Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZxAo6byzfx1VD0-LQRSDDe1HMU.cer
File:                     UZxAo6byzfx1VD0-LQRSDDe1HMU.cer (raw, json)
Hash identifier:          hre8ASmaKDd1LycZhFwbfyvWsh1r+5eUNUaWJaigH4o=
Subject key identifier:   51:9C:40:A3:A6:F2:CD:FC:75:54:3D:3E:2D:04:52:0C:37:B5:1C:C5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018E47
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91701DA/E7E2250613FB11EA9F339279C4F9AE02/UZxAo6byzfx1VD0-LQRSDDe1HMU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91701DA/E7E2250613FB11EA9F339279C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Mar 2023 04:47:35 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 137444
                          IP: 103.108.221.0/24
                          IP: 2001:df4:2100::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101959 (0x18e47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 04:47:35 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=A91701DA/serialNumber=519C40A3A6F2CDFC75543D3E2D04520C37B51CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:0d:e3:03:41:49:20:1d:6f:36:07:b0:ac:
                    f6:68:ca:1a:3a:17:a3:65:31:2d:7f:02:d5:c6:fe:
                    7d:14:52:c2:10:b0:be:f8:ae:40:d3:20:a5:d5:ca:
                    22:7d:32:64:75:27:2e:62:ec:b8:93:f6:6e:3f:6f:
                    cd:9b:dc:1b:c7:35:f9:5b:63:6f:14:cf:2f:73:89:
                    18:4c:19:92:5f:40:40:3f:28:6f:d6:db:8f:e4:dd:
                    1b:34:f2:0c:bc:e7:30:98:bb:bf:05:ef:c9:71:dd:
                    ce:c2:ae:cb:2f:94:c4:3f:ee:82:35:8e:a5:5e:10:
                    f9:b3:6e:41:4c:1f:40:b3:96:6c:4a:df:cf:c4:97:
                    38:e5:be:9f:9f:05:67:8e:f2:d4:b5:55:ff:b4:56:
                    a4:f4:cf:14:5e:1d:5c:a4:07:bf:86:cb:48:04:12:
                    1f:40:e9:c0:83:aa:a5:fc:12:62:66:e2:6b:3c:87:
                    e7:82:26:5d:cb:57:28:1e:c1:56:de:44:70:a9:35:
                    4f:7c:f4:d6:c7:24:60:4f:7b:67:ff:bd:e9:bd:14:
                    4e:81:ce:5c:d6:d6:30:f2:36:be:e8:98:5c:3d:f3:
                    3c:6f:c2:25:5e:3d:a2:eb:80:f5:00:ed:a0:fa:4e:
                    a0:7c:27:9a:56:86:88:19:42:1d:7a:27:45:2d:b3:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:40:A3:A6:F2:CD:FC:75:54:3D:3E:2D:04:52:0C:37:B5:1C:C5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91701DA/E7E2250613FB11EA9F339279C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91701DA/E7E2250613FB11EA9F339279C4F9AE02/UZxAo6byzfx1VD0-LQRSDDe1HMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137444

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.221.0/24
                IPv6:
                  2001:df4:2100::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:d1:1a:58:b9:b3:a0:13:b9:36:8c:01:f3:41:cc:c8:b2:
         cf:51:90:b2:54:61:b3:1d:be:ca:ef:77:39:d5:a1:9a:24:3d:
         05:8e:97:2c:91:7c:00:25:c7:49:e9:d9:35:58:30:a2:aa:58:
         cc:06:bd:b0:ff:7d:20:f8:11:f7:50:dc:75:84:4a:c5:4a:35:
         66:13:1e:d4:d8:6a:84:cf:98:29:0f:b3:44:a2:86:e2:a0:e9:
         e2:71:a1:a0:8c:c9:96:60:50:4e:8a:e4:08:47:97:60:78:e3:
         66:f0:5e:e2:56:62:8c:25:7c:60:52:d4:32:76:ed:d0:0c:fd:
         6b:65:99:e5:e8:c7:ae:02:b4:a3:43:8e:a5:70:dd:85:c3:06:
         87:cc:5c:69:7a:90:87:66:30:d5:f0:28:a5:68:d4:61:ca:57:
         aa:bd:1c:29:f3:ae:87:98:cb:b3:72:c6:cd:4b:ff:df:ea:0b:
         f7:b9:dd:db:e4:b1:eb:0f:18:68:02:89:94:a3:10:76:5f:23:
         11:3c:8e:47:06:25:9c:b4:35:b7:63:27:e5:07:ae:2e:b4:7c:
         52:02:9a:6d:f1:3a:4c:f3:c8:b3:ab:37:5f:8c:55:27:33:05:
         6a:2e:c0:fa:b6:5b:6a:a4:7f:53:af:8b:42:fb:49:01:7d:ed:
         89:ff:fa:e5
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAY5HMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDMwMTA0NDczNVoXDTIzMDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzAxREExMTAvBgNVBAUTKDUxOUM0MEEzQTZGMkNERkM3NTU0M0Qz
RTJEMDQ1MjBDMzdCNTFDQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtUQ3jA0FJIB1vNgewrPZoyho6F6NlMS1/AtXG/n0UUsIQsL74rkDTIKXVyiJ9
MmR1Jy5i7LiT9m4/b82b3BvHNflbY28Uzy9ziRhMGZJfQEA/KG/W24/k3Rs08gy8
5zCYu78F78lx3c7CrssvlMQ/7oI1jqVeEPmzbkFMH0CzlmxK38/Elzjlvp+fBWeO
8tS1Vf+0VqT0zxReHVykB7+Gy0gEEh9A6cCDqqX8EmJm4ms8h+eCJl3LVygewVbe
RHCpNU989NbHJGBPe2f/vem9FE6BzlzW1jDyNr7omFw98zxvwiVePaLrgPUA7aD6
TqB8J5pWhogZQh16J0Utswp3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUUZxAo6by
zfx1VD0+LQRSDDe1HMUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcwMURBL0U3RTIyNTA2MTNGQjExRUE5RjMzOTI3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MDFEQS9FN0UyMjUwNjEzRkIxMUVBOUYzMzkyNzlDNEY5QUUwMi9VWnhBbzZi
eXpmeDFWRDAtTFFSU0REZTFITVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhjkMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ2zdMA8EAgAC
MAkDBwAgAQ30IQAwDQYJKoZIhvcNAQELBQADggEBAGad0RpYubOgE7k2jAHzQczI
ss9RkLJUYbMdvsrvdznVoZokPQWOlyyRfAAlx0np2TVYMKKqWMwGvbD/fSD4EfdQ
3HWESsVKNWYTHtTYaoTPmCkPs0SihuKg6eJxoaCMyZZgUE6K5AhHl2B442bwXuJW
YowlfGBS1DJ27dAM/WtlmeXox64CtKNDjqVw3YXDBofMXGl6kIdmMNXwKKVo1GHK
V6q9HCnzroeYy7Nyxs1L/9/qC/e53dvksesPGGgCiZSjEHZfIxE8jkcGJZy0Nbdj
J+UHri60fFICmm3xOkzzyLOrN1+MVSczBWouwPq2W2qkf1Ovi0L7SQF97Yn/+uU=
-----END CERTIFICATE-----