Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xIozJXQasDlgJXdBT1pO9pjs3Wo.cer
File:                     xIozJXQasDlgJXdBT1pO9pjs3Wo.cer (raw, json)
Hash identifier:          1KhFNLDpSuCiZ9ht6d/BcFdZISfRNoGsnB8pzUjoBwQ=
Subject key identifier:   C4:8A:33:25:74:1A:B0:39:60:25:77:41:4F:5A:4E:F6:98:EC:DD:6A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       435E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915DBFD/F18BC298FB7E11EC99A2D44EC4F9AE02/xIozJXQasDlgJXdBT1pO9pjs3Wo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915DBFD/F18BC298FB7E11EC99A2D44EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 Jul 2022 09:52:05 +0000
Certificate not after:    Sun 28 May 2023 00:00:00 +0000
Subordinate resources:    IP: 157.120.160.0/19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17246 (0x435e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  4 09:52:05 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=A915DBFD/serialNumber=C48A3325741AB039602577414F5A4EF698ECDD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:89:80:1c:1b:0a:78:2a:fd:08:8b:05:04:
                    ee:b1:91:95:fd:98:12:b6:ac:89:dd:89:e7:c9:d4:
                    4f:56:34:00:38:51:90:a4:5d:e0:12:f1:6a:6d:0a:
                    37:b2:4a:26:6e:ea:15:fe:18:b0:9b:88:5b:4e:87:
                    59:c6:c6:45:c2:9a:d8:e2:1b:eb:fb:54:d2:1a:39:
                    54:27:78:64:d5:89:07:ae:7a:9d:06:af:ca:8e:7d:
                    5f:0c:07:5e:e1:70:25:10:e1:85:84:ea:0e:13:24:
                    b3:a3:43:96:39:81:8e:1d:6a:99:63:45:88:5a:b4:
                    1d:b1:28:a4:75:09:86:f7:dd:b4:4d:fd:24:0d:70:
                    8a:f7:06:a4:08:af:58:ea:6b:7a:b9:b0:a6:15:c4:
                    57:37:16:a9:f6:4c:53:e3:a7:4e:fe:ee:66:6b:f6:
                    0e:d6:d0:a4:ed:30:15:d4:dc:03:de:67:d5:30:12:
                    5c:37:ab:2c:d0:fe:e5:21:b7:ce:34:07:51:5a:f6:
                    42:1b:41:5f:da:3f:9b:c2:bc:5e:1a:3c:86:3d:f5:
                    28:21:6a:ff:87:a3:5b:3e:0a:b8:91:56:ac:34:d5:
                    df:32:cd:11:0a:84:56:94:d7:52:29:67:a9:15:2c:
                    d8:b9:50:f9:f4:2a:8f:92:a5:02:18:12:7c:e3:4e:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:33:25:74:1A:B0:39:60:25:77:41:4F:5A:4E:F6:98:EC:DD:6A
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915DBFD/F18BC298FB7E11EC99A2D44EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915DBFD/F18BC298FB7E11EC99A2D44EC4F9AE02/xIozJXQasDlgJXdBT1pO9pjs3Wo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bb:23:07:74:be:3a:98:49:e2:8a:59:19:b2:50:e5:a6:3f:7a:
         0b:24:7a:63:ff:16:b0:dd:a2:c6:dd:c5:ae:57:4e:4e:f8:c4:
         54:96:96:43:5c:be:50:1f:ed:3b:24:96:94:fe:60:2d:b7:91:
         bc:75:17:f1:83:9a:29:d6:db:5f:40:58:54:8a:00:ed:5a:08:
         89:9f:85:04:ec:c5:f8:f1:f2:80:22:ed:3a:60:af:5f:fd:34:
         95:8f:fa:b0:20:45:4b:aa:5a:42:d9:06:16:3a:bf:65:40:97:
         cc:e5:2e:ce:07:e5:45:f9:04:9f:98:4a:c8:a6:6f:61:38:3a:
         2d:b2:42:12:68:25:28:bc:78:50:0f:ed:84:06:26:9f:96:53:
         3a:fd:db:00:67:49:b4:17:07:cb:37:5d:11:cf:7f:53:89:3e:
         50:76:47:d1:ef:56:37:61:23:4b:a3:8e:c9:8c:c9:6b:09:bf:
         25:50:ce:13:b1:be:e1:cb:19:44:87:50:df:29:f1:66:ac:47:
         39:d8:bd:11:23:02:e2:14:54:0d:2e:8d:da:8b:e9:ad:8c:45:
         23:49:f0:05:4b:b7:8e:a2:fa:9f:ab:df:5e:e7:a2:79:26:f0:
         7f:95:7c:9b:e7:19:99:ae:6c:08:a0:bf:5f:64:fe:42:82:cd:
         1c:b7:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----