Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bLIIPU2k1pB7p1jYe5d0M5GfIc.cer
File:                     8bLIIPU2k1pB7p1jYe5d0M5GfIc.cer (raw, json)
Hash identifier:          NEJtvllsl7abPCUc9o46pC/bfAk365fxvKHH6lh3yG0=
Subject key identifier:   F1:B2:C8:20:F5:36:93:5A:41:EE:9D:63:61:EE:5D:D0:CE:46:7C:87
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       017535
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913856D/237C80F4440311EDA06EE133C4F9AE02/8bLIIPU2k1pB7p1jYe5d0M5GfIc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913856D/237C80F4440311EDA06EE133C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 26 Oct 2022 06:01:22 +0000
Certificate not after:    Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2402:50c0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95541 (0x17535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 26 06:01:22 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=A913856D/serialNumber=F1B2C820F536935A41EE9D6361EE5DD0CE467C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:74:71:6e:54:b2:8c:4d:6b:ea:01:c4:ca:
                    32:70:b4:b7:da:ff:d9:e2:0e:ac:92:63:e1:b3:35:
                    0e:a3:2f:17:be:fc:cc:18:22:9b:fc:23:36:e3:96:
                    58:79:06:7e:bd:71:56:1e:a8:c1:4a:2c:53:ef:e5:
                    77:5b:9b:18:a1:33:04:85:23:5d:fe:92:83:fe:b8:
                    f0:b3:a8:f8:c1:a5:90:cb:ed:9f:29:cb:fd:b4:c2:
                    0b:37:93:69:f5:13:62:c7:f2:41:13:7e:75:1b:65:
                    5e:62:43:35:9f:db:5a:19:a8:04:42:ed:4e:35:53:
                    9b:98:18:4b:75:5a:8b:b6:f3:41:3f:79:43:92:d3:
                    eb:22:ff:5f:91:37:50:ce:53:8d:47:f0:8e:bb:04:
                    d9:6a:5c:bc:9f:10:e2:81:df:b4:f5:86:c8:f0:4d:
                    c2:3c:7a:57:d7:6f:f7:ce:1a:86:f7:1f:f9:b0:0b:
                    33:5a:de:37:c4:49:83:70:74:bf:13:7b:9a:3e:7c:
                    16:98:bb:02:40:70:25:82:96:55:ca:a6:ed:a6:ea:
                    75:76:5d:46:96:0d:e8:57:ae:b5:3f:e4:a6:ae:8a:
                    ad:2e:3a:83:02:5e:cd:80:51:cf:a4:dc:21:56:90:
                    61:a3:a8:cf:ca:60:3d:12:f4:01:ad:d4:81:8d:83:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B2:C8:20:F5:36:93:5A:41:EE:9D:63:61:EE:5D:D0:CE:46:7C:87
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913856D/237C80F4440311EDA06EE133C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913856D/237C80F4440311EDA06EE133C4F9AE02/8bLIIPU2k1pB7p1jYe5d0M5GfIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:50c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:05:84:3d:8d:df:5e:11:c4:fb:f4:e6:87:b9:ad:17:d2:
         39:5b:b6:c0:32:fd:be:15:d8:d9:fd:31:3b:ea:f3:84:e8:61:
         f8:77:23:f3:56:06:43:69:01:e0:43:37:61:87:4b:0d:66:af:
         27:ab:92:a3:fd:f3:ba:da:a2:27:26:0c:af:12:00:9e:5b:a1:
         eb:32:8f:e9:61:4a:84:c2:4f:eb:ce:e7:b6:ec:66:d3:b1:23:
         ae:3f:90:bc:5a:69:a9:d9:01:b2:2e:22:96:cb:a1:1d:b3:3c:
         2b:23:c2:b8:d6:eb:5a:da:43:41:a9:e0:96:9f:52:9c:9a:8a:
         a5:51:89:78:29:32:db:bc:43:7b:06:d7:59:ed:b2:c0:ed:f6:
         95:21:33:e1:26:f3:8b:fe:15:fd:eb:0f:0d:ca:a3:4b:b6:a2:
         60:20:78:c8:1f:4e:02:f7:a4:75:fe:b8:4f:07:49:27:a9:56:
         1d:2d:cc:0a:ed:28:b9:ec:48:47:a0:70:e5:b9:6a:4c:2f:7f:
         b3:0f:b9:c9:ba:73:3d:cb:9c:31:56:f0:f4:b1:98:cd:58:49:
         33:78:b1:83:0d:c7:42:88:71:3d:94:a8:1d:77:68:b5:a2:9a:
         7d:5a:1f:ae:d0:29:3a:5d:e2:9d:89:51:af:73:02:85:5d:3c:
         3d:79:6b:5a
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDAXU1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMTAyNjA2MDEyMloXDTIzMDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzg1NkQxMTAvBgNVBAUTKEYxQjJDODIwRjUzNjkzNUE0MUVFOUQ2
MzYxRUU1REQwQ0U0NjdDODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPvnRxblSyjE1r6gHEyjJwtLfa/9niDqySY+GzNQ6jLxe+/MwYIpv8Izbjllh5
Bn69cVYeqMFKLFPv5XdbmxihMwSFI13+koP+uPCzqPjBpZDL7Z8py/20wgs3k2n1
E2LH8kETfnUbZV5iQzWf21oZqARC7U41U5uYGEt1Wou280E/eUOS0+si/1+RN1DO
U41H8I67BNlqXLyfEOKB37T1hsjwTcI8elfXb/fOGob3H/mwCzNa3jfESYNwdL8T
e5o+fBaYuwJAcCWCllXKpu2m6nV2XUaWDehXrrU/5Kauiq0uOoMCXs2AUc+k3CFW
kGGjqM/KYD0S9AGt1IGNg2ifAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQU8bLIIPU2
k1pB7p1jYe5d0M5GfIcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM4NTZELzIzN0M4MEY0NDQwMzExRURBMDZFRTEzM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzODU2RC8yMzdDODBGNDQ0MDMxMUVEQTA2RUUxMzNDNEY5QUUwMi84YkxJSVBV
MmsxcEI3cDFqWWU1ZDBNNUdmSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkAlDAMA0GCSqGSIb3DQEBCwUAA4IBAQCY5gWEPY3fXhHE+/Tm
h7mtF9I5W7bAMv2+FdjZ/TE76vOE6GH4dyPzVgZDaQHgQzdhh0sNZq8nq5Kj/fO6
2qInJgyvEgCeW6HrMo/pYUqEwk/rzue27GbTsSOuP5C8Wmmp2QGyLiKWy6Edszwr
I8K41uta2kNBqeCWn1KcmoqlUYl4KTLbvEN7BtdZ7bLA7faVITPhJvOL/hX96w8N
yqNLtqJgIHjIH04C96R1/rhPB0knqVYdLcwK7Si57EhHoHDluWpML3+zD7nJunM9
y5wxVvD0sZjNWEkzeLGDDcdCiHE9lKgdd2i1opp9Wh+u0Ck6XeKdiVGvcwKFXTw9
eWta
-----END CERTIFICATE-----