Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TcHBTZTTZxH3NUHZbyi6kCuEas.cer
File:                     7TcHBTZTTZxH3NUHZbyi6kCuEas.cer (raw, json)
Hash identifier:          mzopjyA8P9n2htxiZ7L6xCUOaWKcZmvy4KEr0qh2aus=
Subject key identifier:   ED:37:07:05:36:53:4D:9C:47:DC:D5:07:65:BC:A2:EA:40:AE:11:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0122AA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9143515/DD1385CA1D9F11E2925AB39008B02CD2/7TcHBTZTTZxH3NUHZbyi6kCuEas.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9143515/DD1385CA1D9F11E2925AB39008B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 05 Aug 2021 03:27:02 +0000
Certificate not after:    Fri 30 Sep 2022 00:00:00 +0000
Subordinate resources:    AS: 45934
                          IP: 2403:840::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74410 (0x122aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  5 03:27:02 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A9143515/serialNumber=ED37070536534D9C47DCD50765BCA2EA40AE11AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:d4:38:06:e4:43:03:db:5f:b4:30:88:a5:
                    23:ed:2b:83:db:9c:46:86:eb:91:95:a2:46:3f:32:
                    d7:c4:0f:5b:6f:02:15:05:3f:7d:d2:73:64:d0:67:
                    08:f1:59:37:82:6b:c6:18:cc:5d:8f:90:6e:fc:9c:
                    3a:04:59:b1:fd:55:91:2b:4e:3e:f8:a3:dc:1c:fd:
                    dc:c7:e6:52:fc:68:7a:8e:35:38:54:30:bf:eb:e3:
                    a7:f2:43:61:f2:d4:40:f0:fc:15:71:40:29:bb:7f:
                    c2:8a:bf:54:08:4a:81:01:96:39:f0:ab:d0:b1:84:
                    fd:5e:4e:31:17:f1:14:70:84:d8:b1:7d:db:c1:bc:
                    3f:c5:18:9e:6f:56:8e:02:e9:1e:36:cb:7c:48:31:
                    14:3d:cd:ef:4f:c8:bf:6e:3a:af:86:ea:8f:65:dd:
                    54:22:80:34:4f:f6:62:21:d8:d2:e9:86:40:70:76:
                    44:82:f5:01:cd:a1:85:94:6a:9b:88:c6:5c:7d:b5:
                    eb:65:47:60:dd:34:04:dc:9a:ae:df:9d:5a:04:42:
                    37:28:8f:e9:84:66:32:51:77:cc:c1:1c:19:07:4c:
                    8f:c7:d6:81:f1:0b:18:6e:c4:66:8a:6f:be:43:a8:
                    49:4c:cc:ea:f4:23:86:f4:a2:a5:cb:c3:23:eb:ba:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:37:07:05:36:53:4D:9C:47:DC:D5:07:65:BC:A2:EA:40:AE:11:AB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9143515/DD1385CA1D9F11E2925AB39008B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9143515/DD1385CA1D9F11E2925AB39008B02CD2/7TcHBTZTTZxH3NUHZbyi6kCuEas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45934

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:f7:5f:2e:4f:c2:92:30:e5:d6:1a:ef:68:c5:f9:56:17:dc:
         48:8d:d1:23:80:de:14:70:56:e9:b2:55:8a:48:87:d8:b4:0b:
         46:bf:54:e4:bd:04:d7:f5:69:8e:17:59:4d:35:f1:af:4d:ab:
         51:2e:31:45:e7:49:8b:34:99:7a:28:8b:b9:c7:0b:0d:4b:7d:
         56:aa:80:ee:2d:83:4e:0d:93:e5:9d:97:29:37:da:01:c0:e7:
         32:90:66:dd:e6:01:3e:e6:89:ff:8e:1a:47:46:ea:97:da:fb:
         8e:85:1c:2d:00:03:ce:72:72:ed:3d:9e:8d:ce:a2:ae:f9:ed:
         33:f2:40:7c:a8:b7:e0:87:9e:59:d6:7d:e8:06:dd:f7:69:9a:
         36:a0:93:be:1f:e0:db:ed:e6:ba:c3:6b:e4:ef:6f:c7:a2:8c:
         04:e3:6c:97:af:d9:64:3b:73:eb:54:4e:a3:49:2b:d5:77:9d:
         57:a6:23:77:3d:34:62:38:a7:68:59:15:0e:69:35:41:3d:e2:
         4d:fd:ab:bd:40:1f:1b:e7:2c:ea:11:fe:03:02:89:e2:9f:c3:
         4b:84:6e:43:16:20:ab:48:08:f7:72:f4:10:6d:67:52:97:62:
         7d:1f:fb:53:9a:29:a5:fa:f9:d0:c3:eb:2f:e4:67:fc:0a:4b:
         70:b0:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----