Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DSmq7NPfqAwWUKUkorUUuajAvsc.cer
File:                     DSmq7NPfqAwWUKUkorUUuajAvsc.cer (raw, json)
Hash identifier:          xAsoMD9PgbdFXWkigvt0sqh5MDUxCBU6OZBNcgvwwHg=
Subject key identifier:   0D:29:AA:EC:D3:DF:A8:0C:16:50:A5:24:A2:B5:14:B9:A8:C0:BE:C7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0187BD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913F005/D2E91690EC7311EAA6619F85C4F9AE02/DSmq7NPfqAwWUKUkorUUuajAvsc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913F005/D2E91690EC7311EAA6619F85C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 30 Jan 2023 01:33:23 +0000
Certificate not after:    Fri 01 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 132480
                          IP: 103.104.212.0/22
                          IP: 2402:1c40::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100285 (0x187bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 30 01:33:23 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=A913F005/serialNumber=0D29AAECD3DFA80C1650A524A2B514B9A8C0BEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:1b:f5:7c:4b:8c:69:08:0f:c1:e9:a5:0a:
                    82:fe:fe:17:24:26:55:db:17:a7:77:ca:fc:7c:cd:
                    b5:57:ad:ae:49:55:5e:9b:ff:11:c7:a8:23:9f:6c:
                    94:c2:5a:eb:b4:23:6c:91:38:1c:43:ee:9d:88:4f:
                    6d:32:a6:6e:a7:b0:3a:04:6b:2b:04:bb:b4:05:30:
                    89:58:3c:9a:6c:28:41:ef:18:c1:7e:91:a5:b2:74:
                    a2:04:25:ad:74:a9:d7:a8:9c:eb:f3:6b:a0:b8:96:
                    7d:7b:78:59:07:de:7b:aa:f9:2e:60:21:22:5f:6a:
                    27:6d:0b:b8:83:e6:98:b0:ba:e6:67:93:10:86:e6:
                    12:5c:f5:3b:84:06:25:30:65:40:13:3b:ec:57:28:
                    e7:32:07:c6:f0:4e:c7:c0:ae:25:db:80:3c:09:0f:
                    b2:78:70:14:f6:14:e5:a2:29:c0:62:33:6e:06:41:
                    a7:86:2b:56:84:f7:90:6f:b6:0f:0a:f7:e4:94:24:
                    68:b0:d5:34:8d:54:8d:a2:2a:94:7a:06:ff:85:a3:
                    9b:79:8f:a5:38:98:95:78:28:3f:40:2f:72:63:77:
                    24:be:27:0e:a1:f3:01:9e:b9:85:d7:0b:ad:9d:ef:
                    f1:2c:4c:1d:5e:bf:43:c0:fd:e1:a9:ce:a7:1e:a7:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:AA:EC:D3:DF:A8:0C:16:50:A5:24:A2:B5:14:B9:A8:C0:BE:C7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F005/D2E91690EC7311EAA6619F85C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F005/D2E91690EC7311EAA6619F85C4F9AE02/DSmq7NPfqAwWUKUkorUUuajAvsc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132480

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.212.0/22
                IPv6:
                  2402:1c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:2e:a1:9f:03:b3:2c:10:80:f1:c1:a9:23:ee:52:c9:f1:7b:
         3d:c0:6b:89:de:4e:2d:9b:03:e9:17:ce:83:e9:aa:d3:bd:9f:
         de:08:3d:45:bb:c0:79:39:9d:41:49:8a:5e:76:62:a5:85:48:
         78:f6:9a:6c:d0:89:98:19:43:1e:d3:16:64:da:14:7f:48:9b:
         2d:71:2f:ca:e6:b1:1b:ae:7e:53:d7:fd:d3:76:d4:7a:60:9b:
         36:77:d3:cc:b5:ce:ae:48:f3:bc:a4:7a:4a:9a:e5:62:f2:8f:
         17:42:51:ba:02:cd:44:7d:3e:88:0a:de:da:ac:b4:64:b0:e1:
         af:52:71:9c:e2:ed:07:8e:9d:84:e6:8d:1f:36:c7:f9:90:d2:
         bd:6a:07:f3:d6:35:71:e9:6e:47:25:7c:29:71:d6:92:13:f6:
         3f:1b:ed:bb:cc:3d:c2:4c:23:c7:8e:0e:6f:b7:07:02:00:39:
         0d:ba:c1:51:c5:ca:4c:b2:95:99:8f:b8:65:70:92:3e:ff:3e:
         39:97:61:bc:00:a6:45:60:1a:be:4f:85:c8:39:6d:5f:ed:fe:
         fc:ec:f9:ad:4b:e0:a8:00:56:a9:92:65:b6:43:67:9a:8a:b1:
         4f:c4:a1:26:c6:32:5e:de:11:86:5e:cf:8e:0b:94:a8:00:e8:
         45:ea:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----