Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XMePuUbJx1HApFSVHf2dnin2KU.cer
File:                     4XMePuUbJx1HApFSVHf2dnin2KU.cer (raw, json)
Hash identifier:          v8fBF8bgG1RPUoQ1vQ8TLL+oNpczjpDmOCpDIqYd90I=
Subject key identifier:   E1:73:1E:3E:E5:1B:27:1D:47:02:91:52:54:77:F6:76:78:A7:D8:A5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014719
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F4FDA/A6AB290075B811EBAEF85118C4F9AE02/4XMePuUbJx1HApFSVHf2dnin2KU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F4FDA/A6AB290075B811EBAEF85118C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Mar 2022 01:35:05 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 141730
                          IP: 103.161.0.0/24
                          IP: 2001:df5:b080::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83737 (0x14719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 01:35:05 2022 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A91F4FDA/serialNumber=E1731E3EE51B271D470291525477F67678A7D8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:07:10:31:3b:f2:bc:07:77:08:f2:70:59:
                    ed:3c:f6:f0:c3:1b:1a:2f:bf:10:0a:8c:d1:84:21:
                    9d:86:dc:40:6a:4a:6c:d5:18:71:ce:ba:d8:38:b6:
                    e8:bd:7e:9a:fb:3e:6c:64:cb:b9:14:c0:c6:03:54:
                    4f:a7:be:b6:45:79:b6:65:ab:ad:b9:da:28:be:8a:
                    cb:89:29:18:15:bc:a9:b7:ed:80:4e:c8:58:f3:ca:
                    b9:75:e4:18:28:27:25:20:8a:9c:b5:3f:c8:5b:5f:
                    7c:f0:35:cb:a9:bd:6b:38:4f:e5:82:01:3d:6f:aa:
                    e2:42:e7:1f:fb:48:4d:2a:8a:5c:48:18:9d:59:b9:
                    cf:b3:99:11:8e:eb:4a:67:bf:b2:c8:0f:19:70:77:
                    45:17:88:43:4c:01:eb:66:12:8b:38:47:4f:11:d2:
                    8c:8b:93:55:1c:92:6e:69:fa:3a:8f:ac:b3:ff:8b:
                    7f:db:69:da:68:1c:9c:5a:97:fd:25:a2:88:2b:3f:
                    02:2b:24:74:07:d1:83:b1:c8:e7:19:34:d0:c0:ed:
                    e7:c7:8b:3f:88:69:cf:a8:3a:ca:63:75:de:a2:c2:
                    18:47:5b:a8:1e:35:8f:d5:ad:5d:de:f4:3e:6a:42:
                    dd:93:d5:da:7e:89:47:c5:93:e3:50:1b:20:2b:e9:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:1E:3E:E5:1B:27:1D:47:02:91:52:54:77:F6:76:78:A7:D8:A5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4FDA/A6AB290075B811EBAEF85118C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4FDA/A6AB290075B811EBAEF85118C4F9AE02/4XMePuUbJx1HApFSVHf2dnin2KU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141730

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.0.0/24
                IPv6:
                  2001:df5:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         da:05:bd:5d:4c:06:ac:05:37:e5:42:85:a1:9f:1b:c5:89:38:
         e5:c3:4a:96:d6:02:a5:0c:29:29:f6:f3:68:c7:93:97:25:a1:
         df:ae:ce:66:29:e5:43:19:a8:59:58:ae:8f:a9:e4:de:21:43:
         a6:47:5f:2a:fb:d6:25:35:65:e9:45:8b:6c:06:8b:96:b7:b2:
         61:8f:e4:a4:0d:e3:7c:6d:b6:b8:bd:19:73:5d:99:eb:42:56:
         06:fc:fe:b6:e1:87:4d:04:1b:f7:6a:57:b0:1f:d3:2a:db:d7:
         ff:30:c4:43:26:21:83:41:84:24:ca:5c:ef:5f:b0:55:54:3a:
         60:43:17:d1:40:65:19:ee:15:96:b8:33:d9:db:07:e5:99:1d:
         42:a2:63:61:51:b3:bf:11:7e:ae:62:ea:d9:a2:fe:37:5d:df:
         99:00:9f:ce:50:01:e1:a1:52:b5:fa:c0:8f:7e:37:33:a7:84:
         d0:fc:fb:7e:75:9f:3d:0f:9b:96:b8:c4:82:2b:ec:be:16:ad:
         05:27:49:f8:cb:a5:28:0d:67:b9:5b:6d:48:98:0f:a6:f6:32:
         1e:92:17:c3:5a:41:5d:c4:91:f1:22:31:39:e8:ba:ec:e7:a0:
         36:06:d1:be:d8:63:50:6b:d5:b2:2e:3f:82:e1:d6:91:44:97:
         20:42:82:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----