Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn2eR_01sinTI-7L7ApRTut8ktw.cer
File:                     Fn2eR_01sinTI-7L7ApRTut8ktw.cer (raw, json)
Hash identifier:          qP6T8pi3kKAQoJw5sh+w0CVksTKjKsBMbWFY1W3msG8=
Subject key identifier:   16:7D:9E:47:FD:35:B2:29:D3:23:EE:CB:EC:0A:51:4E:EB:7C:92:DC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016314
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/Fn2eR_01sinTI-7L7ApRTut8ktw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 20 Jul 2022 10:22:48 +0000
Certificate not after:    Mon 01 May 2023 00:00:00 +0000
Subordinate resources:    AS: 63955
                          IP: 103.50.16.0/22
                          IP: 2406:2440::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90900 (0x16314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 20 10:22:48 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=A917BC03/serialNumber=167D9E47FD35B229D323EECBEC0A514EEB7C92DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:df:06:89:0a:17:89:29:de:2e:d8:2c:86:
                    21:ab:51:96:6b:cc:e8:33:27:84:f2:c5:6e:a5:cb:
                    60:bc:b4:d7:82:63:de:2b:77:86:3c:36:9f:75:c6:
                    47:6b:a5:94:4b:ac:66:d4:68:9d:84:06:5c:3f:4e:
                    11:e5:ff:7c:ae:d0:1d:7b:7d:0b:cd:2f:e1:49:f3:
                    a5:cb:57:2f:fd:fd:9e:19:d4:77:f7:7c:19:b0:f6:
                    83:26:c4:d4:ce:ff:70:64:d6:d5:4c:5f:29:8d:a8:
                    a0:a1:a6:65:00:db:ee:67:70:41:88:bd:5e:2b:bc:
                    3d:10:38:a0:ac:a7:c5:e5:9b:88:d5:82:28:90:cf:
                    6e:4e:06:89:76:c5:48:b1:f5:e5:af:f7:3f:3f:ec:
                    5b:57:72:5e:c2:e1:c9:f4:3b:fd:8c:79:f6:b3:e5:
                    6f:5e:ca:b2:27:79:ab:1f:fb:f7:33:f8:9c:a9:88:
                    1d:6d:4c:6b:25:26:c0:cc:1d:8a:1e:70:b1:49:7b:
                    bb:69:23:cb:31:ec:43:c5:2d:c8:88:88:38:3b:4e:
                    b5:ee:e3:22:d2:c0:30:ce:ae:28:3c:53:9a:bb:8b:
                    e1:87:21:8b:9d:05:df:83:ed:bd:97:d9:ca:94:9e:
                    27:2e:9e:d9:bb:78:63:29:77:c1:97:e9:d1:fb:97:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7D:9E:47:FD:35:B2:29:D3:23:EE:CB:EC:0A:51:4E:EB:7C:92:DC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/Fn2eR_01sinTI-7L7ApRTut8ktw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63955

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.16.0/22
                IPv6:
                  2406:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:3e:98:d6:8a:8f:67:98:04:51:02:dc:c7:5b:e8:f7:87:6d:
         59:82:0b:4a:59:a1:ac:bd:21:26:c1:59:25:fc:d9:81:bb:ab:
         b2:4b:04:b9:30:43:dc:7a:de:92:0f:39:1c:0e:9c:3e:c3:86:
         5d:d2:ec:9c:8e:92:64:a0:80:b4:26:9e:4f:99:3e:5c:66:47:
         ca:94:9e:d2:1b:f1:59:5a:60:91:04:f2:35:db:a5:5a:5b:4b:
         b5:25:33:30:ca:b9:0b:5f:60:97:e6:9c:0f:1f:12:b6:39:2e:
         b8:35:f2:e3:9d:80:e8:b6:b6:0c:85:42:ad:9a:86:85:c8:c0:
         9a:95:7a:06:e1:e8:36:70:4b:8a:88:5c:e3:04:05:87:cd:10:
         d0:9a:83:aa:0c:c3:06:da:63:ca:33:52:fd:45:56:85:06:23:
         d9:10:a5:a8:03:73:ba:a6:ac:eb:36:11:43:77:1e:4e:9d:74:
         c7:f0:de:3d:81:cb:7c:77:de:40:c9:d5:9b:ae:66:e6:b0:08:
         8b:0d:6a:41:77:1c:16:34:cc:14:95:e6:0d:56:8b:0a:89:94:
         60:55:f5:5a:3a:68:b4:61:a1:86:66:d0:81:bb:44:c4:aa:3d:
         80:a7:ec:10:cf:67:a7:1f:d2:d9:1a:06:ac:17:9c:87:ab:30:
         53:01:cd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----