Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Egii3DT4W8VuE4wUBpuet3gmOdk.cer
File:                     Egii3DT4W8VuE4wUBpuet3gmOdk.cer (raw, json)
Hash identifier:          xi/1g7fe78Rhv/iWl/SSTP0/TiwWgVzlp+SdwISZbJ8=
Subject key identifier:   12:08:A2:DC:34:F8:5B:C5:6E:13:8C:14:06:9B:9E:B7:78:26:39:D9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013115
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9115558/12765A10383711EC8FFD8B45C4F9AE02/Egii3DT4W8VuE4wUBpuet3gmOdk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9115558/12765A10383711EC8FFD8B45C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 28 Oct 2021 21:36:20 +0000
Certificate not after:    Fri 30 Dec 2022 00:00:00 +0000
Subordinate resources:    AS: 55923
                          IP: 175.45.144.0/22
                          IP: 175.45.152.0/21
                          IP: 180.178.64.0/22
                          IP: 202.8.76.0/24
                          IP: 2405:b600::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78101 (0x13115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 28 21:36:20 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A9115558/serialNumber=1208A2DC34F85BC56E138C14069B9EB7782639D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:2a:d2:b5:93:8f:e4:04:b2:b0:10:d0:11:
                    03:7f:3a:9e:7e:37:5a:41:18:51:68:77:c7:5f:55:
                    aa:ff:8a:56:d3:0b:ac:1d:2b:9e:eb:ad:6c:dc:59:
                    e3:c2:af:1c:10:44:ae:ee:7a:bc:a1:44:e4:db:5e:
                    2d:73:6a:2e:9d:44:ba:6a:71:4c:06:c9:c2:90:68:
                    eb:49:fd:46:37:5e:54:6d:d2:fb:63:44:51:e7:6c:
                    ce:6f:00:27:1a:bf:5e:f8:0f:7b:4b:2f:54:23:79:
                    3f:42:57:8b:e3:52:98:ab:fc:31:b4:21:4d:00:80:
                    58:cd:a7:14:ec:fa:d4:18:4d:9d:7a:80:a0:b4:9d:
                    dc:b1:de:53:d4:9b:a8:04:86:81:8a:2f:6b:b6:47:
                    75:79:87:2b:72:9f:80:07:5f:74:ea:8f:62:88:68:
                    6c:f8:9d:d3:4c:90:dc:20:a6:36:59:e7:62:1f:92:
                    9b:95:df:ab:01:46:cf:c8:da:5b:01:be:2b:12:a5:
                    d0:fe:1a:17:52:f5:5d:cb:9c:53:17:ac:f1:4a:5e:
                    5e:e9:fc:48:d7:77:b9:92:7c:14:32:bb:81:66:e1:
                    79:b5:5a:50:bd:90:0f:77:66:d1:e0:69:f2:36:37:
                    6c:b8:db:f0:b2:4a:c6:ec:e8:f5:ca:06:74:c6:7e:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:08:A2:DC:34:F8:5B:C5:6E:13:8C:14:06:9B:9E:B7:78:26:39:D9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115558/12765A10383711EC8FFD8B45C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115558/12765A10383711EC8FFD8B45C4F9AE02/Egii3DT4W8VuE4wUBpuet3gmOdk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55923

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.144.0/22
                  175.45.152.0/21
                  180.178.64.0/22
                  202.8.76.0/24
                IPv6:
                  2405:b600::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:d7:de:ab:b1:dd:14:14:72:1f:1e:13:22:2e:86:23:8d:
         12:75:da:a1:01:cf:fc:60:3c:9d:61:aa:92:4d:28:18:fb:cc:
         eb:cf:d7:e0:4f:3d:cb:61:28:ae:2d:bb:30:95:df:42:81:d5:
         4c:45:98:61:5a:80:e9:e6:b1:8f:39:90:d2:cb:bb:c1:82:31:
         70:83:5f:2d:ef:5a:5e:c7:ce:90:a6:8e:8c:0a:e5:5f:08:e9:
         fa:6c:c5:fc:c2:f7:61:9a:5e:b3:18:90:bc:59:4b:a4:8d:71:
         b8:8c:cb:7e:2a:cb:c4:cb:05:37:5c:d8:70:ea:e9:f6:55:78:
         23:70:0a:cb:3d:ae:07:7f:e0:d3:4b:0d:f6:19:ca:83:00:3e:
         56:7b:ae:5d:83:9e:56:b2:a5:09:7c:04:fe:28:08:b9:97:86:
         8c:e4:bb:be:80:f8:a5:03:a5:77:8f:d3:f0:aa:71:33:53:a0:
         bc:38:b7:d7:24:88:0f:68:2b:89:cf:45:6d:7d:d9:0f:55:c1:
         18:ae:0a:0b:15:51:2f:55:d9:e5:f6:31:70:76:39:45:78:f1:
         91:42:ec:19:40:2d:89:17:73:07:ff:19:3e:9d:e5:74:01:a9:
         61:1c:7d:ab:57:30:0b:43:43:35:b4:a1:25:b2:43:33:75:0e:
         c9:33:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----