Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO0Gt6w5pzN0-CQX8asCFzOKgvI.cer
File:                     CO0Gt6w5pzN0-CQX8asCFzOKgvI.cer (raw, json)
Hash identifier:          RHc/eon7NWlh84l8fE7WoXNm3TqvyP8+Kibf48haxjs=
Subject key identifier:   08:ED:06:B7:AC:39:A7:33:74:F8:24:17:F1:AB:02:17:33:8A:82:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       015F10
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917DA63/0F47B1DE199611EA859C914DC4F9AE02/CO0Gt6w5pzN0-CQX8asCFzOKgvI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917DA63/0F47B1DE199611EA859C914DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jun 2022 20:41:24 +0000
Certificate not after:    Sun 30 Oct 2022 00:00:00 +0000
Subordinate resources:    AS: 136582
                          IP: 103.93.92.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89872 (0x15f10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 30 20:41:24 2022 GMT
            Not After : Oct 30 00:00:00 2022 GMT
        Subject: CN=A917DA63/serialNumber=08ED06B7AC39A73374F82417F1AB0217338A82F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:18:fb:5a:ba:49:dd:8f:e6:b7:09:de:8d:
                    05:8e:d2:9c:11:f5:7a:e5:f2:01:85:eb:af:61:af:
                    bd:a1:00:70:af:37:7d:1d:ee:8e:e1:0f:70:86:cd:
                    7f:04:6f:3a:2f:4e:89:9a:ab:f4:9d:42:84:35:94:
                    c2:f6:64:0b:6a:09:2e:f9:da:a7:09:52:d4:06:5a:
                    9b:e3:7a:5e:46:cf:bd:91:94:b7:76:d6:8d:a7:5a:
                    45:71:56:4f:e6:30:51:14:a1:f6:6b:ff:08:42:3a:
                    92:93:c1:2c:88:ae:10:8e:ca:3c:20:cb:c0:9c:79:
                    7b:0a:64:8f:c9:8d:49:49:50:33:bd:72:8b:57:f1:
                    f4:d6:c5:49:4a:b7:49:d1:d2:52:31:28:4e:c8:13:
                    2b:8e:6b:4d:72:1b:bb:bb:37:42:cb:81:eb:d5:04:
                    68:a9:12:b9:c4:a1:6a:55:52:1c:29:57:70:53:7f:
                    60:ec:1d:b0:78:56:87:11:b0:b7:b5:ef:5a:7c:e9:
                    a7:0b:a3:7a:27:a8:a8:cb:c9:26:cb:2d:8f:2f:23:
                    53:18:f1:af:03:bf:e9:24:d8:71:51:5b:cc:57:95:
                    f5:1a:4c:26:d0:91:33:f0:2d:b5:40:80:84:47:88:
                    97:97:2a:86:70:a8:04:6a:db:2a:8a:ab:54:0c:a1:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:06:B7:AC:39:A7:33:74:F8:24:17:F1:AB:02:17:33:8A:82:F2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917DA63/0F47B1DE199611EA859C914DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917DA63/0F47B1DE199611EA859C914DC4F9AE02/CO0Gt6w5pzN0-CQX8asCFzOKgvI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136582

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:96:fa:f1:d0:40:0b:18:e8:7a:ff:00:52:46:7c:cb:70:2e:
         32:f4:86:24:ce:d8:93:c5:2c:1c:5c:91:60:5c:d3:fd:f0:6b:
         1b:d7:e4:9c:7f:76:9b:31:e3:f3:ee:61:e7:44:3e:56:85:92:
         a0:a0:d5:4b:01:d7:1f:d7:f0:2f:63:0d:65:30:65:86:b8:6f:
         0c:e2:17:78:78:9c:81:47:2f:49:d7:81:5b:82:14:4d:31:93:
         ce:c1:1d:95:9a:38:da:28:d2:ce:85:72:db:4d:3e:c1:cb:86:
         67:60:4d:41:d8:0a:42:c8:c5:ef:3b:cd:67:af:51:8d:4c:bf:
         87:16:3b:fa:f9:55:95:66:fb:21:d4:5d:6c:8a:61:f2:6a:2f:
         e2:4d:5c:2b:2e:69:15:23:8d:56:26:90:59:68:df:e1:1d:89:
         61:14:ba:66:12:92:20:1f:71:85:46:db:3b:8a:80:f2:0e:77:
         f2:9c:e7:23:af:d3:45:ce:4d:57:e4:fb:80:d5:25:d4:5f:bb:
         22:bb:a0:ca:fb:13:cd:17:13:64:89:5c:6f:fb:8a:b2:88:04:
         f0:32:d2:00:34:86:4d:be:87:1b:25:ae:ed:97:4f:12:3d:ee:
         c3:ba:50:38:34:6b:73:be:74:7c:9b:c7:c6:ab:5c:86:1e:ee:
         2c:de:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----