Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
File:                     UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer (raw, json)
Hash identifier:          WD09ObtjnbmlvKIbsMEUbWJXYKHQdguh+TxlqaQmj2I=
Subject key identifier:   51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0157C7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/UdIjhGJ9KQJvtECyHECNVlPIpyQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 30 May 2022 00:18:02 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2401:4c0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88007 (0x157c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 30 00:18:02 2022 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:1b:c4:a2:4b:49:3d:9a:cc:e2:11:56:29:
                    03:e0:32:09:2c:7d:e6:55:85:bc:96:28:a8:d5:d6:
                    6f:1e:37:73:33:df:6f:12:80:1f:f6:49:86:13:67:
                    8a:7a:26:0b:68:c9:b4:6e:2c:1c:45:d4:6c:cb:b8:
                    45:a9:f7:df:d9:ec:c7:57:ff:84:f7:ca:28:ba:11:
                    2f:79:2f:94:60:6d:75:10:fc:4b:cd:bd:61:cc:7b:
                    87:d5:ea:f7:ed:1b:52:24:b0:d6:2b:6a:d9:68:c4:
                    79:9d:e7:a5:1f:eb:6a:96:1c:f8:46:98:1f:c1:49:
                    c0:c1:13:7c:13:d8:ce:60:db:7b:8b:dc:45:39:a2:
                    a7:83:b8:c1:54:58:c5:0b:fe:b5:d2:33:a5:2f:ef:
                    de:65:b5:c7:b1:50:3c:a0:1b:45:09:65:5f:67:d5:
                    78:32:98:d8:93:60:bf:99:85:02:2a:65:63:bb:38:
                    ac:63:6f:2a:c8:db:46:ed:6c:1f:d4:b4:47:58:ae:
                    1d:f8:79:5f:ec:25:90:55:40:3e:88:1c:65:e4:80:
                    d2:f7:d6:e5:ce:04:4c:0a:db:c4:b2:49:39:f7:5e:
                    14:5e:fc:54:37:19:ec:1c:be:ca:b3:19:bc:db:e8:
                    bd:15:5c:e5:f2:75:f5:2d:ec:f4:be:f7:64:74:e2:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/UdIjhGJ9KQJvtECyHECNVlPIpyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:07:ce:30:09:5c:ad:14:8d:68:cc:9d:ae:5c:14:97:9a:aa:
         8d:68:b5:0a:a8:e4:86:dd:f4:dd:54:cd:22:10:46:93:d0:81:
         6c:22:4f:ec:18:8c:26:70:cf:fe:9e:fa:e6:18:6e:5d:1e:1f:
         2c:e0:74:74:2f:57:16:74:a2:05:a3:03:2c:de:d0:35:05:b2:
         ef:f6:32:ef:7c:81:98:6d:a9:b0:7b:16:f6:52:7c:94:49:94:
         92:50:67:a2:ca:80:2a:33:e4:60:f0:6f:26:c0:e3:a9:f3:0c:
         1b:6f:3e:62:e8:2a:06:69:96:9a:59:f7:32:fa:67:55:81:3a:
         e3:9b:e2:b1:94:ac:9c:95:bf:6b:62:64:1b:2c:5e:1e:c1:f2:
         a7:2b:7b:19:11:28:62:59:ea:1f:d9:af:ee:f3:5f:29:08:b7:
         15:2c:18:f3:ba:4d:75:31:e0:9b:40:e4:52:24:f6:9d:80:71:
         7a:b4:40:de:3d:ba:19:46:ab:63:97:d5:14:80:5a:fc:8f:c6:
         f9:da:6c:b2:0f:5f:43:46:29:f9:09:7c:52:01:5c:09:20:52:
         37:02:2b:fe:a6:f4:39:0b:64:30:96:cc:1b:97:f1:92:d9:af:
         20:16:31:ab:0a:0b:45:e7:6b:1c:7e:6c:af:ca:f1:d5:f6:6a:
         8c:6c:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----