Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEMTwiXtFhcdf6FcxODHm3fE-o8.cer
File:                     IEMTwiXtFhcdf6FcxODHm3fE-o8.cer (raw, json)
Hash identifier:          Ig5JKVwBpsa5txjfUHIb8bd1nTCS7N17e2QI9RqD3n0=
Subject key identifier:   20:43:13:C2:25:ED:16:17:1D:7F:A1:5C:C4:E0:C7:9B:77:C4:FA:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01301C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1/204313C225ED16171D7FA15CC4E0C79B77C4FA8F.mft
caRepository:             rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1
Notify URL:               https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 10:48:51 +0000
Certificate not after:    Mon 31 Oct 2022 00:00:00 +0000
Subordinate resources:    IP: 103.141.68.0/23
                          IP: 2405:9240::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77852 (0x1301c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 22 10:48:51 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91857810000/serialNumber=204313C225ED16171D7FA15CC4E0C79B77C4FA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:30:11:2a:92:2c:5d:d4:09:de:78:19:13:
                    c0:99:2e:36:46:e1:81:95:5b:58:50:6f:6a:f5:8c:
                    9d:cc:62:56:07:d5:d4:19:95:e4:b0:fb:85:d8:7a:
                    4a:34:a3:c6:49:47:c8:84:27:0b:11:af:bc:13:34:
                    1d:54:78:8c:53:49:f1:67:c8:f4:bc:22:a8:c3:c2:
                    9e:e3:dc:e7:57:09:f7:e9:64:9c:45:e4:f6:c9:99:
                    b4:35:f8:e2:49:bd:55:5c:9d:92:03:c0:3d:4e:f8:
                    06:95:91:d8:69:8d:e9:50:fc:1d:1f:79:3d:1c:cf:
                    fa:b4:7a:61:7d:83:69:a3:03:e3:96:82:a0:5f:56:
                    49:00:12:17:6c:86:1c:8b:59:5e:16:86:90:e1:76:
                    1e:39:63:80:85:80:79:99:1c:3c:0e:1b:20:40:46:
                    57:5c:38:55:8a:5b:0b:61:a8:fc:fc:ef:06:06:77:
                    74:08:4c:13:6e:fa:f0:ef:67:ca:5b:9d:12:9f:cc:
                    02:02:f0:39:b9:dd:36:81:4f:21:a3:67:04:43:ea:
                    8e:71:9b:44:f8:d7:dd:42:48:fa:08:ca:ba:19:02:
                    26:a6:1f:c4:42:a1:78:d2:5f:27:03:d4:e7:8f:d6:
                    57:82:6d:36:5e:7b:b2:14:94:38:0d:a7:db:43:b2:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:43:13:C2:25:ED:16:17:1D:7F:A1:5C:C4:E0:C7:9B:77:C4:FA:8F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1
                RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1/204313C225ED16171D7FA15CC4E0C79B77C4FA8F.mft
                RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.68.0/23
                IPv6:
                  2405:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:69:6c:30:74:c1:1b:eb:be:4d:56:ce:40:a1:b9:a5:46:8c:
         a0:2a:bb:61:df:27:6c:d5:05:45:90:75:c6:f2:6e:18:7d:80:
         7b:8e:6b:f5:a4:1d:eb:91:d6:13:ba:a2:34:74:f4:e3:5c:60:
         33:9a:e6:19:2a:0c:f7:39:4e:7a:06:b4:b4:a9:84:98:d9:12:
         b0:0d:f3:ef:54:c8:0f:89:5f:28:d6:58:3c:7c:3c:2f:03:86:
         53:93:e6:df:0c:d7:28:be:58:88:6c:06:b2:9d:72:6f:1f:a4:
         9a:bc:bd:88:5f:ed:48:76:67:66:d0:c7:3a:7b:98:ef:3e:85:
         b1:ec:05:76:85:9c:67:e7:9b:33:a2:df:d0:b7:1e:ca:28:72:
         ba:e3:0c:fb:cb:78:62:c6:ed:c4:ee:51:39:fb:80:c0:12:43:
         2f:81:d3:c9:c7:23:87:d4:6c:17:dd:39:74:ca:e7:fc:53:7b:
         ce:8c:0f:4a:42:49:03:60:fe:60:a4:fe:81:46:2c:27:07:b0:
         88:4d:37:ea:7a:d5:f8:e2:22:97:4c:21:45:3b:d3:08:45:f4:
         47:b7:57:3a:d0:fd:1a:f1:61:0b:2f:32:c7:e9:40:7a:41:b3:
         d3:98:2a:ed:5c:c3:7e:20:9d:f3:92:46:c2:40:76:ff:3c:39:
         05:12:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----