Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPZSLONvC46Njyu9LrOuLFqftBk.cer
File:                     OPZSLONvC46Njyu9LrOuLFqftBk.cer (raw, json)
Hash identifier:          Zahu9w2sTD0z2lN5WDiLmT3C0LdzxV+ltz1BKu7nlCw=
Subject key identifier:   38:F6:52:2C:E3:6F:0B:8E:8D:8F:2B:BD:2E:B3:AE:2C:5A:9F:B4:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B9B7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913F274/E04C1B302CA911EC9A080F51C4F9AE02/OPZSLONvC46Njyu9LrOuLFqftBk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913F274/E04C1B302CA911EC9A080F51C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 14:13:48 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 142433
                          IP: 103.168.142.0/23
                          IP: 2407:90c0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113079 (0x1b9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 30 14:13:48 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A913F274/serialNumber=38F6522CE36F0B8E8D8F2BBD2EB3AE2C5A9FB419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:f8:bb:d4:7b:ec:ef:0b:c4:5d:44:35:85:
                    2f:f2:e9:d2:4e:a5:3c:b2:a1:16:f0:30:58:45:f8:
                    87:9c:fd:55:02:99:43:5c:ab:f9:22:80:f9:78:62:
                    65:64:a8:7f:34:27:ae:6f:6d:43:ca:9b:d6:3a:6b:
                    f9:a4:5f:c0:53:13:0f:e7:7f:26:c1:8d:6a:c5:6a:
                    44:6c:5c:86:15:e5:42:c3:33:c6:67:27:94:45:df:
                    b3:ea:59:ec:bd:1b:eb:b2:50:32:d8:21:6d:8d:3a:
                    c0:31:09:73:78:05:b9:f3:d0:ad:da:14:81:a0:c0:
                    9e:d2:53:74:22:33:98:e6:6a:f4:3f:14:d1:6c:c5:
                    04:2a:db:e8:c8:05:11:d8:40:82:61:b0:75:f9:6f:
                    90:c1:16:32:3a:eb:af:88:b8:90:1e:0f:a0:09:a0:
                    0f:09:bb:38:26:9f:3c:c1:ea:9b:96:46:31:41:2d:
                    1c:95:44:f0:81:45:b2:a5:66:2e:eb:e8:e8:9e:8a:
                    b6:4b:1f:a2:e2:a0:15:f0:53:4d:2e:67:c3:65:51:
                    3e:3e:ac:5e:80:23:7b:9a:8c:22:6d:71:c0:df:ed:
                    e6:08:08:d2:04:d9:cb:66:c2:81:8c:af:14:2d:56:
                    bf:82:99:ec:c7:11:67:63:63:95:49:f5:fe:be:b4:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:52:2C:E3:6F:0B:8E:8D:8F:2B:BD:2E:B3:AE:2C:5A:9F:B4:19
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F274/E04C1B302CA911EC9A080F51C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F274/E04C1B302CA911EC9A080F51C4F9AE02/OPZSLONvC46Njyu9LrOuLFqftBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142433

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.142.0/23
                IPv6:
                  2407:90c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:a0:c8:e4:15:ea:06:de:4e:58:5b:13:e2:b5:62:13:fd:1d:
         1a:c2:b8:73:dc:63:bb:42:b1:68:21:78:6f:6b:87:c0:50:51:
         09:b2:2a:b9:50:f6:61:99:83:4a:4f:fc:ea:34:51:71:1d:a1:
         cd:d2:e3:9c:d4:1d:ac:2c:fe:ed:d6:f0:51:b5:e7:5d:f8:17:
         7a:22:35:08:bf:72:7b:aa:b5:b3:d8:d3:22:ca:31:9c:b4:49:
         46:83:e3:82:db:a2:08:03:9d:5b:8c:61:5f:b4:7c:54:ad:ae:
         2d:de:ad:7a:b3:ae:41:1e:ff:b1:f7:8b:ae:6d:ea:7a:1b:13:
         08:ba:34:be:67:24:bc:d6:c2:ce:fa:b1:c6:c4:a4:48:47:3f:
         19:b4:76:b0:91:70:4b:0f:e6:0d:a9:aa:3e:40:2f:30:34:97:
         e7:83:b2:76:e4:45:93:a9:7d:1b:7c:65:5c:4a:bb:4b:1d:56:
         5f:2e:73:8d:1d:89:06:26:a8:bf:7c:07:69:b8:ef:ae:f5:04:
         14:55:5d:38:a8:19:c9:ec:a9:c9:35:b3:84:91:43:9d:84:97:
         78:c5:5c:59:09:58:5a:61:fe:9b:3b:1a:b9:18:4b:81:3d:ae:
         6b:00:1d:39:4e:02:8e:22:e5:0d:fe:28:81:7c:f5:46:2b:0f:
         31:85:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----