Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZsaV1HzXeDVwRmolv-g3PqpUJ0.cer
File:                     LZsaV1HzXeDVwRmolv-g3PqpUJ0.cer (raw, json)
Hash identifier:          L8e5yAVpVihhAEJMbGu6nqe0P3jv1HP5X4r4XEVYC8A=
Subject key identifier:   2D:9B:1A:57:51:F3:5D:E0:D5:C1:19:A8:96:FF:A0:DC:FA:A9:50:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0113D3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9138693/819B6B969EAC11E992687376C4F9AE02/LZsaV1HzXeDVwRmolv-g3PqpUJ0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9138693/819B6B969EAC11E992687376C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 25 May 2021 23:58:03 +0000
Certificate not after:    Sat 28 May 2022 00:00:00 +0000
Subordinate resources:    IP: 2406:f880::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70611 (0x113d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 25 23:58:03 2021 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=A9138693/serialNumber=2D9B1A5751F35DE0D5C119A896FFA0DCFAA9509D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:14:c6:69:87:95:1a:f5:23:6d:a9:cd:8a:
                    ad:51:25:d3:03:f2:97:3f:79:25:f4:f3:ef:45:f4:
                    91:a8:18:f1:50:ee:66:9f:0a:f3:0b:7f:eb:0d:ef:
                    12:02:e7:d7:ed:6f:c8:43:8a:14:9d:a0:da:3c:99:
                    3b:a1:25:94:45:18:38:e1:83:07:1f:f3:58:d6:fc:
                    12:59:6b:43:a7:99:c6:45:72:ed:bb:df:e1:78:e1:
                    37:a6:27:56:26:e0:f8:03:9a:6a:ee:dc:06:fc:c2:
                    3d:2b:65:25:db:b2:2d:05:11:55:1b:ac:de:5d:f7:
                    a3:3c:06:99:d3:2d:b3:ba:89:b2:15:13:59:53:28:
                    ab:47:70:d1:1d:c7:5d:f7:92:ba:49:9f:24:78:44:
                    e5:7e:b9:9a:18:48:be:52:00:70:36:b1:61:1a:4a:
                    cb:9e:a7:4b:2a:88:20:97:d3:85:a5:51:49:ef:e3:
                    3a:40:bf:e7:ae:14:8c:ef:c1:8c:fc:9c:b4:e0:d1:
                    71:ae:d3:60:35:e2:d3:fe:11:5b:79:55:e0:fa:90:
                    9e:a1:ec:b0:fb:f7:c6:26:f6:a8:59:f6:e3:47:dc:
                    ee:ae:60:e9:c4:3a:21:a6:1e:43:7a:1e:29:c1:d1:
                    37:48:cc:57:44:33:ad:2c:90:d7:50:82:9e:9e:6a:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9B:1A:57:51:F3:5D:E0:D5:C1:19:A8:96:FF:A0:DC:FA:A9:50:9D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138693/819B6B969EAC11E992687376C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138693/819B6B969EAC11E992687376C4F9AE02/LZsaV1HzXeDVwRmolv-g3PqpUJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f880::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:06:42:5e:46:24:fa:98:2a:18:f4:a1:1e:a1:d9:28:aa:e6:
         34:ff:85:9d:33:64:ad:14:29:45:4a:cb:f2:2a:d4:c8:7e:ec:
         5f:10:19:7a:56:8d:49:fe:4f:ad:ea:6f:e6:5e:66:fb:6a:c4:
         c8:9f:89:1c:8b:7e:1d:a1:ab:24:42:c1:b3:2a:d8:a7:1d:4f:
         83:ed:6f:58:99:55:df:d6:34:e7:af:61:36:68:77:91:41:0d:
         10:13:7e:c6:fb:60:ce:ac:4f:cc:27:12:e8:30:c9:83:a1:7e:
         50:64:ed:68:f9:0b:60:45:52:4d:39:3a:19:f7:09:7a:7c:41:
         62:94:88:89:ed:33:c5:ed:30:0b:73:64:69:82:f5:d6:8a:85:
         9f:0f:92:e3:56:83:0d:45:23:70:77:0c:40:fb:14:54:82:3b:
         5b:f0:0c:28:c9:fe:52:69:aa:ab:d9:f6:bb:c9:63:e6:13:49:
         d4:0b:17:d8:b7:48:52:4c:bc:21:56:6d:ce:b3:f0:8f:d4:6f:
         56:34:ef:55:f7:30:83:65:94:65:af:f6:3e:6e:d1:95:a0:e4:
         6c:2c:7e:8a:53:08:2a:84:f6:b3:b8:33:c7:cf:d8:04:2a:c2:
         0c:e6:ab:23:3f:aa:bc:91:03:41:c6:27:3e:42:89:ab:9f:6d:
         0a:be:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----