Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZEKD9qLk08U_gnw9NiHjiJHUxM.cer
File:                     JZEKD9qLk08U_gnw9NiHjiJHUxM.cer (raw, json)
Hash identifier:          KMsbHBsK4IMItBCN9uQl+/6Nr7fj2ITjORG58eDQvz4=
Subject key identifier:   25:91:0A:0F:DA:8B:93:4F:14:FE:09:F0:F4:D8:87:8E:22:47:53:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014B2C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D9208/6641C654853A11EA88004E81C4F9AE02/JZEKD9qLk08U_gnw9NiHjiJHUxM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D9208/6641C654853A11EA88004E81C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 22 Mar 2022 22:05:40 +0000
Certificate not after:    Sun 28 May 2023 00:00:00 +0000
Subordinate resources:    AS: 681

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84780 (0x14b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 22 22:05:40 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=A91D9208/serialNumber=25910A0FDA8B934F14FE09F0F4D8878E22475313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:17:2c:2f:c4:16:bf:00:29:1f:d0:78:19:
                    27:04:b3:64:c9:20:30:93:8f:f1:53:01:7e:3a:51:
                    41:88:83:12:c1:25:3b:6c:d9:c8:d3:a6:c2:f8:d3:
                    af:ae:29:47:d6:5f:5e:1b:35:6b:31:61:91:e6:a3:
                    1c:8e:3f:2f:78:c8:2f:69:f7:59:8f:5c:53:d6:ea:
                    e4:09:8c:cd:4e:45:ad:b8:ea:3b:16:7e:2d:32:59:
                    d5:eb:ec:a6:8c:1a:bd:9a:ea:53:a0:ea:9b:89:3b:
                    99:00:09:7e:82:08:a8:27:66:83:2f:e6:50:6b:eb:
                    44:04:2e:57:7f:63:38:a6:b6:00:44:18:ad:37:98:
                    01:93:ba:e1:86:99:9b:02:f0:5e:c4:e3:81:9c:1a:
                    45:7c:73:17:68:7d:06:e8:ca:37:60:1c:05:8f:5d:
                    55:64:e4:bd:32:07:61:4b:67:1e:59:20:1b:4b:4d:
                    b4:a0:32:cc:d4:93:d9:34:68:15:b7:60:41:30:03:
                    a9:1a:06:16:01:73:13:aa:14:a1:a3:98:0d:93:ed:
                    fb:0c:cb:bf:d8:71:b9:9c:88:4f:d6:5f:3f:3f:32:
                    fc:78:90:a6:c9:b0:9c:32:47:16:d7:68:55:6a:44:
                    3f:a3:20:35:2d:58:8e:1f:c9:77:99:0b:1c:b2:56:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:91:0A:0F:DA:8B:93:4F:14:FE:09:F0:F4:D8:87:8E:22:47:53:13
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9208/6641C654853A11EA88004E81C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9208/6641C654853A11EA88004E81C4F9AE02/JZEKD9qLk08U_gnw9NiHjiJHUxM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  681

    Signature Algorithm: sha256WithRSAEncryption
         59:fc:8c:f7:cd:7a:fa:13:53:42:7e:c3:e4:39:f8:76:42:5c:
         bd:6c:b2:d0:4d:14:6b:16:24:06:32:fc:34:04:37:77:a7:d0:
         dc:ad:a9:88:8d:ed:37:59:3e:8b:6f:14:38:74:7d:ce:38:d9:
         a3:4a:25:10:a0:34:f1:14:5a:ad:e7:73:a7:51:35:1f:65:e3:
         d6:3f:d5:cb:86:42:1b:03:a3:44:03:83:1c:8f:01:58:a0:9d:
         c4:d8:be:df:8e:74:18:66:44:fb:38:f3:a8:d8:45:9f:36:5c:
         6f:be:a6:01:ae:cb:86:48:45:98:10:8c:37:5e:d8:2f:42:0f:
         d3:6d:d8:15:9b:e3:4b:2b:d6:dc:5b:5c:a9:9e:61:6e:c5:96:
         42:f0:16:71:5a:3d:b4:f1:54:b7:43:21:b0:ea:d9:6b:75:1c:
         b2:99:23:f4:a9:48:87:58:f4:cb:d0:c1:47:1b:f9:7c:96:16:
         45:d0:19:8a:5f:a5:89:dd:03:f5:72:0e:52:b6:46:3f:fd:89:
         78:6b:e6:cb:ce:f7:8f:68:ba:3a:89:9e:b5:6f:5b:64:0d:81:
         23:cf:5b:e5:75:f8:07:d2:b2:52:92:37:9e:f5:94:14:1f:ce:
         ba:eb:36:8c:b1:1a:c8:e3:38:1b:7f:33:72:df:9a:33:df:72:
         31:c3:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----