Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXqXZVCLrBk4EgLglaogUW02SZM.cer
File:                     HXqXZVCLrBk4EgLglaogUW02SZM.cer (raw, json)
Hash identifier:          7V+Ct3+nACuCVio58C0fM8Ns+hX1VbhLFTsXumDbngs=
Subject key identifier:   1D:7A:97:65:50:8B:AC:19:38:12:02:E0:95:AA:20:51:6D:36:49:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       017CD9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91489CA/41A6A4480E5711ECB6FD0C7DC4F9AE02/HXqXZVCLrBk4EgLglaogUW02SZM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91489CA/41A6A4480E5711ECB6FD0C7DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 30 Nov 2022 22:28:23 +0000
Certificate not after:    Thu 30 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 103.172.184.0/23
                          IP: 2001:df7:7680::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97497 (0x17cd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 30 22:28:23 2022 GMT
            Not After : Mar 30 00:00:00 2023 GMT
        Subject: CN=A91489CA/serialNumber=1D7A9765508BAC19381202E095AA20516D364993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:7d:3f:f0:0f:71:ef:70:8b:e9:f2:55:00:
                    7c:10:b1:56:46:7d:8f:29:b7:ca:d6:f3:62:67:b6:
                    c1:09:7f:ba:b5:9e:6b:e5:d4:0a:ac:a6:0c:5d:2c:
                    32:ad:3f:5b:ec:35:a6:07:23:32:8a:23:76:a6:83:
                    ea:c1:e5:c7:ef:a6:25:3d:8f:b0:94:94:e4:28:e3:
                    d4:62:1b:1f:bd:7b:40:be:cf:31:d2:00:3c:28:b5:
                    24:06:f2:1a:83:a7:08:e7:62:be:2b:5d:f7:20:66:
                    fb:e4:aa:ae:4d:07:57:00:61:9d:da:1c:c8:cb:75:
                    3c:39:f3:8f:bb:ab:30:35:2d:59:81:76:28:8b:e2:
                    3f:31:ec:c9:ee:32:7e:e5:e9:46:cd:52:d9:ba:ec:
                    9f:b0:99:f8:ad:13:88:ad:25:da:54:91:5f:e5:7e:
                    ae:6c:b6:2f:7f:75:5d:46:f6:dc:bd:91:8c:09:e3:
                    82:6c:76:0e:ad:3c:f3:dd:16:2f:cd:22:dc:2c:1e:
                    9b:e6:51:32:3f:80:0e:36:e0:77:b3:64:80:47:91:
                    48:3f:32:8e:48:46:12:0f:57:5b:5c:47:c7:5e:c4:
                    62:11:e4:35:73:da:c8:91:0b:19:5f:c5:b9:09:0f:
                    15:2d:da:a5:40:d4:6c:eb:95:46:80:8c:b3:10:1e:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7A:97:65:50:8B:AC:19:38:12:02:E0:95:AA:20:51:6D:36:49:93
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91489CA/41A6A4480E5711ECB6FD0C7DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91489CA/41A6A4480E5711ECB6FD0C7DC4F9AE02/HXqXZVCLrBk4EgLglaogUW02SZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.184.0/23
                IPv6:
                  2001:df7:7680::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:1d:23:77:e3:c4:14:24:d1:d8:42:62:ea:da:55:e0:9d:e1:
         f4:a1:0b:fe:4d:64:8b:30:ce:8a:2d:e5:fa:ce:cd:2f:22:ac:
         53:ba:89:4a:7a:3a:14:23:f1:58:54:50:64:38:d9:f1:93:46:
         38:8b:e7:d6:79:b6:25:44:5a:42:27:5a:e1:b6:ac:8a:b5:e6:
         18:f5:9e:03:73:55:be:d2:77:79:e6:18:62:ce:65:40:8c:fa:
         f7:c9:a5:66:4e:68:bd:9f:0e:f9:b0:d4:df:e7:a6:3d:cd:94:
         6b:cc:0b:47:e7:60:df:8d:1b:23:db:58:f9:3c:1a:34:ee:4c:
         11:0e:9f:bb:95:8f:c4:11:84:c7:5d:0f:2f:05:17:a0:68:cd:
         52:fd:15:a0:60:69:90:2d:86:1a:e1:94:3c:3d:6c:c2:9e:e2:
         54:07:41:ca:9c:56:e2:21:d6:02:5c:7e:26:b4:2b:fa:8c:1b:
         c1:96:72:08:2d:55:49:a3:a1:14:ca:f8:52:a9:67:ee:ba:24:
         5c:34:fe:a9:69:92:5e:7b:45:b8:90:19:22:d4:2c:d4:95:f3:
         d2:b6:e9:7a:ab:c3:54:1c:2f:4d:47:22:c4:e0:53:c1:08:f0:
         9b:94:7c:57:e7:9e:1a:c9:a1:0c:04:10:b7:a9:d6:fc:1a:d2:
         54:bc:3d:d5
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAXzZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMTEzMDIyMjgyM1oXDTIzMDMzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDg5Q0ExMTAvBgNVBAUTKDFEN0E5NzY1NTA4QkFDMTkzODEyMDJF
MDk1QUEyMDUxNkQzNjQ5OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRbX0/8A9x73CL6fJVAHwQsVZGfY8pt8rW82JntsEJf7q1nmvl1AqspgxdLDKt
P1vsNaYHIzKKI3amg+rB5cfvpiU9j7CUlOQo49RiGx+9e0C+zzHSADwotSQG8hqD
pwjnYr4rXfcgZvvkqq5NB1cAYZ3aHMjLdTw584+7qzA1LVmBdiiL4j8x7MnuMn7l
6UbNUtm67J+wmfitE4itJdpUkV/lfq5sti9/dV1G9ty9kYwJ44Jsdg6tPPPdFi/N
ItwsHpvmUTI/gA424HezZIBHkUg/Mo5IRhIPV1tcR8dexGIR5DVz2siRCxlfxbkJ
DxUt2qVA1GzrlUaAjLMQHuzJAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUHXqXZVCL
rBk4EgLglaogUW02SZMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ4OUNBLzQxQTZBNDQ4MEU1NzExRUNCNkZEMEM3REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0ODlDQS80MUE2QTQ0ODBFNTcxMUVDQjZGRDBDN0RDNEY5QUUwMi9IWHFYWlZD
THJCazRFZ0xnbGFvZ1VXMDJTWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFnrLgwDwQCAAIwCQMHACABDfd2gDANBgkqhkiG9w0BAQsFAAOC
AQEAnh0jd+PEFCTR2EJi6tpV4J3h9KEL/k1kizDOii3l+s7NLyKsU7qJSno6FCPx
WFRQZDjZ8ZNGOIvn1nm2JURaQida4basirXmGPWeA3NVvtJ3eeYYYs5lQIz698ml
Zk5ovZ8O+bDU3+emPc2Ua8wLR+dg340bI9tY+TwaNO5MEQ6fu5WPxBGEx10PLwUX
oGjNUv0VoGBpkC2GGuGUPD1swp7iVAdBypxW4iHWAlx+JrQr+owbwZZyCC1VSaOh
FMr4Uqln7rokXDT+qWmSXntFuJAZItQs1JXz0rbpeqvDVBwvTUcixOBTwQjwm5R8
V+eeGsmhDAQQt6nW/BrSVLw91Q==
-----END CERTIFICATE-----