Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-gqxRhAw-7iGhYYoeWyIr1tsu8.cer
File:                     9-gqxRhAw-7iGhYYoeWyIr1tsu8.cer (raw, json)
Hash identifier:          N1owsMTCeBYRE0peVMtnPzENz8+mqyEbX90fFWNx5cA=
Subject key identifier:   F7:E8:2A:C5:18:40:C3:EE:E2:1A:16:18:A1:E5:B2:22:BD:6D:B2:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0150C3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7B28/36933B0656EC11ECB40B5025C4F9AE02/9-gqxRhAw-7iGhYYoeWyIr1tsu8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7B28/36933B0656EC11ECB40B5025C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 22 Apr 2022 04:19:00 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 45876
                          AS: 134123
                          IP: 111.235.140.0/22
                          IP: 125.254.60.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86211 (0x150c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 22 04:19:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=A91C7B28/serialNumber=F7E82AC51840C3EEE21A1618A1E5B222BD6DB2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:d9:55:ca:77:02:fe:2e:36:dd:01:9e:4d:
                    22:64:3b:52:77:40:e6:e5:85:ed:de:15:e0:88:d3:
                    11:92:5c:34:a9:12:3d:87:fb:cc:7e:b9:c2:4b:18:
                    1d:11:84:d6:86:a3:a8:d4:5b:f3:fa:ca:2a:d5:db:
                    6b:ac:05:57:2b:27:f3:5d:aa:56:e6:66:bc:14:9f:
                    2a:16:36:ec:86:38:21:40:9d:65:0c:be:2c:f2:ad:
                    f7:22:eb:32:a7:f6:73:29:34:e5:0b:11:d5:02:f9:
                    53:35:1b:2e:c0:7c:fa:a4:ea:05:25:a1:08:56:ce:
                    2f:b6:79:96:b0:77:b2:85:d6:2a:b5:6d:a0:86:e7:
                    bc:70:9c:7b:85:42:25:c7:36:a9:fa:5c:07:bd:16:
                    a5:76:f3:68:db:07:08:45:eb:73:35:89:5d:2a:8e:
                    dd:bf:2d:23:a7:7f:1a:67:a0:1d:6d:22:3d:89:2c:
                    29:aa:54:ef:f8:3b:dc:4f:f6:94:58:1a:f1:c1:48:
                    f6:31:58:9c:bd:9e:ab:46:9f:35:73:2a:81:92:a1:
                    2a:9d:27:24:95:4a:e2:26:1e:25:36:25:bb:68:46:
                    04:d1:81:2b:a8:ba:95:c4:58:a0:bb:f7:a4:c5:6d:
                    00:f9:7e:f3:cb:54:e6:8e:df:0e:87:85:31:7c:ff:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E8:2A:C5:18:40:C3:EE:E2:1A:16:18:A1:E5:B2:22:BD:6D:B2:EF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7B28/36933B0656EC11ECB40B5025C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7B28/36933B0656EC11ECB40B5025C4F9AE02/9-gqxRhAw-7iGhYYoeWyIr1tsu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45876
                  134123

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.140.0/22
                  125.254.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:0c:74:97:c5:34:d4:eb:c5:84:c0:95:ea:db:18:15:13:aa:
         6c:09:44:f1:52:63:17:b6:b3:2d:f3:49:d8:33:aa:46:06:6e:
         47:f5:41:ba:c5:4f:19:25:28:13:7d:3b:1e:8a:26:25:2b:e5:
         e9:9a:73:ac:af:ae:30:e4:3c:b1:48:b1:54:e7:0c:65:9f:95:
         d5:3f:70:4b:1a:38:e8:ed:fb:d5:af:dd:b6:7d:d1:8c:f5:d7:
         6b:a9:99:91:17:21:14:3a:f4:f4:a7:54:75:4f:6f:5d:d3:8e:
         02:5a:46:30:6c:01:aa:02:be:8e:f3:b3:30:70:a6:78:53:4f:
         47:4f:a1:0b:06:77:76:cc:52:26:29:9f:08:ab:25:78:20:b1:
         94:9c:cb:fa:8c:90:b2:65:81:eb:65:68:4b:e6:0c:8a:c4:08:
         b5:df:82:94:04:04:6d:d1:f7:b5:4f:a6:ee:e7:29:c7:f5:18:
         e4:fd:eb:93:eb:7d:11:7a:c9:c0:a5:5f:fa:23:d1:40:31:47:
         51:28:21:3f:37:11:d0:29:44:90:e4:32:76:00:bf:c1:69:b4:
         66:a6:39:ab:c0:24:e2:7e:50:2c:ac:17:a0:c5:1e:44:24:25:
         cd:48:12:1e:66:2b:91:04:9c:6a:ba:42:44:e1:b3:8e:8e:a6:
         84:a2:2d:1c
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgIDAVDDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDQyMjA0MTkwMFoXDTIzMDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzdCMjgxMTAvBgNVBAUTKEY3RTgyQUM1MTg0MEMzRUVFMjFBMTYx
OEExRTVCMjIyQkQ2REIyRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqotlVyncC/i423QGeTSJkO1J3QOblhe3eFeCI0xGSXDSpEj2H+8x+ucJLGB0R
hNaGo6jUW/P6yirV22usBVcrJ/NdqlbmZrwUnyoWNuyGOCFAnWUMvizyrfci6zKn
9nMpNOULEdUC+VM1Gy7AfPqk6gUloQhWzi+2eZawd7KF1iq1baCG57xwnHuFQiXH
Nqn6XAe9FqV282jbBwhF63M1iV0qjt2/LSOnfxpnoB1tIj2JLCmqVO/4O9xP9pRY
GvHBSPYxWJy9nqtGnzVzKoGSoSqdJySVSuImHiU2JbtoRgTRgSuoupXEWKC796TF
bQD5fvPLVOaO3w6HhTF8/+75AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU9+gqxRhA
w+7iGhYYoeWyIr1tsu8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM3QjI4LzM2OTMzQjA2NTZFQzExRUNCNDBCNTAyNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDN0IyOC8zNjkzM0IwNjU2RUMxMUVDQjQwQjUwMjVDNEY5QUUwMi85LWdxeFJo
QXctN2lHaFlZb2VXeUlyMXRzdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDALM0AgMCC+swJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJv64wD
BAJ9/jwwDQYJKoZIhvcNAQELBQADggEBACEMdJfFNNTrxYTAlerbGBUTqmwJRPFS
Yxe2sy3zSdgzqkYGbkf1QbrFTxklKBN9Ox6KJiUr5emac6yvrjDkPLFIsVTnDGWf
ldU/cEsaOOjt+9Wv3bZ90Yz112upmZEXIRQ69PSnVHVPb13TjgJaRjBsAaoCvo7z
szBwpnhTT0dPoQsGd3bMUiYpnwirJXggsZScy/qMkLJlgetlaEvmDIrECLXfgpQE
BG3R97VPpu7nKcf1GOT965PrfRF6ycClX/oj0UAxR1EoIT83EdApRJDkMnYAv8Fp
tGamOavAJOJ+UCysF6DFHkQkJc1IEh5mK5EEnGq6QkThs46OpoSiLRw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-ams.rpki-client.org