Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqGLBQAJrErII4xgqB630q449T8.cer
File:                     OqGLBQAJrErII4xgqB630q449T8.cer (raw, json)
Hash identifier:          8A7CJ1+4Y7xqqMZa5Op4cdKocDijogG12Xw+M05bU0k=
Subject key identifier:   3A:A1:8B:05:00:09:AC:4A:C8:23:8C:60:A8:1E:B7:D2:AE:38:F5:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B9E6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911AE11/17D9DC34D7AA11E8AB1F9944C4F9AE02/OqGLBQAJrErII4xgqB630q449T8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911AE11/17D9DC34D7AA11E8AB1F9944C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 17:38:45 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 136769
                          IP: 2001:df1:b500::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113126 (0x1b9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 30 17:38:45 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A911AE11/serialNumber=3AA18B050009AC4AC8238C60A81EB7D2AE38F53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:9c:58:06:68:e5:95:cc:8f:f3:f3:18:9b:
                    aa:f8:c2:8f:22:a7:f6:38:e2:b6:1c:73:dc:f1:20:
                    db:32:44:64:c9:a9:aa:d1:d8:a5:d1:ab:e9:a5:7d:
                    44:72:3a:1f:d4:06:f5:db:2f:7c:1e:c7:86:74:be:
                    f4:bd:50:a7:f2:d8:15:f9:79:36:e2:0b:55:cb:98:
                    41:1a:a5:5a:91:f8:b5:78:bd:eb:20:11:47:d9:01:
                    78:bc:40:80:03:24:02:59:74:48:1c:f9:2a:dc:9d:
                    60:c9:0d:a9:40:ef:ee:52:da:ae:e7:66:91:1d:64:
                    18:26:a4:58:4f:27:11:e6:6e:3d:3d:41:51:18:a8:
                    b7:a3:5c:90:d3:5d:d9:2d:c4:43:4a:e6:7a:e0:63:
                    01:03:5c:d2:49:93:72:f5:de:c2:7c:03:17:7d:5e:
                    b0:40:7b:47:67:cb:5b:cc:5f:49:05:ae:6a:f0:84:
                    07:b7:11:21:6c:ba:05:02:ac:91:28:bb:cd:a5:1c:
                    71:0e:b6:2c:ae:e1:b4:6e:6c:41:27:ae:e4:ce:45:
                    bd:14:cf:22:80:cd:3e:ee:e4:76:be:bf:f8:3a:c1:
                    09:d4:83:da:af:ea:c7:f4:1a:b4:ad:d0:e4:53:3f:
                    36:e8:e2:66:52:eb:1f:fe:00:b0:79:be:75:93:b6:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A1:8B:05:00:09:AC:4A:C8:23:8C:60:A8:1E:B7:D2:AE:38:F5:3F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911AE11/17D9DC34D7AA11E8AB1F9944C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911AE11/17D9DC34D7AA11E8AB1F9944C4F9AE02/OqGLBQAJrErII4xgqB630q449T8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136769

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:b500::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:1a:b8:6b:fb:51:ca:9f:97:26:8b:e9:f5:79:da:b9:a2:cb:
         60:d8:d7:ed:77:1a:20:a2:0d:eb:c5:2c:b4:b1:8e:7b:aa:09:
         f2:49:8c:2a:a1:66:b1:4a:34:a1:ff:32:e9:a5:fb:bd:59:93:
         63:f9:8e:02:32:52:41:38:6c:44:9a:e0:e5:18:86:cb:7b:17:
         00:ea:e3:d2:a0:37:0e:85:5b:78:b7:75:41:9f:bf:64:1d:a4:
         44:f3:9b:11:b3:32:0a:08:19:69:ee:ee:21:07:fd:9b:4e:95:
         35:36:71:d5:40:8c:3c:50:2c:4e:fd:19:cb:b0:57:73:7d:4a:
         26:38:47:f5:59:4f:61:b8:2f:65:fc:2a:16:46:bb:62:54:1d:
         17:fc:d8:7a:5f:5c:43:95:44:bc:18:d7:db:a1:d2:6d:15:a0:
         73:ae:4f:56:4b:96:25:e9:ee:f1:1a:cc:4d:a1:85:a9:27:f9:
         df:4c:c9:c0:79:30:0c:85:85:f0:ed:a8:a0:3c:4c:2f:91:79:
         94:8d:e0:d7:65:3a:99:8c:61:45:ca:63:66:a3:39:05:05:df:
         a6:30:55:30:68:07:2c:86:78:bc:de:20:94:b1:0b:0c:9c:72:
         e8:fc:59:27:1d:d4:ce:78:be:ba:e2:fe:45:60:86:ad:61:0c:
         c6:00:73:25
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAbnmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgzMDE3Mzg0NVoXDTIzMTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUFFMTExMTAvBgNVBAUTKDNBQTE4QjA1MDAwOUFDNEFDODIzOEM2
MEE4MUVCN0QyQUUzOEY1M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPnZxYBmjllcyP8/MYm6r4wo8ip/Y44rYcc9zxINsyRGTJqarR2KXRq+mlfURy
Oh/UBvXbL3wex4Z0vvS9UKfy2BX5eTbiC1XLmEEapVqR+LV4vesgEUfZAXi8QIAD
JAJZdEgc+SrcnWDJDalA7+5S2q7nZpEdZBgmpFhPJxHmbj09QVEYqLejXJDTXdkt
xENK5nrgYwEDXNJJk3L13sJ8Axd9XrBAe0dny1vMX0kFrmrwhAe3ESFsugUCrJEo
u82lHHEOtiyu4bRubEEnruTORb0UzyKAzT7u5Ha+v/g6wQnUg9qv6sf0GrSt0ORT
Pzbo4mZS6x/+ALB5vnWTtp1BAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUOqGLBQAJ
rErII4xgqB630q449T8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFBRTExLzE3RDlEQzM0RDdBQTExRThBQjFGOTk0NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExQUUxMS8xN0Q5REMzNEQ3QUExMUU4QUIxRjk5NDRDNEY5QUUwMi9PcUdMQlFB
SnJFcklJNHhncUI2MzBxNDQ5VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhZBMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8bUAMA0G
CSqGSIb3DQEBCwUAA4IBAQDMGrhr+1HKn5cmi+n1edq5ostg2Nftdxogog3rxSy0
sY57qgnySYwqoWaxSjSh/zLppfu9WZNj+Y4CMlJBOGxEmuDlGIbLexcA6uPSoDcO
hVt4t3VBn79kHaRE85sRszIKCBlp7u4hB/2bTpU1NnHVQIw8UCxO/RnLsFdzfUom
OEf1WU9huC9l/CoWRrtiVB0X/Nh6X1xDlUS8GNfbodJtFaBzrk9WS5Yl6e7xGsxN
oYWpJ/nfTMnAeTAMhYXw7aigPEwvkXmUjeDXZTqZjGFFymNmozkFBd+mMFUwaAcs
hni83iCUsQsMnHLo/FknHdTOeL664v5FYIatYQzGAHMl
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:42 2024 by rpki-client on console-ams.rpki-client.org