Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xENed4U4H2xfE8QAZDH80FtCTFU.cer
File:                     xENed4U4H2xfE8QAZDH80FtCTFU.cer (raw, json)
Hash identifier:          YSjUHZITzRJXwkDwezpuP0Cfj4PPRj5Poluuk1Hu69M=
Subject key identifier:   C4:43:5E:77:85:38:1F:6C:5F:13:C4:00:64:31:FC:D0:5B:42:4C:55
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4106
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D9208/5F4F0334853A11EA88004E81C4F9AE02/xENed4U4H2xfE8QAZDH80FtCTFU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D9208/5F4F0334853A11EA88004E81C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 22 Mar 2022 22:05:22 +0000
Certificate not after:    Sun 28 May 2023 00:00:00 +0000
Subordinate resources:    IP: 130.217.0.0/16
                          IP: 192.107.171.0 -- 192.107.172.255

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16646 (0x4106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Mar 22 22:05:22 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=A91D9208/serialNumber=C4435E7785381F6C5F13C4006431FCD05B424C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:d6:47:a0:16:0d:05:ca:17:e3:c1:26:1e:
                    e7:8e:91:a7:d0:0f:27:da:f4:86:ae:11:86:04:00:
                    37:15:d9:e5:7f:00:a3:59:50:f0:7a:b4:c2:58:1e:
                    11:94:d9:15:f2:23:ce:4f:41:4f:ae:e8:27:53:31:
                    39:79:ba:1b:98:57:2a:6e:73:f4:a9:fe:d0:22:24:
                    1f:64:9e:8e:fb:9b:ac:44:95:bd:e4:59:a6:f8:4f:
                    f6:ee:39:a9:75:fa:40:3d:3b:67:96:c6:96:56:34:
                    b0:01:97:03:85:4c:f2:21:1c:07:9c:5b:08:6e:9c:
                    2b:e4:ce:ff:a2:d3:8f:e7:ce:d4:47:0f:55:cd:dc:
                    91:68:9e:22:0b:c5:1b:d6:cc:fa:3c:5c:59:43:0c:
                    78:38:04:45:f9:47:b0:b2:bf:8e:c3:ff:6b:ef:28:
                    61:c4:fd:de:a0:9b:9b:0c:2f:93:1f:0d:c8:8a:69:
                    0b:e2:21:c6:b0:06:a4:af:d6:c8:ec:39:d8:4c:6c:
                    af:6a:1c:d1:10:19:ca:58:a9:47:ce:57:b3:40:c8:
                    68:c6:0c:39:83:76:b6:e9:2a:de:1a:05:ca:a8:08:
                    1e:10:8c:22:96:7d:93:b3:86:b5:34:95:40:1f:fd:
                    7f:c8:8e:64:28:9c:e7:6f:18:65:c9:9b:bc:f9:c3:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:43:5E:77:85:38:1F:6C:5F:13:C4:00:64:31:FC:D0:5B:42:4C:55
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9208/5F4F0334853A11EA88004E81C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9208/5F4F0334853A11EA88004E81C4F9AE02/xENed4U4H2xfE8QAZDH80FtCTFU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.217.0.0/16
                  192.107.171.0-192.107.172.255

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:58:c4:19:fe:1d:81:83:60:8e:c6:63:ba:47:1e:f9:87:
         46:fb:52:49:9b:99:27:96:3b:be:03:e5:a9:a2:fa:6d:95:dd:
         d4:07:bb:a2:58:6d:e7:21:d4:fd:cf:e6:08:30:05:bd:07:5a:
         6d:a8:0a:f7:5b:8b:ee:bf:93:5d:6c:57:d1:f2:53:a4:07:bf:
         36:6f:6e:f4:1b:94:b3:d4:45:04:9e:dc:00:84:fc:36:83:7b:
         78:b4:3c:58:fc:ef:0f:24:85:10:0f:d1:20:32:da:ff:5b:0c:
         89:dd:39:64:a4:b8:4d:9a:e3:98:cb:54:34:31:5b:03:9a:82:
         9c:3f:f8:da:26:33:0d:82:63:1a:6c:84:af:25:5b:31:d3:7d:
         2e:fc:df:b4:44:7b:c6:0c:c9:40:b2:42:44:67:0a:a6:bf:f0:
         a7:52:37:49:c8:0c:d3:13:f3:29:1d:1f:1d:35:0e:5b:a5:13:
         21:47:74:ea:29:f6:5a:9e:ab:9b:e5:69:c3:1f:3a:c8:81:62:
         3e:fd:59:fb:36:9a:b9:ce:46:5c:a3:dc:55:d9:40:36:9a:05:
         08:f1:3f:1d:f1:a6:03:c8:78:d2:c3:57:33:bf:a0:13:24:5e:
         d6:90:89:fe:3d:4b:fd:aa:ee:d2:1a:f2:00:82:74:f0:2a:26:
         b2:8c:d4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----