Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wvmIe9g7Zbhs8pGu_F722pny44.cer
File:                     2wvmIe9g7Zbhs8pGu_F722pny44.cer (raw, json)
Hash identifier:          GQpqZgEIg989KuPVX2ETXZ0ywJGADaiZjzwQLaoY6sI=
Subject key identifier:   DB:0B:E6:21:EF:60:ED:96:E1:B3:CA:46:BB:F1:7B:DB:6A:67:CB:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013EA3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BFB49/FA2DFE1AC50C11EB86C6585AC4F9AE02/2wvmIe9g7Zbhs8pGu_F722pny44.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BFB49/FA2DFE1AC50C11EB86C6585AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 09 Jan 2022 14:33:54 +0000
Certificate not after:    Thu 02 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 103.244.88.0/22
                          IP: 116.206.176.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81571 (0x13ea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  9 14:33:54 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91BFB49/serialNumber=DB0BE621EF60ED96E1B3CA46BBF17BDB6A67CB8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:8d:d2:c9:eb:1d:99:b8:86:e2:4b:c7:d1:
                    0e:d8:e4:c4:37:ff:be:57:44:a7:01:c8:ca:74:ed:
                    dc:af:cb:2e:e5:3f:16:51:3d:42:49:84:7a:23:e8:
                    4e:d4:d6:f6:e3:f2:1b:b4:27:08:ae:d3:7a:dc:7a:
                    4d:50:5e:13:f5:25:c3:20:7d:c1:31:8c:64:98:f5:
                    b0:b1:3c:ea:1f:4d:b7:39:3c:1b:60:74:65:82:96:
                    eb:0d:de:12:94:73:91:61:e1:d7:b9:e8:7e:f1:13:
                    06:17:82:3e:29:00:d1:ea:5b:6f:0b:7f:ba:9b:db:
                    74:0e:94:8a:21:4a:23:32:4a:8e:19:73:9b:d4:52:
                    13:be:2a:60:8c:0c:69:e6:8e:52:aa:bb:e3:7d:3d:
                    74:49:54:ba:d2:be:3c:e9:ac:5c:b3:42:96:61:9a:
                    46:f8:0b:29:df:96:4a:48:36:9e:ba:76:83:63:e4:
                    b7:d8:c8:a6:16:3f:71:cf:7b:53:32:16:d4:bf:63:
                    1a:f6:eb:d9:e3:79:af:26:5a:8b:7f:88:3d:1a:9a:
                    d0:b3:2f:53:50:ab:28:ec:45:77:a3:53:bd:91:36:
                    38:a9:a9:9b:54:4a:1a:01:70:7f:45:e5:1a:d4:8d:
                    fa:9d:53:20:98:e5:41:f8:b3:10:36:b4:65:36:7b:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0B:E6:21:EF:60:ED:96:E1:B3:CA:46:BB:F1:7B:DB:6A:67:CB:8E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFB49/FA2DFE1AC50C11EB86C6585AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFB49/FA2DFE1AC50C11EB86C6585AC4F9AE02/2wvmIe9g7Zbhs8pGu_F722pny44.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.88.0/22
                  116.206.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:12:07:25:d2:5f:34:06:a9:40:72:db:ee:90:9e:1d:c0:
         57:43:41:29:eb:40:5f:73:85:8b:40:ee:5f:53:b7:1b:e2:1a:
         d9:92:1b:57:5f:f7:48:33:ff:53:ab:f6:23:22:7a:b0:19:6f:
         04:df:ee:cf:83:70:c8:f7:66:0b:b7:93:89:14:2e:af:f1:52:
         fd:6e:12:fd:5a:cf:b5:df:89:52:19:24:b3:3b:d0:4b:ef:96:
         04:ec:a4:9c:24:ba:3a:16:31:cc:47:f4:4e:af:09:87:ef:bb:
         df:9e:7d:8b:c8:da:72:43:6c:c1:0c:9f:ba:f6:5a:21:9f:6c:
         3d:8e:d7:d8:fb:59:d9:bc:ae:04:55:96:a9:c8:e9:d6:97:12:
         8e:28:e9:19:f2:52:85:b5:7c:55:6e:bf:73:c0:c7:26:28:67:
         ae:87:45:a9:f0:db:d2:56:f5:21:92:a5:8c:f5:4a:82:ed:34:
         7b:83:0c:8e:ff:6c:65:ca:5f:92:1b:9b:01:12:ea:a2:9c:63:
         af:57:e9:e0:0d:d9:45:af:18:54:e3:29:3c:f1:68:d0:57:c4:
         30:6a:44:f0:25:7b:d8:3b:31:90:26:24:78:56:32:a2:47:f8:
         c4:af:12:16:b5:2d:83:7f:8a:d9:df:36:b1:56:33:d5:25:9d:
         71:79:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org