Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0WplWEQcY2GPzerPKFmcfuDVD4.cer
File:                     C0WplWEQcY2GPzerPKFmcfuDVD4.cer (raw, json)
Hash identifier:          fP9r5zs+i/l/j0wA6OxD8qaFgzZjE3fCGphX7W2yuFw=
Subject key identifier:   0B:45:A9:95:61:10:71:8D:86:3F:37:AB:3C:A1:66:71:FB:83:54:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D543
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/C0WplWEQcY2GPzerPKFmcfuDVD4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 Dec 2023 14:52:10 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    AS: 133637
                          IP: 2401:9940::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120131 (0x1d543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 14:52:10 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A9150F1C/serialNumber=0B45A9956110718D863F37AB3CA16671FB83543E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:f1:d4:81:c1:86:45:3d:0f:38:03:85:ae:
                    f5:9a:ff:80:f3:68:b3:53:df:92:41:6e:0c:b0:59:
                    d9:83:ad:86:59:57:27:db:58:eb:2e:b9:d5:ac:f8:
                    29:9c:aa:23:18:76:77:b0:b0:94:0e:fc:42:01:8d:
                    86:3a:0b:9d:00:dc:77:27:27:fb:e1:47:e2:10:bf:
                    7b:1d:2a:70:46:ce:15:34:67:aa:66:c9:f0:3c:b8:
                    3c:65:10:fd:65:33:ca:f3:d8:04:af:36:aa:f8:65:
                    71:a9:59:f9:96:10:cc:b6:2b:bd:3f:0c:1d:55:60:
                    6c:c1:3d:36:9d:36:6f:c5:8b:6a:c5:d7:d9:15:ba:
                    db:39:14:c0:ce:ff:ca:1a:3b:51:06:dd:28:f8:1a:
                    bc:99:2f:ae:aa:94:d2:c9:b3:c1:4e:c7:9e:23:66:
                    21:f5:67:8d:90:7e:e5:85:8a:34:9c:d3:90:2c:e3:
                    d2:24:ce:74:82:11:a5:17:b5:38:ad:2c:9e:0e:65:
                    32:d5:bc:43:6d:c1:b0:f7:b8:3c:d4:a6:6c:59:10:
                    2f:0b:92:e2:6c:d6:12:04:07:36:14:68:d2:92:d9:
                    9a:08:d1:49:54:24:0c:f7:c7:bc:26:8a:50:c6:34:
                    10:a5:15:95:36:41:59:0c:35:1b:6f:56:b6:8f:4e:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:45:A9:95:61:10:71:8D:86:3F:37:AB:3C:A1:66:71:FB:83:54:3E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/C0WplWEQcY2GPzerPKFmcfuDVD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133637

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9940::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:64:63:ae:83:65:d9:96:5d:49:38:8c:d3:37:56:dc:06:
         79:cc:4d:34:ba:e5:01:e9:8a:33:1b:d9:cf:53:cb:d4:6c:00:
         d5:24:2d:93:19:b1:75:55:d6:c3:95:f9:d8:54:02:a8:1f:93:
         83:b4:e0:86:fa:b2:9e:cb:d2:23:3b:de:27:d9:ec:b3:95:47:
         49:20:2a:1e:30:17:b0:8d:38:f7:f5:97:d9:62:cf:ee:11:8c:
         88:18:d8:fa:f3:a9:b7:ee:42:28:38:4b:9a:87:17:06:b3:ef:
         86:71:f8:4d:fb:cd:14:18:4e:b7:b3:83:9b:2c:9d:86:60:a4:
         46:ef:bf:48:57:fe:8a:b1:ac:6c:ef:20:76:84:05:0e:b9:23:
         58:a6:a7:69:2e:57:de:35:41:31:31:57:a7:f2:ba:40:e1:ec:
         21:1c:ab:94:25:c9:b4:f2:1b:90:11:6e:17:c2:a1:b0:69:dc:
         14:44:14:44:01:e0:83:f3:6b:39:58:47:13:3b:08:3a:23:27:
         e5:fe:f4:24:70:38:9b:15:e8:2b:cd:fc:63:66:1d:51:2c:3d:
         f9:4c:a5:be:29:08:c8:7f:44:ad:66:5b:e8:aa:60:5c:06:4f:
         c9:b7:03:2c:ee:f6:a3:cc:a1:15:0c:56:84:a8:7f:dd:c0:72:
         68:f5:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----