Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoTtjb5X2v_6U014ji18vxpCncQ.cer
File:                     HoTtjb5X2v_6U014ji18vxpCncQ.cer (raw, json)
Hash identifier:          auEBC7k+ahbEG5j8iZL9qI45LeoKon/uxb71fGL788Q=
Subject key identifier:   1E:84:ED:8D:BE:57:DA:FF:FA:53:4D:78:8E:2D:7C:BF:1A:42:9D:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0170E8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918E93A/C68C5656FF6311EBBA55B34DC4F9AE02/HoTtjb5X2v_6U014ji18vxpCncQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918E93A/C68C5656FF6311EBBA55B34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 01 Oct 2022 02:54:48 +0000
Certificate not after:    Tue 31 Jan 2023 00:00:00 +0000
Subordinate resources:    AS: 142614
                          IP: 103.170.218.0/23
                          IP: 2407:b840::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94440 (0x170e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 02:54:48 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A918E93A/serialNumber=1E84ED8DBE57DAFFFA534D788E2D7CBF1A429DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:d3:6f:f0:41:10:74:10:f5:0e:d0:7f:3d:
                    44:0a:b4:c9:77:68:e6:ad:d7:52:69:43:0f:3e:40:
                    b7:03:65:df:e2:50:93:8f:1e:d1:bc:30:ad:93:26:
                    a6:ba:74:f5:55:86:20:62:8c:66:e1:ae:e7:b8:b7:
                    ff:89:5b:6d:b0:ad:a2:63:93:9f:00:6a:e4:82:e7:
                    d9:ba:e8:3c:34:f5:09:d7:7a:94:ac:b4:8f:dd:4f:
                    cd:30:d0:9f:27:96:ae:1f:91:4e:fd:3e:d6:04:5c:
                    3d:dc:91:15:06:0d:a0:a7:63:86:26:b5:20:7f:d0:
                    a3:90:e7:e0:60:fa:67:22:6a:33:ee:a5:70:4d:0e:
                    01:35:17:0b:be:9a:ae:56:41:73:38:4e:ce:02:0d:
                    4d:a2:a6:ed:4d:9b:ce:72:ad:c7:fb:93:8b:4f:51:
                    8e:18:bf:1a:49:c3:ec:01:44:d0:15:bd:d5:07:20:
                    b6:7e:ee:79:5d:92:f5:d3:a1:e0:6e:0c:c0:cf:a7:
                    35:7a:12:21:6e:f5:b6:09:1a:ca:78:b4:a4:c2:2b:
                    82:4f:f0:5a:05:57:87:b2:48:ff:11:6c:71:a1:47:
                    f0:3d:70:e3:b8:a7:24:17:7a:a9:14:7f:53:e9:85:
                    d7:ec:18:21:a4:c2:a0:16:c2:6d:40:23:dc:41:0e:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:ED:8D:BE:57:DA:FF:FA:53:4D:78:8E:2D:7C:BF:1A:42:9D:C4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E93A/C68C5656FF6311EBBA55B34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E93A/C68C5656FF6311EBBA55B34DC4F9AE02/HoTtjb5X2v_6U014ji18vxpCncQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142614

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.218.0/23
                IPv6:
                  2407:b840::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:40:4b:a6:cd:85:c5:cc:7d:9b:45:0d:c6:26:61:ef:24:81:
         8c:d6:41:15:c7:ab:bf:bb:e0:be:b8:7a:1f:a2:23:dd:ff:ac:
         91:1d:45:f6:f5:f1:09:10:60:3e:1e:04:e7:55:56:15:2f:18:
         85:74:da:a0:a7:d8:bd:69:01:91:b9:d9:dd:96:23:f7:3f:71:
         41:50:34:1d:e0:22:74:39:eb:3a:d4:e3:ed:4c:c7:35:33:63:
         7b:33:54:c4:01:28:da:19:d8:12:72:e6:b2:e2:1f:d4:55:8b:
         b5:b3:e0:0b:19:d2:13:df:db:6e:e4:bb:17:96:2c:48:c8:a1:
         e4:cc:42:03:a4:f1:c1:52:db:cb:29:00:4b:d5:2d:96:e9:34:
         5d:19:67:a6:b6:e1:af:e2:9d:70:1d:6f:49:95:d9:b8:22:90:
         97:ac:b8:b5:4f:80:93:7d:41:8f:33:5b:30:9e:18:d4:c1:21:
         08:ba:90:a8:f4:8a:db:12:c7:4b:6d:ce:80:c9:5b:28:59:23:
         cc:fb:05:c2:22:24:82:ab:85:54:dd:db:74:64:67:bf:f5:69:
         09:89:c7:b5:98:2b:42:e3:35:ed:3b:3d:4c:b8:c6:93:f4:23:
         8a:ea:4c:f3:80:81:58:c5:a8:7c:97:65:2c:c1:0c:66:06:4a:
         36:9a:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----