Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/944YPQBWySvHDDtApkl3pBKA7zM.cer
File:                     944YPQBWySvHDDtApkl3pBKA7zM.cer (raw, json)
Hash identifier:          sJE54MLYuJkScxRk6cBv/pTwQYE7NnOmiIUF+DU7NjA=
Subject key identifier:   F7:8E:18:3D:00:56:C9:2B:C7:0C:3B:40:A6:49:77:A4:12:80:EF:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014E82
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918806F/B21E0C986F4A11E8B627496CC4F9AE02/944YPQBWySvHDDtApkl3pBKA7zM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918806F/B21E0C986F4A11E8B627496CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 06 Apr 2022 03:22:28 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 58588
                          IP: 43.224.76.0/22
                          IP: 103.8.172.0/22
                          IP: 2403:b300::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85634 (0x14e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  6 03:22:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=A918806F/serialNumber=F78E183D0056C92BC70C3B40A64977A41280EF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:04:09:22:11:66:81:e4:1a:2a:b6:8c:2f:
                    fc:c6:4c:ae:6b:94:ed:0a:42:48:bf:db:55:c0:11:
                    fc:6f:65:0c:dd:96:21:82:43:f3:2c:24:19:c4:76:
                    f8:4d:0f:fb:c0:b5:26:16:2c:8c:1f:54:b6:00:48:
                    9b:a2:74:f5:21:22:a3:4d:b7:c8:6f:f4:7a:02:25:
                    3b:1c:90:8a:a5:36:ad:b0:8d:54:ba:dc:64:21:1e:
                    dd:ed:de:34:bb:a7:c6:ca:3b:16:07:f5:81:98:da:
                    04:a6:cb:01:80:76:9d:40:e0:e4:7e:88:25:fb:30:
                    21:46:42:4f:f0:c9:87:3c:51:50:5f:8a:1f:75:1f:
                    93:4f:d0:35:31:58:e3:34:44:f0:1e:3b:db:ef:6e:
                    86:8e:59:69:4e:dc:ed:17:5f:32:f9:cf:33:91:95:
                    02:e0:5a:9f:2f:04:56:27:78:f8:00:8b:ba:6e:94:
                    e7:2d:4b:f2:22:44:c9:12:51:46:cf:a3:bf:b3:b8:
                    f9:ef:6c:11:31:9e:d5:8a:d1:b0:2a:7c:9b:f7:ee:
                    dd:a9:aa:a0:27:2b:b7:4b:0e:fb:91:dd:7c:c8:24:
                    57:1d:8e:7b:d1:91:c1:d0:66:1f:63:83:42:5c:d6:
                    d9:9a:17:1d:18:6b:da:00:2c:f7:20:98:b0:ed:b3:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:18:3D:00:56:C9:2B:C7:0C:3B:40:A6:49:77:A4:12:80:EF:33
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918806F/B21E0C986F4A11E8B627496CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918806F/B21E0C986F4A11E8B627496CC4F9AE02/944YPQBWySvHDDtApkl3pBKA7zM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58588

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.76.0/22
                  103.8.172.0/22
                IPv6:
                  2403:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:74:c5:aa:db:4b:b2:13:ba:e1:7f:a2:35:ab:eb:a7:59:38:
         33:af:5a:d9:46:6f:8d:77:c4:4e:ea:c5:9e:7f:81:d3:5b:fa:
         77:0d:75:ce:89:97:4f:5c:c3:20:0e:41:5f:6a:16:fd:b7:54:
         88:c4:83:c3:d4:38:30:c5:10:2d:8e:70:88:82:35:02:7d:b3:
         5b:ac:db:ea:83:56:a7:a4:6d:8b:be:87:a2:ef:9f:af:6a:88:
         53:1d:87:66:cc:fe:22:95:56:fc:77:81:8a:1d:c4:8a:dd:2a:
         86:38:ae:70:c7:7a:3e:5a:12:3a:2c:ef:2c:47:51:5c:72:64:
         91:1e:f5:3e:3c:66:ba:e3:c4:e9:27:d1:0f:89:41:0b:7d:88:
         86:a6:b8:a4:a3:fc:52:d9:14:22:eb:cf:3d:93:1b:47:e0:65:
         1d:e5:a5:53:17:30:e9:4e:7f:9d:53:f3:9a:06:76:a0:89:ac:
         42:9b:6e:b9:a5:bb:f8:88:09:c1:d0:39:b6:af:69:62:83:ea:
         79:65:d4:a2:51:fc:4f:f7:70:2f:a8:f9:5c:ef:77:0a:a6:28:
         63:82:c6:1d:ce:e7:f6:a8:66:3e:71:51:e0:45:46:16:b4:1c:
         f8:ac:a6:73:87:cd:49:72:db:e6:8a:22:88:e4:67:99:8f:32:
         e7:bd:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----