Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DLSmBFJurSo0wdm6HTiNovZ50v4.cer
File:                     DLSmBFJurSo0wdm6HTiNovZ50v4.cer (raw, json)
Hash identifier:          WO3es6kZ5loIl2U7BO05D6/XtsLFmk40QRnGr3lz9dg=
Subject key identifier:   0C:B4:A6:04:52:6E:AD:2A:34:C1:D9:BA:1D:38:8D:A2:F6:79:D2:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013E30
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91937DB/8E96701A532811EC9ED7C844C4F9AE02/DLSmBFJurSo0wdm6HTiNovZ50v4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91937DB/8E96701A532811EC9ED7C844C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Jan 2022 15:46:55 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 203.24.130.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81456 (0x13e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  5 15:46:55 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A91937DB/serialNumber=0CB4A604526EAD2A34C1D9BA1D388DA2F679D2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:ce:7b:a8:03:10:75:e2:71:fd:1e:4e:31:
                    88:02:33:3f:95:58:da:b1:2a:44:5b:94:00:54:2d:
                    6c:e8:66:e6:57:85:d6:e0:9a:aa:5c:f1:20:5d:1b:
                    ce:8e:76:a7:94:40:68:46:47:69:ba:c7:d2:90:5f:
                    df:d5:22:e5:7d:7a:77:de:a4:14:21:f5:e3:fc:d6:
                    5e:59:7e:43:94:b4:75:7c:89:6f:1f:72:92:c4:be:
                    92:1c:b7:c7:e5:90:33:93:43:e1:a4:8f:ae:15:81:
                    c6:5f:f0:6c:28:06:80:3d:fe:e3:2e:d0:d6:2b:51:
                    0b:c5:93:4b:e5:82:b7:6c:10:f2:64:81:73:5b:ef:
                    0d:d9:04:5c:53:95:a4:fa:54:be:5d:12:93:a3:5d:
                    d8:52:38:c8:6a:c9:54:1b:f5:29:6f:4e:25:82:ba:
                    75:d7:88:f1:1d:dc:e5:94:b0:1b:79:1f:25:d5:06:
                    ec:37:b1:79:7c:70:2f:ba:23:18:99:fc:70:ab:02:
                    b0:24:d0:af:e7:c8:c5:f0:dc:b4:34:de:27:79:9e:
                    2b:c5:57:7d:95:65:d1:f2:66:3c:1b:f0:0e:90:3a:
                    5a:2b:47:19:42:d3:36:f2:2d:57:3b:e8:31:ed:4b:
                    40:09:53:1a:7d:1a:ab:73:58:f8:ef:32:3b:60:39:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:A6:04:52:6E:AD:2A:34:C1:D9:BA:1D:38:8D:A2:F6:79:D2:FE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91937DB/8E96701A532811EC9ED7C844C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91937DB/8E96701A532811EC9ED7C844C4F9AE02/DLSmBFJurSo0wdm6HTiNovZ50v4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:5f:3d:52:05:b3:3c:3b:0a:6b:10:68:be:57:f6:8b:87:
         98:20:bc:c8:07:eb:93:8c:74:6f:7c:af:83:c7:82:29:5b:06:
         36:c6:ab:1b:fc:9a:56:b0:5b:d0:61:00:c2:4b:19:8f:10:b7:
         4f:33:4b:01:0f:fa:88:1a:ef:ce:52:25:61:21:de:42:30:21:
         ec:60:36:1c:c2:fc:2a:24:cd:d4:fb:bb:af:1a:12:a1:a8:fa:
         29:f3:f0:42:22:5b:64:23:f1:d5:55:18:7f:40:39:77:01:2b:
         e6:48:a2:b8:ca:a2:31:7a:b3:cc:9f:dc:f3:c3:ab:2d:05:9d:
         21:7b:73:94:36:79:6e:75:2b:4d:91:2d:43:06:b5:3b:4b:17:
         39:cd:8b:da:14:75:8e:07:63:c3:15:85:48:40:c8:ee:e8:fc:
         bb:56:ef:5a:98:ca:9c:05:2c:28:8e:2e:2b:68:22:11:b7:bc:
         30:a2:ad:22:f0:9a:93:9b:c9:e9:28:f6:d1:f0:75:26:61:04:
         fc:0c:71:1b:df:d2:92:ed:12:97:47:a4:26:bc:ec:06:b9:30:
         52:b9:7a:5c:90:46:eb:ff:48:fa:aa:d7:c1:55:f5:73:01:5a:
         6b:46:36:89:58:b0:db:d8:d9:7a:14:16:a3:d2:8e:e3:a9:2e:
         24:b5:26:de
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAT4wMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDEwNTE1NDY1NVoXDTIzMDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTM3REIxMTAvBgNVBAUTKDBDQjRBNjA0NTI2RUFEMkEzNEMxRDlC
QTFEMzg4REEyRjY3OUQyRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBps57qAMQdeJx/R5OMYgCMz+VWNqxKkRblABULWzoZuZXhdbgmqpc8SBdG86O
dqeUQGhGR2m6x9KQX9/VIuV9enfepBQh9eP81l5ZfkOUtHV8iW8fcpLEvpIct8fl
kDOTQ+Gkj64VgcZf8GwoBoA9/uMu0NYrUQvFk0vlgrdsEPJkgXNb7w3ZBFxTlaT6
VL5dEpOjXdhSOMhqyVQb9SlvTiWCunXXiPEd3OWUsBt5HyXVBuw3sXl8cC+6IxiZ
/HCrArAk0K/nyMXw3LQ03id5nivFV32VZdHyZjwb8A6QOlorRxlC0zbyLVc76DHt
S0AJUxp9GqtzWPjvMjtgOTu/AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUDLSmBFJu
rSo0wdm6HTiNovZ50v4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzN0RCLzhFOTY3MDFBNTMyODExRUM5RUQ3Qzg0NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MzdEQi84RTk2NzAxQTUzMjgxMUVDOUVEN0M4NDRDNEY5QUUwMi9ETFNtQkZK
dXJTbzB3ZG02SFRpTm92WjUwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADLGIIwDQYJKoZIhvcNAQELBQADggEBAIgMXz1SBbM8OwprEGi+
V/aLh5ggvMgH65OMdG98r4PHgilbBjbGqxv8mlawW9BhAMJLGY8Qt08zSwEP+oga
785SJWEh3kIwIexgNhzC/CokzdT7u68aEqGo+inz8EIiW2Qj8dVVGH9AOXcBK+ZI
orjKojF6s8yf3PPDqy0FnSF7c5Q2eW51K02RLUMGtTtLFznNi9oUdY4HY8MVhUhA
yO7o/LtW71qYypwFLCiOLitoIhG3vDCirSLwmpObyeko9tHwdSZhBPwMcRvf0pLt
EpdHpCa87Aa5MFK5elyQRuv/SPqq18FV9XMBWmtGNolYsNvY2XoUFqPSjuOpLiS1
Jt4=
-----END CERTIFICATE-----