Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AmrYass2La5sYiEkLnaNpkNROp0.cer
File:                     AmrYass2La5sYiEkLnaNpkNROp0.cer (raw, json)
Hash identifier:          Zcz0SA1E3s93CVhZ6ow+QLAN+NaRDgwR0Im3Szzjgn8=
Subject key identifier:   02:6A:D8:6A:CB:36:2D:AE:6C:62:21:24:2E:76:8D:A6:43:51:3A:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018E1E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/AmrYass2La5sYiEkLnaNpkNROp0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Mar 2023 01:12:35 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 103.178.54.0/23
                          IP: 2001:df0:34c0::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101918 (0x18e1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 01:12:35 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=A912EC9C/serialNumber=026AD86ACB362DAE6C6221242E768DA643513A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:23:fb:27:34:b1:d7:f8:2e:a4:72:bc:ff:
                    01:f1:4d:7a:10:9b:59:1f:c7:5c:34:db:ce:bc:36:
                    48:43:c5:6b:57:1f:a1:9d:fa:2c:be:5e:6a:d5:e1:
                    2b:b1:56:ac:18:03:21:12:d1:4a:6d:6a:2e:51:dd:
                    f6:44:10:e6:e7:f7:f2:c3:d8:44:66:44:b3:c6:99:
                    09:9f:e3:db:c8:68:fb:96:d2:b7:ee:62:2a:9b:d1:
                    32:4d:eb:a7:6a:96:91:06:80:fc:67:79:8f:a7:49:
                    a3:5c:0f:6a:5d:22:bd:2f:07:f4:52:98:ba:3e:83:
                    32:66:bb:05:27:9e:08:0f:e9:10:e6:bd:6d:b9:8c:
                    28:bd:69:d1:ef:3b:c3:ca:c5:bc:11:f4:06:80:a4:
                    29:55:46:c5:31:12:11:cb:06:ba:16:68:8e:79:95:
                    34:68:d4:9c:96:77:38:00:22:b5:a1:82:43:69:57:
                    7c:52:ba:7e:66:9a:a7:5d:f7:c9:80:c4:1a:b1:55:
                    b2:39:f6:9d:fc:ad:12:26:1f:b4:4a:47:ab:eb:e4:
                    64:16:52:00:72:a2:4a:56:3d:67:2f:24:95:c6:63:
                    c7:eb:d0:fa:ba:5c:76:17:20:67:17:5b:da:42:5d:
                    6a:b6:3b:ea:fc:45:1d:10:7e:07:44:8e:79:81:bf:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6A:D8:6A:CB:36:2D:AE:6C:62:21:24:2E:76:8D:A6:43:51:3A:9D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/AmrYass2La5sYiEkLnaNpkNROp0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.54.0/23
                IPv6:
                  2001:df0:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:0c:da:cd:52:8e:c8:28:da:9a:df:27:24:1c:64:52:2e:81:
         e8:ff:1b:c5:82:fe:19:03:69:75:0d:cd:cf:22:17:e7:5b:ed:
         02:09:f9:76:fc:07:ae:60:1e:93:d1:31:2a:a1:64:28:d9:77:
         e2:84:c2:57:01:40:42:b1:24:93:ce:98:bf:45:49:13:04:44:
         70:23:aa:e2:a0:6e:b4:7d:3d:e5:52:6a:f4:44:14:c8:45:ec:
         86:cc:10:c5:a8:a5:a2:ea:04:4a:de:81:4c:99:9c:ba:f6:25:
         dd:e4:3e:ad:ce:59:8c:e3:83:3a:95:58:7f:46:8d:8b:6b:3c:
         fa:59:0a:8e:c9:cd:29:8c:80:29:99:31:2c:2f:03:a3:43:92:
         5e:22:e0:a7:e0:78:d2:72:ff:88:38:04:2f:00:a5:9f:a8:7c:
         60:f4:0e:42:43:0b:04:c0:26:27:51:5f:51:dc:32:6f:ac:1f:
         24:93:b9:b4:6e:7e:20:45:21:87:cf:0e:0f:21:59:d6:59:1d:
         f4:d3:a8:cd:d6:e8:a3:0a:9d:ed:a0:70:69:45:10:77:ec:f5:
         6a:e6:b7:60:e5:e4:00:3f:10:a4:a3:16:69:dc:18:14:e7:47:
         f4:5b:cd:33:27:18:11:26:39:da:18:45:f3:f9:af:de:ad:ab:
         89:fe:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----