Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rnuV2uYJvqqqkVKOVMrkR8RSfs.cer
File:                     0rnuV2uYJvqqqkVKOVMrkR8RSfs.cer (raw, json)
Hash identifier:          gKCfffKrAyOuv5vHWHvv11SQby0QePW6B5UsnaM1EAk=
Subject key identifier:   D2:B9:EE:57:6B:98:26:FA:AA:AA:45:4A:39:53:2B:91:1F:11:49:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B9E4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911AE11/17D9DC34D7AA11E8AB1F9944C4F9AE02/0rnuV2uYJvqqqkVKOVMrkR8RSfs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911AE11/17D9DC34D7AA11E8AB1F9944C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 17:37:41 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 136769
                          IP: 2001:df1:b500::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113124 (0x1b9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 30 17:37:41 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A911AE11/serialNumber=D2B9EE576B9826FAAAAA454A39532B911F1149FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:74:81:59:ac:1c:c4:62:c0:5d:05:d0:56:
                    a0:47:96:a6:88:6f:a7:d9:e7:25:e8:e6:a8:02:d8:
                    b2:5b:3e:f4:9e:da:27:43:28:33:54:31:9d:18:fc:
                    fa:ff:ca:50:22:1e:36:74:70:09:92:23:f7:20:18:
                    54:42:50:27:2d:a5:e2:4a:5a:8a:9b:eb:0e:d6:1c:
                    b7:4a:20:3e:f2:0a:85:81:ab:62:15:b7:b2:72:f4:
                    aa:04:51:73:80:d9:1b:55:db:58:50:62:1e:f7:e4:
                    03:3b:2b:f1:33:34:4d:c8:3a:b9:7c:d4:fd:89:9f:
                    17:69:96:8b:50:00:7a:87:87:91:bb:db:b0:29:a7:
                    f8:01:d4:45:ff:20:41:ff:b2:1f:62:1a:7b:51:53:
                    44:16:14:cf:97:0e:a9:a8:8c:a3:64:b9:1b:2f:e7:
                    0c:38:95:9d:a1:ea:59:19:5c:df:10:00:05:5e:8e:
                    42:28:11:c9:26:8a:31:37:74:ca:fd:2d:a1:78:01:
                    11:9e:f0:e8:c2:bb:25:7c:5f:4f:5b:1f:fc:66:b8:
                    22:c5:44:44:68:a6:29:9b:55:99:31:6c:0b:a8:fb:
                    92:52:76:3f:1e:fd:23:84:b2:cc:67:2a:4a:59:d6:
                    79:88:3f:5c:78:f4:fa:53:e5:92:ba:76:b9:03:27:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B9:EE:57:6B:98:26:FA:AA:AA:45:4A:39:53:2B:91:1F:11:49:FB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911AE11/17D9DC34D7AA11E8AB1F9944C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911AE11/17D9DC34D7AA11E8AB1F9944C4F9AE02/0rnuV2uYJvqqqkVKOVMrkR8RSfs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136769

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:b500::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:71:d5:55:94:ef:77:fb:43:e8:d5:0a:5d:2f:7d:a8:30:d4:
         9e:f6:92:3d:61:63:7a:ec:ca:06:fc:c5:79:33:d0:71:7a:8c:
         9e:f5:e1:f6:5e:4a:4c:e9:03:d2:24:d8:b3:7a:5a:44:7c:e5:
         e6:85:fc:17:71:5a:0e:b9:04:e6:c4:43:ab:86:71:53:bf:39:
         63:a9:e1:e8:06:f9:6e:62:92:97:5d:76:d3:be:54:29:d8:bd:
         5f:0c:17:53:2d:97:4b:38:b4:0d:d5:ab:8a:30:8c:1a:27:c6:
         03:fa:ae:38:f6:f9:d9:c6:33:e9:04:19:24:b9:8f:60:ad:f3:
         34:12:51:21:74:38:65:59:4b:39:df:e1:da:36:fb:75:b8:71:
         db:d0:f4:00:3c:e9:33:97:5b:7e:c1:b4:90:4f:8e:10:52:47:
         1c:a3:2f:ae:68:55:de:c5:77:65:51:97:58:8b:3c:35:43:18:
         73:bf:ad:6e:d0:5b:87:94:71:b6:8f:33:2f:9f:e6:9b:49:d1:
         59:20:95:d2:f8:29:3a:9e:fb:88:85:17:62:27:1c:a0:c4:89:
         78:7d:70:f9:5f:40:67:ea:ee:20:ba:61:53:87:f3:5c:e5:8e:
         81:53:68:99:0e:8e:f5:61:a2:cc:08:3c:ed:ad:5f:7d:18:12:
         5e:8e:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----