Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
File:                     F_-6xFmkyikJkS9GSgix-B2j2fY.cer (raw, json)
Hash identifier:          2miGgtsNDYUwqJRX5nGIylEAh6kPUiuz7DtHb4Kewvk=
Subject key identifier:   17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018115
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.mft
caRepository:             rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Wed 21 Dec 2022 16:31:32 +0000
Certificate not after:    Sun 28 May 2023 00:00:00 +0000
Subordinate resources:    AS: 132282
                          AS: 140704
                          IP: 27.0.232.0/22
                          IP: 103.68.108.0/22
                          IP: 103.208.84.0/22
                          IP: 103.214.68.0/22
                          IP: 103.230.140.0/22
                          IP: 144.48.80.0/22
                          IP: 2404:3d80::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98581 (0x18115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 21 16:31:32 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:ff:20:6a:a1:20:86:97:a3:46:cc:20:84:
                    95:c2:d9:b6:e3:77:eb:36:d7:bf:7d:8e:f0:db:fa:
                    d3:8a:7d:b3:e0:10:ff:05:8e:56:e9:60:4a:23:e1:
                    71:95:ac:64:ed:0e:a2:05:fb:96:ca:2c:c3:12:ae:
                    8c:2f:6b:45:03:f3:27:19:70:89:d0:19:30:3e:9f:
                    21:3c:07:0f:bb:28:66:5f:04:39:94:96:28:c4:e6:
                    d3:07:fc:3b:6a:14:83:b7:f3:1a:94:f2:80:a0:01:
                    b5:36:e7:bf:cb:04:17:c2:89:cf:43:90:e8:1a:e1:
                    b6:38:7c:a5:2a:bf:d3:df:66:8c:74:8e:38:49:24:
                    5f:b4:17:20:d9:d1:18:de:61:c1:83:43:db:72:17:
                    b9:07:d2:fa:55:af:48:68:5a:d3:6f:4a:97:c1:d3:
                    8f:44:cc:02:06:f1:ea:26:c7:42:6e:f8:ea:12:d2:
                    97:cf:4f:a1:cb:13:23:e9:62:5d:f8:a8:18:9c:e2:
                    14:e4:c8:00:a2:29:31:23:a6:f7:09:97:8a:2d:3b:
                    50:5f:89:05:c5:8e:b7:66:5a:d9:8c:cb:86:81:4c:
                    10:4b:e7:a7:90:78:a7:8f:34:2d:63:67:f6:1f:6b:
                    93:5f:7d:e4:21:01:de:1e:e6:ed:d5:26:fc:87:b4:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132282
                  140704

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.232.0/22
                  103.68.108.0/22
                  103.208.84.0/22
                  103.214.68.0/22
                  103.230.140.0/22
                  144.48.80.0/22
                IPv6:
                  2404:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:15:b2:bf:f1:29:7d:69:a9:87:cf:a4:a9:90:d2:72:c6:df:
         6b:f7:49:6f:91:7e:59:63:0d:bf:f1:c2:b2:c2:96:2e:0b:db:
         79:39:fd:d1:39:d7:f2:bc:c5:0e:5b:77:7e:41:54:26:7a:68:
         ca:b3:31:de:f3:fb:22:95:50:50:d0:ef:62:72:25:15:08:1a:
         0e:5b:39:15:54:35:5c:82:f9:6d:f2:ab:e7:49:18:e9:25:1a:
         9d:da:c6:9a:bc:e0:ad:15:ad:f2:0e:c6:28:ef:e1:26:f2:88:
         f3:f1:a1:2e:ea:97:2a:9a:51:36:f1:a0:c3:9e:43:f4:ef:09:
         45:aa:be:52:62:00:a7:6f:a7:c1:36:18:4f:e7:0d:e1:04:49:
         c5:0b:3e:76:5c:c8:73:7d:89:56:6a:02:a7:e2:5d:e2:4c:6c:
         5c:1c:4a:f6:f7:54:ec:da:88:ee:a7:6c:af:e2:fe:de:55:89:
         69:8b:f7:75:f2:8e:79:af:d0:f4:d3:4a:5b:14:b3:4d:e6:56:
         47:a4:98:28:27:d0:cf:3f:16:f2:dc:8c:45:6f:ce:48:9c:fa:
         65:75:2f:f6:26:bf:69:b2:8c:aa:62:8f:b2:69:cb:fb:53:df:
         cb:c8:8f:5d:69:a0:22:12:83:54:85:e9:de:fb:87:4d:12:66:
         7b:16:82:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----