Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8FSUFPj4CfE2Rnr-B2VJYStt1c.cer
File:                     H8FSUFPj4CfE2Rnr-B2VJYStt1c.cer (raw, json)
Hash identifier:          P4gZbbZzZTh1b3niY4RqwP7A538xSNRbVXy+StEBzD4=
Subject key identifier:   1F:C1:52:50:53:E3:E0:27:C4:D9:19:EB:F8:1D:95:25:84:AD:B7:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0159F4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918B1F3/A81875666D4011EBA667E02DC4F9AE02/H8FSUFPj4CfE2Rnr-B2VJYStt1c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918B1F3/A81875666D4011EBA667E02DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 02 Jun 2022 01:07:37 +0000
Certificate not after:    Sat 01 Oct 2022 00:00:00 +0000
Subordinate resources:    AS: 7494
                          IP: 202.56.176.0/20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88564 (0x159f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 01:07:37 2022 GMT
            Not After : Oct  1 00:00:00 2022 GMT
        Subject: CN=A918B1F3/serialNumber=1FC1525053E3E027C4D919EBF81D952584ADB757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:93:cc:c6:9e:df:9e:86:9b:60:25:aa:10:
                    f2:ea:ce:4a:d9:29:eb:a8:5d:16:44:fd:61:8b:59:
                    67:85:11:a1:ac:b5:aa:aa:ef:1f:91:cc:88:a8:54:
                    41:11:76:2e:4f:c6:34:29:28:0e:1b:c2:d1:23:73:
                    17:4e:37:5c:64:b2:75:10:05:b9:d4:de:c0:f8:71:
                    5a:30:61:a1:3f:17:25:46:90:22:42:8f:96:3e:69:
                    84:ed:8f:41:bd:b0:ac:b0:ef:bd:bb:ff:54:47:0c:
                    1a:b6:99:98:f3:9c:29:83:73:fb:a7:00:c6:a6:cf:
                    cf:4c:8b:78:fc:c6:7a:64:49:84:5d:e3:f0:2c:8d:
                    7d:1a:56:83:64:e9:9c:13:5b:dc:09:ba:ad:e5:25:
                    4f:7a:0f:52:1d:4b:2d:70:66:bb:56:bc:54:69:b1:
                    a0:85:ad:0a:5f:32:4e:45:b2:d3:49:f5:f9:ad:e0:
                    c1:b7:51:40:10:8e:8b:07:09:48:9f:ef:86:b0:35:
                    08:54:c1:c4:df:4d:46:b2:95:7d:b7:63:1d:92:51:
                    59:f0:76:7c:1c:d9:f8:a1:64:fa:ad:e1:30:18:f3:
                    60:c1:b1:e5:35:ce:9a:06:35:5a:b9:02:11:c3:3a:
                    c8:33:09:c1:04:48:44:33:d8:16:d1:34:18:67:bf:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C1:52:50:53:E3:E0:27:C4:D9:19:EB:F8:1D:95:25:84:AD:B7:57
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B1F3/A81875666D4011EBA667E02DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B1F3/A81875666D4011EBA667E02DC4F9AE02/H8FSUFPj4CfE2Rnr-B2VJYStt1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7494

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.56.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:5b:9a:55:60:73:cc:69:f2:88:8d:4c:64:62:98:89:ce:11:
         22:e9:5a:82:22:b4:7b:b3:98:9e:35:83:d6:b0:a2:c3:4f:f9:
         7e:96:e7:06:c5:a2:27:d5:df:6f:72:9a:96:14:ef:7b:e1:f8:
         af:1e:39:6b:44:49:64:cf:88:43:47:35:50:f6:9d:9c:14:d8:
         51:ff:df:c5:d4:63:96:46:06:28:d9:01:e6:93:82:ea:e1:06:
         99:b3:e2:b1:61:58:0e:f4:2f:3c:cc:f6:aa:6c:e9:73:8f:f9:
         24:12:6c:96:2e:80:ca:92:72:fb:56:cc:f9:da:d5:ce:b5:b1:
         4b:b3:3c:3e:7f:8c:1e:3c:00:d9:70:b3:a0:d2:2c:0e:c0:d4:
         bf:48:07:1b:3a:8d:cb:83:ae:44:64:ff:ba:52:a8:eb:92:e4:
         c8:4c:a4:1d:42:c6:34:40:cd:fe:e6:c6:48:f4:dd:ea:05:fa:
         c5:26:6f:0d:71:b7:66:cf:fa:6f:23:fb:81:bb:60:e8:95:ce:
         2a:18:59:8d:ff:23:4b:23:72:7f:d3:e5:df:92:6c:98:6f:be:
         96:7c:c2:11:d6:57:d4:e9:4b:2c:cb:36:09:1b:0e:3f:6a:79:
         3a:bf:79:bc:c6:3e:40:b0:33:4f:ce:8b:12:89:ef:7f:b0:ea:
         09:c0:51:70
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgIDAVn0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDYwMjAxMDczN1oXDTIyMTAwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEIxRjMxMTAvBgNVBAUTKDFGQzE1MjUwNTNFM0UwMjdDNEQ5MTlF
QkY4MUQ5NTI1ODRBREI3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8vJPMxp7fnoabYCWqEPLqzkrZKeuoXRZE/WGLWWeFEaGstaqq7x+RzIioVEER
di5PxjQpKA4bwtEjcxdON1xksnUQBbnU3sD4cVowYaE/FyVGkCJCj5Y+aYTtj0G9
sKyw7727/1RHDBq2mZjznCmDc/unAMamz89Mi3j8xnpkSYRd4/AsjX0aVoNk6ZwT
W9wJuq3lJU96D1IdSy1wZrtWvFRpsaCFrQpfMk5FstNJ9fmt4MG3UUAQjosHCUif
74awNQhUwcTfTUaylX23Yx2SUVnwdnwc2fihZPqt4TAY82DBseU1zpoGNVq5AhHD
OsgzCcEESEQz2BbRNBhnvwRpAgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQUH8FSUFPj
4CfE2Rnr+B2VJYStt1cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThCMUYzL0E4MTg3NTY2NkQ0MDExRUJBNjY3RTAyREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4QjFGMy9BODE4NzU2NjZENDAxMUVCQTY2N0UwMkRDNEY5QUUwMi9IOEZTVUZQ
ajRDZkUyUm5yLUIyVkpZU3R0MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICHUYwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKOLAwDQYJKoZI
hvcNAQELBQADggEBAKRbmlVgc8xp8oiNTGRimInOESLpWoIitHuzmJ41g9awosNP
+X6W5wbFoifV329ympYU73vh+K8eOWtESWTPiENHNVD2nZwU2FH/38XUY5ZGBijZ
AeaTgurhBpmz4rFhWA70LzzM9qps6XOP+SQSbJYugMqScvtWzPna1c61sUuzPD5/
jB48ANlws6DSLA7A1L9IBxs6jcuDrkRk/7pSqOuS5MhMpB1CxjRAzf7mxkj03eoF
+sUmbw1xt2bP+m8j+4G7YOiVzioYWY3/I0sjcn/T5d+SbJhvvpZ8whHWV9TpSyzL
NgkbDj9qeTq/ebzGPkCwM0/OixKJ73+w6gnAUXA=
-----END CERTIFICATE-----