Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfUPNhYyMp9cxitDB9mpbYtn0zk.cer
File:                     EfUPNhYyMp9cxitDB9mpbYtn0zk.cer (raw, json)
Hash identifier:          3KiW0PepbSGU927w89qU9k0cd353l3HjE95T36HiqrQ=
Subject key identifier:   11:F5:0F:36:16:32:32:9F:5C:C6:2B:43:07:D9:A9:6D:8B:67:D3:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018645
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/EfUPNhYyMp9cxitDB9mpbYtn0zk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 19 Jan 2023 14:45:43 +0000
Certificate not after:    Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources:    IP: 103.106.88.0/22
                          IP: 2402:3fc0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99909 (0x18645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 19 14:45:43 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=A916D5ED/serialNumber=11F50F361632329F5CC62B4307D9A96D8B67D339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:aa:e1:ab:c8:70:e1:0b:c4:15:d1:af:0c:
                    09:42:a9:56:26:32:f6:71:f3:29:05:fe:71:97:9c:
                    96:51:16:e3:76:54:38:5a:2b:16:cb:ff:a7:32:57:
                    10:e8:11:d6:2d:6d:b8:2e:bf:01:3a:e3:04:06:d1:
                    b1:7c:03:39:29:bd:48:dd:9c:0c:94:6b:7a:af:36:
                    68:e6:8e:b4:a0:f4:fd:a9:3f:85:75:d8:0d:30:60:
                    80:48:8a:d4:f9:1d:2b:94:08:26:f0:17:c5:fb:d6:
                    32:c2:aa:1d:71:c5:3d:70:35:ff:57:95:89:00:2d:
                    03:08:e4:74:e0:3c:26:39:b9:81:e2:5d:d0:c1:d6:
                    31:57:fc:a6:f2:f7:c8:c2:96:ed:d9:cb:a9:31:59:
                    69:80:75:9c:0d:bb:28:9f:af:e3:a6:54:8c:07:f8:
                    79:8a:22:fd:45:cb:76:12:32:2c:80:6a:60:92:51:
                    75:4b:cc:5e:5c:95:02:ac:9c:a1:24:af:92:b1:c6:
                    5e:61:6a:32:8f:df:3a:13:63:a8:8b:da:a7:6b:06:
                    09:92:2b:75:c7:97:01:ed:57:34:f5:43:48:6d:96:
                    3d:48:01:07:41:fa:b5:a0:38:b7:7b:28:1f:6f:8e:
                    d2:d9:f1:71:4e:1b:11:4f:3d:41:02:35:a6:89:f9:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:0F:36:16:32:32:9F:5C:C6:2B:43:07:D9:A9:6D:8B:67:D3:39
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/EfUPNhYyMp9cxitDB9mpbYtn0zk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.88.0/22
                IPv6:
                  2402:3fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:10:a3:6b:02:64:b8:85:bf:a5:98:a2:52:2f:5d:d4:13:f4:
         a4:b7:03:7f:71:b5:4e:06:f6:67:2b:cd:af:12:93:df:22:b1:
         2a:7e:69:1c:7b:86:6a:ff:9d:85:35:48:c2:67:b8:93:40:fc:
         2f:93:b8:0c:aa:80:fa:7e:bb:fd:24:e4:35:ea:c1:37:73:66:
         57:b5:bd:cb:40:6d:84:8e:2e:fb:0e:0d:01:c1:7c:06:64:c9:
         22:6b:68:25:59:4e:8b:63:bd:e4:1f:1d:b5:29:9d:2f:5c:9c:
         a5:1f:e0:57:19:ed:fd:e0:10:f2:1a:c7:75:d2:88:f7:f7:e6:
         3e:35:42:54:29:8c:7f:bc:79:d5:f3:c1:65:05:ad:20:01:a1:
         e7:5c:88:06:80:e3:25:23:cb:c2:3f:13:60:08:d5:ce:37:77:
         e6:c6:f2:51:52:b5:4f:fd:01:75:34:c0:13:7d:6c:41:6a:22:
         1e:8a:c9:be:45:f1:9e:99:15:07:82:9a:65:7b:d9:2b:73:b8:
         a7:fd:3e:58:30:5d:12:a2:d3:25:e9:d1:83:16:60:4a:b5:eb:
         93:24:96:9d:9e:8c:2e:59:2f:de:08:dc:62:8c:77:63:85:53:
         58:7f:c0:be:55:51:c7:bc:62:e8:32:90:37:e5:ed:fd:78:a0:
         8a:6f:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----