Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKet54wTaw5-UHnJm_-4HSHceng.cer
File:                     SKet54wTaw5-UHnJm_-4HSHceng.cer (raw, json)
Hash identifier:          CbNGr2U6m7q+M7khL01moYFMiLiHZmlu67a/KY0uhoE=
Subject key identifier:   48:A7:AD:E7:8C:13:6B:0E:7E:50:79:C9:9B:FF:B8:1D:21:DC:7A:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0120E9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9132275/308C471650D411E7AE665810C4F9AE02/SKet54wTaw5-UHnJm_-4HSHceng.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9132275/308C471650D411E7AE665810C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 30 Jul 2021 05:09:55 +0000
Certificate not after:    Fri 30 Sep 2022 00:00:00 +0000
Subordinate resources:    AS: 17882
                          AS: 38273
                          AS: 55408
                          IP: 103.11.192.0/22
                          IP: 122.201.16.0/20
                          IP: 150.129.140.0/22
                          IP: 202.70.32.0/20
                          IP: 203.17.23.0/24
                          IP: 203.21.120.0/24
                          IP: 203.23.49.0/24
                          IP: 203.23.199.0/24
                          IP: 203.98.76.0/23
                          IP: 2405:5700::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73961 (0x120e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 30 05:09:55 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A9132275/serialNumber=48A7ADE78C136B0E7E5079C99BFFB81D21DC7A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:0f:a3:0c:7d:cb:7a:ee:a3:99:18:c5:5c:
                    bf:f0:47:e5:4e:94:98:00:99:92:d5:eb:1b:f8:59:
                    e6:d9:6b:23:81:80:96:e1:61:bd:4c:76:b3:b1:a9:
                    46:4a:4a:e9:d8:7e:7f:f1:ca:6e:4f:4e:d7:f8:4c:
                    b2:58:80:89:88:e3:c9:c4:9e:00:10:7b:9b:3f:ca:
                    86:04:37:e6:5f:db:19:e6:4d:96:23:87:bb:f1:5c:
                    ff:4b:b3:2b:77:ab:e5:2a:82:17:8f:64:47:f0:39:
                    bb:15:a3:fe:d3:80:4e:7f:f0:18:48:3c:44:bc:29:
                    3a:f4:74:f3:d1:0e:c2:28:a6:17:a2:fb:a9:fe:42:
                    9b:47:d2:ac:c0:e2:0e:40:73:ee:9f:c0:06:21:d5:
                    a5:99:d2:50:b9:64:19:dd:4e:50:5b:f6:aa:8d:e4:
                    89:fa:bd:b2:90:14:69:39:cb:dd:07:99:a2:fd:7a:
                    ce:f8:5f:8d:93:5a:08:fd:56:ff:4c:c1:a9:ed:11:
                    d7:05:96:04:52:41:02:ed:dc:3a:af:a0:52:07:fc:
                    35:57:b3:9f:30:b5:4c:1a:c0:24:a7:62:5e:40:6b:
                    26:9a:6f:3f:5b:75:62:a8:5b:c7:c5:d3:13:9e:ee:
                    67:02:65:ae:9d:fe:59:04:67:c4:9b:6f:a4:d4:db:
                    7a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A7:AD:E7:8C:13:6B:0E:7E:50:79:C9:9B:FF:B8:1D:21:DC:7A:78
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132275/308C471650D411E7AE665810C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132275/308C471650D411E7AE665810C4F9AE02/SKet54wTaw5-UHnJm_-4HSHceng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17882
                  38273
                  55408

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.192.0/22
                  122.201.16.0/20
                  150.129.140.0/22
                  202.70.32.0/20
                  203.17.23.0/24
                  203.21.120.0/24
                  203.23.49.0/24
                  203.23.199.0/24
                  203.98.76.0/23
                IPv6:
                  2405:5700::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:1b:82:5f:d0:c5:cb:32:0d:c1:04:07:47:b5:5d:68:a9:d2:
         86:af:06:9b:e7:be:11:7c:3c:ae:f3:5c:66:ec:ac:4c:63:a9:
         03:9a:09:d0:76:96:b3:7b:a5:ba:e0:85:5f:96:9c:50:bd:37:
         34:8c:07:58:82:05:1d:2c:1f:78:7f:30:19:cd:91:5a:67:c8:
         54:ce:7a:30:35:26:0d:e3:4d:14:ba:a2:54:1c:05:07:bc:de:
         f7:23:be:12:83:f1:89:c8:bc:6a:09:74:fa:68:1e:94:18:08:
         4d:09:4e:ca:f0:ba:11:5f:2b:d2:fa:62:b3:1d:8e:67:75:0d:
         dd:62:57:ae:c1:06:f6:68:da:20:67:b0:a4:dc:01:03:f2:98:
         d4:03:20:b4:3a:1f:00:be:89:1b:f4:ad:74:32:c0:3f:1e:f3:
         9a:13:e7:e6:48:3d:c1:a1:bf:fd:3a:1f:df:1f:18:68:df:69:
         f6:67:11:76:a6:97:91:71:36:c4:c6:a8:71:f5:02:e7:31:bc:
         97:63:d5:0a:bb:f5:c6:c1:17:09:a2:41:eb:75:aa:d6:6e:b8:
         a2:01:75:0a:c6:87:a2:d1:3e:56:5d:44:1f:bb:e1:70:00:52:
         15:5e:64:55:f3:24:09:8b:79:08:3b:27:a1:51:2d:44:28:99:
         b9:02:d9:c9
-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgIDASDpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDczMDA1MDk1NVoXDTIyMDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzIyNzUxMTAvBgNVBAUTKDQ4QTdBREU3OEMxMzZCMEU3RTUwNzlD
OTlCRkZCODFEMjFEQzdBNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCecw+jDH3Leu6jmRjFXL/wR+VOlJgAmZLV6xv4WebZayOBgJbhYb1MdrOxqUZK
SunYfn/xym5PTtf4TLJYgImI48nEngAQe5s/yoYEN+Zf2xnmTZYjh7vxXP9Lsyt3
q+UqghePZEfwObsVo/7TgE5/8BhIPES8KTr0dPPRDsIophei+6n+QptH0qzA4g5A
c+6fwAYh1aWZ0lC5ZBndTlBb9qqN5In6vbKQFGk5y90HmaL9es74X42TWgj9Vv9M
wantEdcFlgRSQQLt3DqvoFIH/DVXs58wtUwawCSnYl5Aayaabz9bdWKoW8fF0xOe
7mcCZa6d/lkEZ8Sbb6TU23qxAgMBAAGjggNXMIIDUzAdBgNVHQ4EFgQUSKet54wT
aw5+UHnJm/+4HSHcengwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMyMjc1LzMwOEM0NzE2NTBENDExRTdBRTY2NTgxMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzMjI3NS8zMDhDNDcxNjUwRDQxMUU3QUU2NjU4MTBDNEY5QUUwMi9TS2V0NTR3
VGF3NS1VSG5KbV8tNEhTSGNlbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQgBAf8EFDAS
oBAwDgICRdoCAwCVgQIDANhwMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQC
ZwvAAwQEeskQAwQCloGMAwQEykYgAwQAyxEXAwQAyxV4AwQAyxcxAwQAyxfHAwQB
y2JMMA0EAgACMAcDBQAkBVcAMA0GCSqGSIb3DQEBCwUAA4IBAQCJG4Jf0MXLMg3B
BAdHtV1oqdKGrwab574RfDyu81xm7KxMY6kDmgnQdpaze6W64IVflpxQvTc0jAdY
ggUdLB94fzAZzZFaZ8hUznowNSYN400UuqJUHAUHvN73I74Sg/GJyLxqCXT6aB6U
GAhNCU7K8LoRXyvS+mKzHY5ndQ3dYleuwQb2aNogZ7Ck3AED8pjUAyC0Oh8Avokb
9K10MsA/HvOaE+fmSD3Bob/9Oh/fHxho32n2ZxF2ppeRcTbExqhx9QLnMbyXY9UK
u/XGwRcJokHrdarWbriiAXUKxoei0T5WXUQfu+FwAFIVXmRV8yQJi3kIOyehUS1E
KJm5AtnJ
-----END CERTIFICATE-----