Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_LYJiw2eMVd5cDevS1LAtD3wgSY.cer
File:                     _LYJiw2eMVd5cDevS1LAtD3wgSY.cer (raw, json)
Hash identifier:          9uNMvkf+TgIGtSKQbM5905Eb9Gj47wmRZkGFbx+/O2E=
Subject key identifier:   FC:B6:09:8B:0D:9E:31:57:79:70:37:AF:4B:52:C0:B4:3D:F0:81:26
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       3BE9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9132275/27CD2F0A50D411E7AE665810C4F9AE02/_LYJiw2eMVd5cDevS1LAtD3wgSY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9132275/27CD2F0A50D411E7AE665810C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 30 Jul 2021 05:09:36 +0000
Certificate not after:    Fri 30 Sep 2022 00:00:00 +0000
Subordinate resources:    IP: 64.119.16.0/20
                          IP: 66.181.160.0/19
                          IP: 192.82.64.0/19
                          IP: 192.82.100.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15337 (0x3be9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 30 05:09:36 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A9132275/serialNumber=FCB6098B0D9E3157797037AF4B52C0B43DF08126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:84:81:93:03:73:53:ad:c5:e0:43:24:b9:
                    7b:55:97:dc:46:fc:a6:9d:25:03:0f:77:9e:d0:85:
                    4b:86:a7:75:51:db:5e:73:1a:92:e7:65:29:05:34:
                    fd:01:43:27:40:ca:7f:4d:bf:7e:f2:11:2f:59:31:
                    85:08:43:7e:2b:5f:e1:4f:1d:4e:12:ff:f1:07:1c:
                    b5:94:72:de:77:f6:63:66:30:ef:93:0b:ba:65:07:
                    2a:1b:80:5f:e4:98:b0:90:1a:87:0d:5b:94:44:b7:
                    b4:eb:34:37:05:37:a2:10:4c:2e:8a:fe:ea:f2:6f:
                    31:bd:00:36:48:ec:f3:48:88:21:cf:62:4d:0d:1a:
                    55:8d:ac:7b:2b:bf:68:ca:04:79:8a:de:59:39:ac:
                    70:67:7f:1a:da:b4:17:40:b7:72:47:7d:fb:b3:84:
                    2d:8a:79:99:b6:aa:d8:d1:67:38:b1:99:7d:a6:cd:
                    ae:f3:6a:be:1a:2c:d0:5a:e6:8e:d1:8d:5b:1e:58:
                    79:fb:53:8d:70:37:56:7a:9e:a1:97:18:f0:89:1b:
                    94:72:6d:fc:a1:b8:55:03:12:52:5b:6f:d2:29:9d:
                    48:eb:a2:32:ff:e4:f4:e7:a4:b8:d7:0e:d6:ca:5f:
                    95:01:a4:10:44:e0:35:25:73:60:47:45:21:2f:ae:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B6:09:8B:0D:9E:31:57:79:70:37:AF:4B:52:C0:B4:3D:F0:81:26
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132275/27CD2F0A50D411E7AE665810C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132275/27CD2F0A50D411E7AE665810C4F9AE02/_LYJiw2eMVd5cDevS1LAtD3wgSY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.16.0/20
                  66.181.160.0/19
                  192.82.64.0/19
                  192.82.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:58:8a:d5:f0:48:82:55:cd:96:a3:7c:1c:30:3e:18:fd:cb:
         02:d0:57:fd:8b:10:75:ce:73:7f:ec:3a:98:f2:ba:d0:13:b3:
         aa:12:04:d0:71:77:08:12:93:8a:d6:bb:9a:45:ea:9e:4d:13:
         e6:1b:12:bb:5d:5d:a7:5c:7d:00:3a:b2:c8:32:7e:7b:0f:a1:
         d7:ee:d4:d4:38:c4:b8:18:ed:24:df:8b:d5:3e:e1:c8:af:f3:
         06:7c:c2:2b:c9:74:65:d2:67:3e:c6:30:e1:ac:c4:d9:3e:d6:
         5f:63:4e:a3:ca:2d:1e:41:ae:13:77:ba:5e:80:3f:7b:dc:7e:
         a8:eb:14:db:f0:4a:ef:86:df:56:17:f2:c6:5f:1b:f4:d1:58:
         8e:4b:35:71:8d:fc:c1:af:e7:b9:b3:22:74:35:42:8a:8a:dc:
         ac:d7:52:8f:ea:d8:c0:18:b6:d5:2e:04:b2:da:08:d9:80:6e:
         11:5e:7c:e4:bb:25:93:e1:68:43:b2:78:7f:b0:ac:ec:7b:d9:
         4a:94:70:55:46:d7:23:e3:ca:9f:c2:99:43:61:88:56:5c:f9:
         fd:fd:14:cc:35:34:c9:2b:13:82:84:14:02:26:69:3c:bc:af:
         a7:e4:17:09:ee:26:73:34:7e:9c:ef:91:31:4e:de:4b:5a:a7:
         87:d1:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org