE735ED1E3F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:a3:c1:c6:4d:0a:77:b8:85:ab:ab:5b:2c:
                    28:60:56:a9:14:22:46:57:9b:cd:21:42:51:ad:9f:
                    c1:8d:fa:bf:38:ae:45:c5:58:9b:e6:70:4e:98:32:
                    51:35:c1:ff:95:67:87:7b:31:32:89:f9:e4:3e:34:
                    21:f6:f6:0d:17:d4:f7:f0:14:af:64:de:2d:40:9e:
                    99:a8:e2:74:15:60:b9:96:b2:45:2d:5f:b6:d8:45:
                    1c:72:41:cc:53:e9:b0:1d:20:65:8a:13:c7:a0:0d:
                    34:19:4f:3f:dd:1b:1e:c9:fb:af:24:2f:9b:f5:d9:
                    2c:16:25:e3:e9:f5:88:dc:55:7a:7a:52:12:7d:e5:
                    9a:fb:ee:80:71:a9:8e:f8:34:af:61:91:e9:6a:a1:
                    c8:10:d7:95:f1:cf:31:4a:9e:e4:14:d4:d3:8a:fa:
                    b3:66:e4:d4:b9:7d:98:e2:0d:d4:55:c0:59:46:ab:
                    f1:55:4c:f7:e1:0b:b8:99:4a:7e:22:7d:38:ae:ec:
                    e2:9d:f6:2f:e0:9b:97:3e:bc:74:12:ff:a5:57:41:
                    b1:36:d1:60:f2:44:f4:5f:1c:f1:ea:75:41:f5:7c:
                    f1:b4:1d:ff:d9:5d:1c:f0:5f:c1:88:06:4a:c2:c1:
                    25:89:42:8c:96:a0:1c:95:20:ed:3d:8b:21:e3:b2:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:04:06:38:82:C6:31:77:37:08:EE:F7:11:1B:E7:35:ED:1E:3F:12
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911189F/87B797160CBD11EDAF9B134FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911189F/87B797160CBD11EDAF9B134FC4F9AE02/8QQGOILGMXc3CO73ERvnNe0ePxI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.189.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:c5:09:c5:1d:ef:05:ed:4d:66:17:84:40:16:ad:b7:97:eb:
         5c:a2:67:74:fd:64:e0:d4:37:4f:6f:76:35:85:95:9a:4e:d5:
         f2:ed:41:21:47:59:cb:3b:38:2c:b1:ad:43:f8:2f:4d:ce:20:
         bd:e9:93:05:f0:8c:9b:71:96:da:2a:d3:9c:c9:e5:25:86:e1:
         08:21:11:23:be:89:99:03:97:e4:25:49:b9:26:b2:87:bb:d3:
         35:8b:5d:13:0d:dd:eb:53:2f:46:f9:8d:c0:b4:cc:f0:a9:27:
         02:6a:07:c7:79:61:71:95:a7:ac:30:33:c6:81:d7:d1:79:39:
         34:03:83:5f:90:00:6e:34:5f:5a:65:c2:78:28:f2:c8:50:d5:
         93:df:9d:f1:a6:c8:6e:91:c2:74:2d:4f:2b:4f:d2:b0:a1:3a:
         f0:0e:8f:8f:3b:a4:f9:b9:79:a7:54:09:1c:9c:ec:af:83:f6:
         33:ba:1a:08:36:7f:13:6f:dc:ed:5e:8c:ea:1d:11:a7:15:70:
         0b:d7:e0:36:93:88:12:7c:0b:c4:6b:94:38:bb:fe:7f:08:de:
         be:46:73:06:35:6c:5c:82:e8:d7:e4:11:00:f7:b1:27:47:99:
         f7:de:f7:3c:da:8b:f5:af:ea:e8:91:7c:d4:26:49:49:0e:e6:
         f7:1f:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----