Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcCXzCjMJjIqLKc71L8SDd0cDGc.cer
File:                     DcCXzCjMJjIqLKc71L8SDd0cDGc.cer (raw, json)
Hash identifier:          3G4hVfme2eYWVm5Ci222ic9LY/uOZGjkg4CDL4hu/8s=
Subject key identifier:   0D:C0:97:CC:28:CC:26:32:2A:2C:A7:3B:D4:BF:12:0D:DD:1C:0C:67
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014728
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91676EB/343F95301D8E11E295876FEC08B02CD2/DcCXzCjMJjIqLKc71L8SDd0cDGc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91676EB/343F95301D8E11E295876FEC08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Mar 2022 02:49:50 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 24329

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83752 (0x14728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 02:49:50 2022 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A91676EB/serialNumber=0DC097CC28CC26322A2CA73BD4BF120DDD1C0C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:dc:36:fc:a6:37:dd:8a:ef:1a:dd:c6:df:
                    89:12:1d:d7:e0:43:de:3b:58:d0:c3:77:5e:02:37:
                    eb:df:8b:c6:f1:01:dd:e5:69:7d:90:cb:21:4f:c6:
                    43:15:97:cd:b5:7b:45:a4:42:8d:90:e3:2b:81:19:
                    22:e2:02:70:47:47:fb:9f:f0:5e:51:18:e4:96:99:
                    5f:df:ba:b7:34:8c:5b:9a:fe:c3:98:70:e3:b0:58:
                    27:d2:e5:13:26:e1:d7:06:91:2b:e5:16:dc:32:2f:
                    44:ce:65:67:16:61:77:5a:15:72:19:2a:95:fa:b9:
                    b7:3b:4c:9e:93:0b:17:0f:da:9a:e9:1a:85:94:83:
                    40:a7:04:97:40:e2:58:3b:c7:64:6b:09:58:18:77:
                    9d:0e:7e:78:0c:4a:b0:a9:aa:ab:c5:15:6b:98:7c:
                    e7:9f:ef:34:b9:c4:d2:d6:66:49:77:cd:f0:5e:5b:
                    cc:a8:91:5f:bc:ba:40:ab:7f:84:f2:87:e4:01:ed:
                    6a:65:21:d6:f3:9e:17:2f:4b:c2:55:e6:6b:ac:f3:
                    c0:42:32:82:aa:b1:94:b8:89:aa:9d:fb:f8:0c:93:
                    c4:fd:53:aa:fb:51:94:2e:8a:4a:22:79:8d:6d:3e:
                    86:79:6d:2e:d2:4b:dd:d0:ea:20:94:87:b6:a5:b7:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C0:97:CC:28:CC:26:32:2A:2C:A7:3B:D4:BF:12:0D:DD:1C:0C:67
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91676EB/343F95301D8E11E295876FEC08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91676EB/343F95301D8E11E295876FEC08B02CD2/DcCXzCjMJjIqLKc71L8SDd0cDGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24329

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:28:f2:4b:b2:84:11:1d:41:cf:5c:67:13:9b:35:89:54:
         4d:4a:b1:9f:8a:6a:2f:26:a4:3c:7a:a9:f3:3b:b4:05:bc:ec:
         d1:4b:98:b5:3d:9e:c7:0a:eb:4f:72:21:6e:4f:a6:d5:ec:48:
         74:d3:36:cd:b3:9d:ff:6d:a9:d7:a3:2c:40:fc:52:09:4e:79:
         92:81:9a:f6:ad:65:a4:d4:dd:66:63:dd:22:3f:c4:b3:9d:ae:
         80:28:39:6c:4c:aa:e6:96:13:5b:9c:1c:ed:19:35:6e:82:3b:
         17:bc:a1:71:81:d7:0d:6b:19:dc:9e:cd:51:09:c7:93:ab:37:
         da:b6:2b:bb:56:d9:af:cd:c5:c8:4f:25:a2:d2:71:8f:4d:72:
         de:e1:47:79:13:b3:ad:03:53:2a:5c:6d:f3:2a:fe:52:cb:31:
         05:72:6e:23:b7:4d:64:86:87:a9:38:bf:b1:39:c9:96:e1:9e:
         4d:76:e7:a1:4c:ed:6e:7e:c6:48:1e:b3:78:95:ce:ea:13:fd:
         3b:ae:4a:7f:6e:1c:b9:a4:7e:d8:e8:86:bd:f4:ec:da:e0:d9:
         1b:9b:ba:39:f7:e9:24:03:ee:79:e9:57:c0:61:7c:e2:7f:6c:
         a9:b0:00:3e:bb:d2:e7:a1:a5:d0:d4:09:0f:22:dc:ef:7b:be:
         e9:95:25:f8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIDAUcoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDMwMTAyNDk1MFoXDTIyMDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjc2RUIxMTAvBgNVBAUTKDBEQzA5N0NDMjhDQzI2MzIyQTJDQTcz
QkQ0QkYxMjBEREQxQzBDNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgVtw2/KY33YrvGt3G34kSHdfgQ947WNDDd14CN+vfi8bxAd3laX2QyyFPxkMV
l821e0WkQo2Q4yuBGSLiAnBHR/uf8F5RGOSWmV/furc0jFua/sOYcOOwWCfS5RMm
4dcGkSvlFtwyL0TOZWcWYXdaFXIZKpX6ubc7TJ6TCxcP2prpGoWUg0CnBJdA4lg7
x2RrCVgYd50OfngMSrCpqqvFFWuYfOef7zS5xNLWZkl3zfBeW8yokV+8ukCrf4Ty
h+QB7WplIdbznhcvS8JV5mus88BCMoKqsZS4iaqd+/gMk8T9U6r7UZQuikoieY1t
PoZ5bS7SS93Q6iCUh7alt2IPAgMBAAGjggLtMIIC6TAdBgNVHQ4EFgQUDcCXzCjM
JjIqLKc71L8SDd0cDGcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY3NkVCLzM0M0Y5NTMwMUQ4RTExRTI5NTg3NkZFQzA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NzZFQi8zNDNGOTUzMDFEOEUxMUUyOTU4NzZGRUMwOEIwMkNEMi9EY0NYekNq
TUpqSXFMS2M3MUw4U0RkMGNER2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICXwkwDQYJKoZIhvcNAQELBQADggEBACK1KPJLsoQRHUHPXGcTmzWJVE1K
sZ+Kai8mpDx6qfM7tAW87NFLmLU9nscK609yIW5PptXsSHTTNs2znf9tqdejLED8
UglOeZKBmvatZaTU3WZj3SI/xLOdroAoOWxMquaWE1ucHO0ZNW6COxe8oXGB1w1r
GdyezVEJx5OrN9q2K7tW2a/NxchPJaLScY9Nct7hR3kTs60DUypcbfMq/lLLMQVy
biO3TWSGh6k4v7E5yZbhnk1256FM7W5+xkges3iVzuoT/TuuSn9uHLmkftjohr30
7Nrg2Rubujn36SQD7nnpV8BhfOJ/bKmwAD670uehpdDUCQ8i3O97vumVJfg=
-----END CERTIFICATE-----