Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PhOKkPiiVQwiCK346pppiRBcFN0.cer
File:                     PhOKkPiiVQwiCK346pppiRBcFN0.cer (raw, json)
Hash identifier:          pUFuRlVcv5hgwdKGXCejC2twsLDXGmsC9+1Vm+XLdZ0=
Subject key identifier:   3E:13:8A:90:F8:A2:55:0C:22:08:AD:F8:EA:9A:69:89:10:5C:14:DD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013E36
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91448A5/30F12D74532811EC8597F643C4F9AE02/PhOKkPiiVQwiCK346pppiRBcFN0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91448A5/30F12D74532811EC8597F643C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Jan 2022 16:14:24 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 203.31.23.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81462 (0x13e36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  5 16:14:24 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A91448A5/serialNumber=3E138A90F8A2550C2208ADF8EA9A6989105C14DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:70:04:5c:42:aa:1b:89:e8:8d:5f:71:b4:
                    8e:a2:b9:84:af:ef:b0:7f:09:99:d7:06:31:16:41:
                    3c:2b:c1:7f:1b:30:32:92:1e:eb:17:06:22:a9:74:
                    97:6d:07:92:2b:d8:a1:2e:79:ca:4d:e5:34:bb:01:
                    ac:b6:7d:c9:3c:b8:21:19:a3:dc:0a:6c:e5:7e:d8:
                    1c:e2:bf:19:f6:4f:01:86:d3:d7:43:23:10:a7:1f:
                    2d:d7:50:5e:a9:54:de:fe:b2:f9:25:3d:9a:b7:5d:
                    60:f9:4e:16:4b:3c:b0:d2:93:6d:f2:b5:4e:e0:47:
                    9e:51:4c:8a:57:f8:96:b3:31:1d:7a:2c:57:49:3d:
                    14:93:0d:2a:76:6f:89:9a:30:d1:26:74:50:d0:fc:
                    59:fb:35:5d:5b:7f:04:3d:1b:a1:3e:85:db:0f:f9:
                    ab:f8:80:8b:96:b5:88:f5:87:5b:39:c6:fe:4a:63:
                    b6:62:d8:51:3c:c5:16:7e:41:bb:03:55:b4:92:c0:
                    50:d7:eb:da:2d:1f:80:8c:c6:35:ac:a5:73:33:6a:
                    5e:3d:d5:6b:a1:9f:0a:70:b7:2a:61:74:ed:98:20:
                    bd:6a:bb:56:07:cd:c9:b1:b3:01:32:7e:14:51:46:
                    be:db:62:75:da:6f:22:54:fa:f2:95:8d:19:e3:8b:
                    85:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:13:8A:90:F8:A2:55:0C:22:08:AD:F8:EA:9A:69:89:10:5C:14:DD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91448A5/30F12D74532811EC8597F643C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91448A5/30F12D74532811EC8597F643C4F9AE02/PhOKkPiiVQwiCK346pppiRBcFN0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:50:ba:bf:b5:ce:e9:ba:24:46:48:40:14:9c:f6:6e:05:c3:
         30:c7:73:ca:4a:a8:d7:d6:a7:ca:13:5a:62:b1:cb:28:ae:a5:
         43:bb:4e:ee:bd:0d:bc:81:52:df:d9:49:e5:ed:7b:17:fa:47:
         88:93:4c:ef:dd:e8:b5:cc:ac:ed:a1:e8:f6:4a:fc:e6:8c:fe:
         56:75:b7:99:c4:d2:8c:67:21:b5:dc:d0:39:52:81:3b:55:33:
         a4:9d:9b:90:b3:60:85:e8:1c:1e:31:41:9e:cd:ca:1c:df:ea:
         54:46:58:ad:6b:92:b1:f4:d0:82:e1:c8:27:2f:43:72:1d:a7:
         ee:79:2b:3d:40:3d:df:c7:3d:76:a2:4e:a9:a8:38:dc:43:d1:
         a1:46:38:07:9f:55:75:99:a6:f5:bd:80:58:b2:ca:36:df:d5:
         20:15:1e:43:e4:7b:1a:a8:6b:ad:d7:14:be:4b:a2:71:58:a3:
         33:f2:0d:59:ca:bc:18:4f:8b:65:29:b6:ac:0c:82:7f:fe:ad:
         e9:4b:f3:d4:67:46:7a:a7:87:1a:ad:30:b8:32:7b:a1:95:3d:
         f7:42:01:fc:4f:e7:33:ae:c4:40:4e:52:1e:a9:f1:a9:6e:9b:
         c5:fb:23:ea:f7:3a:09:32:e9:6e:3a:b7:10:47:5b:12:f5:22:
         8a:02:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----