Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlZJUBM4sfC_fAYiGjrJfcCxFMQ.cer
File:                     OlZJUBM4sfC_fAYiGjrJfcCxFMQ.cer (raw, json)
Hash identifier:          sA/rxt8zfbW71KOrr3ihJJm03E/21sDAYkJGqu5LRuM=
Subject key identifier:   3A:56:49:50:13:38:B1:F0:BF:7C:06:22:1A:3A:C9:7D:C0:B1:14:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01775A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A7AF1/FEE5C48CE99C11ECB92FF629C4F9AE02/OlZJUBM4sfC_fAYiGjrJfcCxFMQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A7AF1/FEE5C48CE99C11ECB92FF629C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Nov 2022 21:02:21 +0000
Certificate not after:    Wed 01 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 2400:8cc0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96090 (0x1775a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  1 21:02:21 2022 GMT
            Not After : Mar  1 00:00:00 2023 GMT
        Subject: CN=A91A7AF1/serialNumber=3A5649501338B1F0BF7C06221A3AC97DC0B114C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:af:08:4e:2f:d5:3c:b0:9e:fe:15:e7:6a:
                    50:b9:19:6c:b0:7d:8a:1e:fa:9f:f6:de:bb:a7:df:
                    d4:65:55:49:1f:44:85:1a:7c:cf:b4:78:d4:01:fe:
                    59:95:9b:83:46:d4:9e:e5:e1:88:55:81:59:09:07:
                    ae:d2:1f:46:1c:de:c5:e1:0e:19:cc:4e:f5:31:dc:
                    f5:a3:1b:ef:29:44:d6:fd:27:01:ba:15:e2:dc:0e:
                    28:7d:47:dd:72:a7:25:13:37:be:4a:eb:cc:72:a6:
                    9d:84:10:83:4f:c5:13:ce:b1:41:4f:82:04:65:5f:
                    a5:01:e0:72:47:07:9f:0e:98:12:ba:a1:dd:eb:81:
                    38:a0:6e:bd:c3:a3:79:6f:56:cd:59:be:f8:42:ac:
                    d2:43:63:c2:45:dd:06:ab:95:e7:3b:c5:c9:0d:f4:
                    18:5c:57:be:8e:1e:67:34:e0:4d:9f:9f:14:9a:08:
                    d1:4a:3b:d0:3e:d0:52:15:9b:67:e9:f6:83:f8:23:
                    f6:61:ca:42:ed:5a:ae:fc:17:b9:6e:07:f6:a6:9f:
                    50:03:9c:51:ce:31:49:f6:60:86:b2:85:16:ad:75:
                    ec:df:06:3e:ad:e0:4e:35:2e:0b:2b:c5:96:bd:96:
                    26:4d:12:d5:85:51:9b:11:97:ff:7a:6f:d1:f3:59:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:56:49:50:13:38:B1:F0:BF:7C:06:22:1A:3A:C9:7D:C0:B1:14:C4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7AF1/FEE5C48CE99C11ECB92FF629C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7AF1/FEE5C48CE99C11ECB92FF629C4F9AE02/OlZJUBM4sfC_fAYiGjrJfcCxFMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:37:56:ea:48:02:59:62:6f:10:ba:37:09:7f:be:3d:9c:e1:
         b5:b6:45:82:6f:9d:bc:a7:71:ef:c8:0c:57:3d:d9:00:c4:88:
         b5:71:9e:bd:59:80:e0:14:e3:fd:54:9e:32:60:34:5e:53:f3:
         cc:59:30:55:45:4e:f4:4a:74:ed:d4:91:87:62:a9:77:f2:38:
         19:14:2f:97:7a:fe:37:cb:f0:cc:75:13:db:c7:c2:f6:f8:7e:
         e2:3f:9a:44:3a:94:a3:fd:74:61:79:92:1f:3e:95:61:b3:8d:
         6b:ec:5f:76:e1:9f:6f:fd:fe:28:fa:ae:45:b5:e0:e2:40:f5:
         72:ca:51:86:47:0e:60:85:d1:d9:1d:e3:45:f2:8b:2d:46:bc:
         de:4d:f9:15:54:ff:bc:e4:cf:d4:76:bd:d6:e5:a0:f5:3c:14:
         96:d0:be:d7:41:e1:6f:4f:fe:97:9b:28:2f:e2:2f:a8:ef:91:
         06:9d:08:57:0d:af:6f:17:30:ed:e7:40:4b:76:ce:54:f7:9f:
         43:79:b8:1e:5e:03:6e:89:a9:56:b2:19:80:c1:82:a6:ce:93:
         57:8d:35:9a:7a:27:ff:ec:17:6a:18:a3:fd:3c:8e:28:c5:cb:
         43:e3:73:0b:17:82:09:62:1f:9e:c6:7d:75:18:19:53:9c:b2:
         ca:59:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----