Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SADX-QWY09wA47R__9LbBRrFHWE.cer
File:                     SADX-QWY09wA47R__9LbBRrFHWE.cer (raw, json)
Hash identifier:          sElmXgYHoZZiOiD2aDhv154wrEVkcAAOIVNnVoKIxo4=
Subject key identifier:   48:00:D7:F9:05:98:D3:DC:00:E3:B4:7F:FF:D2:DB:05:1A:C5:1D:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018E1A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/SADX-QWY09wA47R__9LbBRrFHWE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Mar 2023 01:06:33 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 141687
                          IP: 103.161.86.0/23
                          IP: 2407:a40::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101914 (0x18e1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 01:06:33 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=A9160AB7/serialNumber=4800D7F90598D3DC00E3B47FFFD2DB051AC51D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:3b:69:70:f7:38:52:5e:a1:45:ba:47:b1:
                    ac:94:d0:ea:0a:4b:c7:2e:d8:80:0a:0e:20:a0:df:
                    9e:b3:f1:98:ae:39:90:cb:7f:b2:23:a8:ae:7a:94:
                    68:c9:f0:a7:ec:3a:8c:ed:96:56:0c:96:63:2c:f4:
                    9c:56:85:06:e9:8f:5c:ce:cb:5a:6f:a9:b5:03:de:
                    d5:78:09:ac:95:b5:83:4f:dd:4d:89:fe:a7:08:e2:
                    4e:0d:71:12:dc:34:7e:a6:a6:0f:6d:42:14:ca:24:
                    2c:46:6a:d8:36:87:68:57:c1:e1:31:26:e0:1c:46:
                    12:15:ae:d4:b5:9f:d6:4c:36:e1:3a:e4:31:79:3d:
                    5c:1d:37:35:81:27:f0:9d:c5:16:e9:ee:30:33:0a:
                    96:2f:fe:30:f1:10:6a:01:8e:00:e5:30:88:61:96:
                    e0:c3:d5:8f:2f:af:a8:3b:20:b9:dc:d7:06:a5:7f:
                    b6:ea:dd:93:72:6a:c9:47:20:d1:5e:4d:e7:44:c3:
                    1b:f6:86:ad:bd:73:24:bf:57:53:d2:cf:ae:ed:f9:
                    e4:fa:df:4d:65:d3:41:9d:04:3e:64:42:a4:cc:2e:
                    46:30:fc:2d:bb:ee:aa:98:35:4a:2a:70:de:bb:2b:
                    fc:b3:86:09:a3:44:bd:f3:5e:33:8a:49:56:ad:6e:
                    67:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:00:D7:F9:05:98:D3:DC:00:E3:B4:7F:FF:D2:DB:05:1A:C5:1D:61
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/SADX-QWY09wA47R__9LbBRrFHWE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141687

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.86.0/23
                IPv6:
                  2407:a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:69:5c:44:3d:20:59:30:2b:06:81:32:5e:0a:84:3d:75:
         8a:64:c1:1b:d8:4e:fc:14:38:50:94:cf:f0:26:e2:aa:d6:34:
         d4:2b:ba:d5:60:e9:c1:66:4d:30:1f:99:27:bc:b3:7f:1a:fd:
         7f:f2:d8:d2:e9:7b:cf:64:3b:0f:ca:df:70:af:bc:18:6a:f5:
         54:98:ff:79:c3:97:28:95:a6:d9:16:21:c7:e6:1d:25:86:16:
         42:e2:01:18:6c:f4:52:e9:8c:5c:8a:6c:40:b1:4b:91:1e:8f:
         f0:e4:91:e7:0c:b6:a6:3d:e2:77:3a:88:ee:88:78:10:68:dc:
         d4:60:e8:db:4f:03:c8:31:b9:e5:07:51:a6:37:e0:11:d8:48:
         4e:7c:84:40:cd:66:78:46:73:48:80:b6:99:b6:14:ea:2f:59:
         5d:db:90:4d:9e:14:ab:f8:e9:ee:67:fd:a8:b3:74:82:21:78:
         bf:4c:bd:7b:4b:22:3b:e1:66:40:65:3b:ce:f2:7c:70:d4:65:
         91:d2:85:ed:ae:83:fb:1d:4a:21:04:3f:63:54:53:d3:5a:fa:
         cb:6e:13:2f:68:b9:cc:7b:31:3b:0a:ff:7d:6e:6a:f2:6b:de:
         d8:4c:c2:5f:3b:84:2b:69:56:5b:eb:15:1f:0c:97:1d:fa:5d:
         2f:ea:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----