Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tujoq3K9a58o2bo56sKJSC3wjis.cer
File:                     Tujoq3K9a58o2bo56sKJSC3wjis.cer (raw, json)
Hash identifier:          QiVEZr5r0O/XDoqIiN84ogjjmvY/N7fGCx0PTBoLWSw=
Subject key identifier:   4E:E8:E8:AB:72:BD:6B:9F:28:D9:BA:39:EA:C2:89:48:2D:F0:8E:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       012049
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/Tujoq3K9a58o2bo56sKJSC3wjis.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 27 Jul 2021 09:26:24 +0000
Certificate not after:    Thu 31 Mar 2022 00:00:00 +0000
Subordinate resources:    AS: 59357
                          IP: 103.254.231.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73801 (0x12049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 27 09:26:24 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A91953C5/serialNumber=4EE8E8AB72BD6B9F28D9BA39EAC289482DF08E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:f4:6c:29:c7:8e:e8:6e:99:bd:e3:16:86:
                    c5:90:97:cd:5a:c1:24:33:27:76:d8:76:ee:a2:11:
                    91:8b:00:74:5e:6c:29:0b:6a:00:94:45:70:9e:f1:
                    c1:b7:cd:a3:d6:c1:a3:75:de:02:4c:2e:3f:33:1f:
                    7a:2a:5b:e8:01:05:03:1f:e5:ef:9f:5d:5b:b0:43:
                    9f:75:41:a4:c8:a4:5d:71:09:c6:17:4e:14:88:56:
                    a3:97:b7:34:32:4a:30:dc:0d:a5:dd:ec:3f:f7:5d:
                    6e:c9:b3:c1:c3:7f:73:5c:d7:aa:aa:0a:5a:cb:4f:
                    9c:f0:1d:7c:ec:96:4c:07:8b:87:9b:59:1f:fc:1e:
                    ed:bc:5a:1a:af:38:9a:2a:81:d0:89:c5:d3:89:f2:
                    a5:0c:01:d4:5f:b2:e1:86:3c:79:23:8e:b7:e3:64:
                    50:87:6e:39:b3:37:79:4c:ae:9d:41:1e:69:cd:e8:
                    22:3d:1d:98:76:08:a7:99:b2:2c:4e:4e:6b:c6:1b:
                    79:41:24:a6:f5:d5:88:cc:f7:eb:81:fa:14:7c:97:
                    a4:e8:84:ab:31:f9:37:96:9c:59:8d:b1:8d:b7:77:
                    c1:77:5b:a0:da:12:cd:7e:59:d2:ad:65:1f:2f:7d:
                    56:d3:f1:d9:e6:8e:33:7c:1a:bf:1e:54:2a:a5:94:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E8:E8:AB:72:BD:6B:9F:28:D9:BA:39:EA:C2:89:48:2D:F0:8E:2B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/Tujoq3K9a58o2bo56sKJSC3wjis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59357

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:59:32:4a:c0:53:e7:e6:b6:68:7f:3b:b7:57:92:ec:9d:
         cf:78:49:e0:c3:15:ec:18:3a:8a:55:9a:a7:f1:44:d4:be:ca:
         db:fb:2e:50:c0:3e:07:6f:c9:1e:37:10:a5:9c:31:be:fc:02:
         3f:0b:3a:22:92:b3:54:60:b8:42:c0:29:e9:5f:04:e3:6a:c8:
         54:e5:b8:0e:0f:78:56:3b:14:b7:46:82:06:7a:fd:53:99:32:
         32:f6:81:65:cc:62:52:2d:95:aa:1c:d3:9e:1c:38:9a:80:f2:
         e1:f6:b9:77:8a:b7:e7:b0:5f:3a:f6:55:51:0e:7f:d7:f3:0a:
         2b:29:1a:57:a3:6b:05:0b:57:c4:fc:01:9a:78:b4:f9:8a:d6:
         ac:b0:b8:01:ff:11:71:26:22:3e:ab:19:2d:44:8e:c4:52:a4:
         fc:c5:52:64:c8:03:51:77:77:32:6d:03:57:b4:79:02:f6:f8:
         3f:a1:c4:cd:1e:b9:6b:11:a7:d1:9a:21:16:39:de:53:c0:75:
         7b:14:f2:94:f2:f6:cd:c1:57:03:16:be:70:07:8d:9c:83:f6:
         72:e3:1b:c2:5a:a1:36:6a:58:a5:1b:32:6b:5c:2f:0b:77:74:
         b6:11:38:37:2f:b4:6e:b9:ed:2e:ff:a6:e8:07:46:c8:7d:51:
         c1:dc:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----