Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.cer
File:                     9vZ3eI9p-0TNB4BMM6lmDz5_W-E.cer (raw, json)
Hash identifier:          ruvL+QuMpBRtfzEGzZFBS+MYO1IZqgZBB6sMUoScAR0=
Subject key identifier:   F6:F6:77:78:8F:69:FB:44:CD:07:80:4C:33:A9:66:0F:3E:7F:5B:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018E34
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Mar 2023 03:48:58 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 139702
                          IP: 103.162.86.0/23
                          IP: 2001:df5:ea80::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101940 (0x18e34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 03:48:58 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=A9188CFF/serialNumber=F6F677788F69FB44CD07804C33A9660F3E7F5BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:0f:d1:c5:70:11:b6:8f:4b:6f:b0:eb:14:
                    8d:d9:ab:1b:0a:e8:ef:05:93:8a:25:53:4a:6b:df:
                    e6:e7:a0:1e:93:ce:2a:3b:30:15:e6:e4:de:f3:ec:
                    a4:7d:7f:d4:f7:34:99:48:a3:33:cd:df:f4:77:dd:
                    ab:89:4a:f3:1d:9c:4d:3f:aa:25:6f:34:c2:19:e2:
                    90:37:9a:8e:1d:85:3e:b4:41:88:f2:6b:e1:48:fa:
                    73:59:19:2a:57:fa:37:83:50:50:ba:7b:50:ce:f6:
                    0d:37:93:d0:5a:b1:37:fd:3b:99:a2:51:35:7e:c0:
                    51:f9:0d:42:22:10:92:2a:bd:7b:5b:44:7d:81:68:
                    d9:61:5b:ce:9f:b7:3a:45:7f:ee:74:64:17:24:23:
                    f5:97:ec:09:a8:c3:c4:f4:b7:e0:e1:94:ab:6f:83:
                    7f:f2:28:e7:f8:26:6b:17:be:7c:ee:33:f9:c2:24:
                    a6:f9:c1:06:1b:43:b7:9e:9f:be:3f:3b:13:be:03:
                    fd:0c:2b:b4:e5:85:be:df:6a:4e:1a:fd:35:f5:bd:
                    f4:13:17:fc:4c:b7:77:4b:fd:ca:dc:4e:86:b6:06:
                    4d:cc:19:2c:cf:e5:81:71:4e:69:ed:38:c0:45:b5:
                    bc:76:97:9e:a7:32:33:73:e1:b5:44:c2:12:42:45:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F6:77:78:8F:69:FB:44:CD:07:80:4C:33:A9:66:0F:3E:7F:5B:E1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139702

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.86.0/23
                IPv6:
                  2001:df5:ea80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:ab:3d:c4:f4:6b:b5:53:37:65:9c:8d:c8:43:85:33:cd:
         ab:db:48:63:2c:62:81:8e:3b:14:4c:0b:01:20:d2:f9:bd:b2:
         1d:ff:4f:45:f3:4f:77:b9:39:4c:ae:fe:53:86:5e:ff:eb:8a:
         4c:1b:a9:9a:1c:a3:43:25:4f:8b:ef:77:6d:a3:fd:df:80:87:
         d0:aa:e2:86:32:f4:9d:8d:33:98:64:e4:04:6e:1e:9a:5f:9b:
         c3:98:e1:c1:39:8c:13:59:55:ac:9a:b4:31:0c:c0:5c:1c:bc:
         0c:d0:fc:37:99:c7:27:53:2b:40:d2:05:b5:3d:53:ee:72:4c:
         6a:1c:6f:18:dc:59:d6:4f:12:8e:46:9d:69:bb:5b:b6:a5:bf:
         49:89:2b:84:0f:e5:90:df:33:5b:6a:84:f5:14:51:03:a2:53:
         12:17:b8:2a:97:51:99:86:60:e7:c5:a7:d2:39:44:4e:14:fc:
         f4:62:13:ce:01:c5:22:39:28:1c:2b:eb:5d:59:49:d0:85:a5:
         3e:9f:9b:9f:6f:1c:37:44:34:c0:75:aa:45:ba:02:92:ca:a0:
         12:44:1b:88:db:ed:40:17:10:01:fd:a6:da:90:e0:f7:fe:a1:
         88:be:0b:7e:c0:de:c4:a5:b2:ec:5b:dd:48:16:71:76:77:68:
         5e:c8:6d:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----