Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdRI21KLRW60npKsBT-fZkqTg68.cer
File:                     TdRI21KLRW60npKsBT-fZkqTg68.cer (raw, json)
Hash identifier:          icqAigToNkUxc9hHTD6enZZKUFN/Puz6jXK1esxv0NM=
Subject key identifier:   4D:D4:48:DB:52:8B:45:6E:B4:9E:92:AC:05:3F:9F:66:4A:93:83:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01541D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/TdRI21KLRW60npKsBT-fZkqTg68.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 10 May 2022 00:46:19 +0000
Certificate not after:    Thu 01 Dec 2022 00:00:00 +0000
Subordinate resources:    IP: 103.37.236.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87069 (0x1541d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 10 00:46:19 2022 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91D80A3/serialNumber=4DD448DB528B456EB49E92AC053F9F664A9383AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:38:a1:25:94:7e:ec:6f:05:d1:9e:ca:ca:
                    24:9f:fc:17:e9:93:8c:24:8f:dc:23:ee:df:3c:70:
                    fe:5f:b7:b1:21:9d:dc:33:5d:b0:2e:ed:f3:2a:e8:
                    d0:80:68:ab:21:29:d9:e5:7c:18:71:e8:8b:cd:c1:
                    d2:59:f8:f4:dc:b6:82:a3:76:e5:60:8f:c7:1d:45:
                    4d:ee:69:00:5e:1e:c8:cb:c0:1f:ae:37:39:85:f9:
                    ad:fc:a5:01:2b:a8:f7:c2:dd:2a:dd:73:4c:76:a3:
                    5f:ca:17:be:28:66:1a:87:10:33:0a:27:89:87:7b:
                    ea:04:40:e6:38:b4:5b:76:9e:92:b8:0a:75:3f:2f:
                    23:a8:e7:e1:77:81:21:e1:51:b2:0c:bf:7c:73:51:
                    16:60:fb:64:a8:00:bf:3c:85:1a:98:77:10:19:68:
                    fc:f1:a7:76:f5:08:38:ca:be:7e:e8:c9:eb:52:2f:
                    8f:2b:82:e8:34:83:33:ea:3f:c8:63:be:81:bf:e7:
                    c5:1f:78:e3:49:8e:fd:68:95:50:57:5d:e1:22:90:
                    f3:23:e5:03:5f:1f:39:5f:6c:9a:ff:df:ac:c4:ff:
                    ee:b8:69:fb:3c:42:6d:ab:79:41:fe:f5:1e:13:49:
                    de:a3:00:ef:c8:4c:45:da:a1:a5:de:b0:65:65:f1:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:48:DB:52:8B:45:6E:B4:9E:92:AC:05:3F:9F:66:4A:93:83:AF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/TdRI21KLRW60npKsBT-fZkqTg68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:62:6f:d2:0b:8a:ad:d5:35:b5:b8:52:6c:d0:f4:88:a4:02:
         b4:b7:2c:36:c0:3b:c1:6b:5b:1f:94:3d:3b:76:bc:b3:bc:39:
         9a:c4:67:ce:85:44:3a:34:15:23:47:af:9b:97:d3:d1:3a:ea:
         74:f3:9e:ec:a5:f5:4a:1a:62:d8:3a:1e:9e:9b:22:55:00:61:
         27:0d:65:04:a9:f2:85:51:b0:9f:2f:4b:51:31:30:d8:22:4b:
         d3:58:69:1c:ea:b7:51:6c:97:40:77:69:b7:fa:db:19:6b:2e:
         06:94:12:87:57:98:55:e5:b5:4c:21:24:4d:b2:cf:d0:62:a1:
         b2:5f:43:2a:22:05:7c:61:ec:d8:1f:78:d9:f6:06:d2:0a:8f:
         d4:da:cb:af:e3:7d:20:67:06:8d:fe:d6:55:76:de:0d:53:c5:
         bd:96:cd:6b:ab:3d:22:71:d8:89:e1:59:20:59:6f:75:46:2e:
         93:9e:9c:5f:6d:74:cc:31:c6:5e:89:b8:c2:4e:fd:72:f3:41:
         b8:7e:4c:99:9d:f5:16:e5:68:5b:52:70:fc:2a:ef:67:87:32:
         8f:e8:72:f4:72:1c:cc:5b:2e:17:bc:63:aa:1e:01:b7:96:f7:
         71:85:82:13:1c:35:e7:7f:5c:3e:f8:33:15:b9:6e:6e:c5:10:
         3d:e8:97:51
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAVQdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDUxMDAwNDYxOVoXDTIyMTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDgwQTMxMTAvBgNVBAUTKDRERDQ0OERCNTI4QjQ1NkVCNDlFOTJB
QzA1M0Y5RjY2NEE5MzgzQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBAjihJZR+7G8F0Z7KyiSf/Bfpk4wkj9wj7t88cP5ft7EhndwzXbAu7fMq6NCA
aKshKdnlfBhx6IvNwdJZ+PTctoKjduVgj8cdRU3uaQBeHsjLwB+uNzmF+a38pQEr
qPfC3Srdc0x2o1/KF74oZhqHEDMKJ4mHe+oEQOY4tFt2npK4CnU/LyOo5+F3gSHh
UbIMv3xzURZg+2SoAL88hRqYdxAZaPzxp3b1CDjKvn7oyetSL48rgug0gzPqP8hj
voG/58UfeONJjv1olVBXXeEikPMj5QNfHzlfbJr/36zE/+64afs8Qm2reUH+9R4T
Sd6jAO/ITEXaoaXesGVl8YwhAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUTdRI21KL
RW60npKsBT+fZkqTg68wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ4MEEzLzk2QzUwOTc4Q0ZGQTExRUNBMjkwNzE2MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEODBBMy85NkM1MDk3OENGRkExMUVDQTI5MDcxNjFDNEY5QUUwMi9UZFJJMjFL
TFJXNjBucEtzQlQtZlprcVRnNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAJnJewwDQYJKoZIhvcNAQELBQADggEBAJlib9ILiq3VNbW4UmzQ
9IikArS3LDbAO8FrWx+UPTt2vLO8OZrEZ86FRDo0FSNHr5uX09E66nTznuyl9Uoa
Ytg6Hp6bIlUAYScNZQSp8oVRsJ8vS1ExMNgiS9NYaRzqt1Fsl0B3abf62xlrLgaU
EodXmFXltUwhJE2yz9BiobJfQyoiBXxh7NgfeNn2BtIKj9Tay6/jfSBnBo3+1lV2
3g1Txb2WzWurPSJx2InhWSBZb3VGLpOenF9tdMwxxl6JuMJO/XLzQbh+TJmd9Rbl
aFtScPwq72eHMo/ocvRyHMxbLhe8Y6oeAbeW93GFghMcNed/XD74MxW5bm7FED3o
l1E=
-----END CERTIFICATE-----