Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuhWq-E4W1omBo-rZdsYlRFkLbQ.cer
File:                     wuhWq-E4W1omBo-rZdsYlRFkLbQ.cer (raw, json)
Hash identifier:          cSasK1TrRWo+WTRH+jFMBQUtX/WMyt4/CFFN+M5lToc=
Subject key identifier:   C2:E8:56:AB:E1:38:5B:5A:26:06:8F:AB:65:DB:18:95:11:64:2D:B4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4286
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/wuhWq-E4W1omBo-rZdsYlRFkLbQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 May 2022 03:12:29 +0000
Certificate not after:    Sun 28 May 2023 00:00:00 +0000
Subordinate resources:    IP: 139.230.0.0/16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17030 (0x4286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 31 03:12:29 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=A91F66B3/serialNumber=C2E856ABE1385B5A26068FAB65DB189511642DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:37:36:e6:77:38:3a:8a:d8:01:b7:56:d6:
                    c5:4c:83:15:e9:89:76:19:de:c7:85:c5:db:72:1f:
                    6d:ef:38:eb:60:55:b7:9a:19:46:54:e3:62:01:5a:
                    b6:3d:71:15:1f:9a:06:2b:85:77:7d:2a:94:41:6b:
                    92:79:3e:5f:6c:3f:0b:8a:5d:59:24:20:b6:d5:cb:
                    61:f8:d0:a8:1f:3f:10:c2:1b:bb:6e:0b:ae:17:d5:
                    f3:08:99:45:6f:6b:3c:d5:2b:24:cc:22:c4:0a:5c:
                    f7:f9:03:78:5d:e0:16:c9:a6:74:86:97:b5:cd:7d:
                    27:e4:2e:db:a9:52:32:18:b9:ef:a7:9c:22:a8:5a:
                    31:41:a8:7d:50:db:5d:53:ca:a1:4b:99:59:d3:7c:
                    90:cb:8f:26:98:9f:08:4b:db:33:16:16:1e:e7:f3:
                    04:88:34:89:24:7c:82:08:68:4a:f1:2b:ee:23:d1:
                    d3:47:fb:4b:84:a1:95:7b:ef:28:af:ff:e1:f3:b1:
                    c7:9f:bc:2d:a6:0a:d9:9c:fa:fe:35:b8:6d:8e:b3:
                    40:c3:e9:5f:bd:ed:bc:29:f9:1a:39:ce:6c:ab:ce:
                    ad:c3:e3:3c:29:62:f1:b5:58:bc:ef:47:b3:72:eb:
                    53:ac:1a:46:ca:92:ad:b8:70:42:71:6d:8e:d6:a8:
                    aa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E8:56:AB:E1:38:5B:5A:26:06:8F:AB:65:DB:18:95:11:64:2D:B4
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/wuhWq-E4W1omBo-rZdsYlRFkLbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:31:e9:60:b2:c9:e3:fc:00:5d:7e:a8:3c:76:a1:0b:06:
         14:33:72:3a:48:3b:a9:8b:97:ee:08:d3:ec:67:ee:cb:59:d1:
         d3:85:c8:ed:cd:57:85:14:41:1c:c7:8b:f6:9e:03:6d:44:4f:
         25:b4:f0:a8:95:9d:35:29:02:bf:47:56:b0:47:14:86:6c:8a:
         20:b7:61:43:b1:78:df:58:53:97:53:97:33:45:64:d1:1c:45:
         70:08:44:50:ff:67:17:c6:92:a6:d3:45:18:8d:94:79:13:52:
         b5:19:b1:2a:48:c0:b6:cc:db:aa:31:40:cf:9b:de:fb:a8:82:
         08:e5:b3:e6:ec:74:08:2a:b4:63:df:68:ae:e4:68:26:4e:0a:
         93:c6:fb:8d:4b:16:61:8c:29:1e:ee:dc:24:80:29:fd:91:c7:
         74:07:46:a8:d5:ea:5a:01:d4:51:78:46:d3:3d:7c:d7:e6:69:
         67:80:78:93:6f:81:bb:3b:19:7c:eb:51:3d:3f:8b:b1:f4:7f:
         e0:86:53:82:88:49:48:a6:d5:47:fd:ba:cd:fc:2a:88:b2:b6:
         5d:67:36:c6:e6:f7:2c:2e:bf:df:56:66:88:b6:c6:d5:fb:52:
         20:93:3f:43:94:c9:b8:24:45:a7:a7:01:a7:ff:eb:59:41:df:
         69:d1:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----