Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VD2OBzQwVnWIKovirHFcIVpxhqY.cer
File:                     VD2OBzQwVnWIKovirHFcIVpxhqY.cer (raw, json)
Hash identifier:          nlO6rJCWJOsmv4+I8RhM7WPA874AVb08NCTuBhgrinE=
Subject key identifier:   54:3D:8E:07:34:30:56:75:88:2A:8B:E2:AC:71:5C:21:5A:71:86:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013FAC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C8F31/D30159AC41D711ECB0E78776C4F9AE02/VD2OBzQwVnWIKovirHFcIVpxhqY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C8F31/D30159AC41D711ECB0E78776C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Jan 2022 03:38:02 +0000
Certificate not after:    Thu 02 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 103.224.208.0/22
                          IP: 2400:1f60::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81836 (0x13fac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 17 03:38:02 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91C8F31/serialNumber=543D8E0734305675882A8BE2AC715C215A7186A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:05:d5:0d:6b:4d:31:e3:a6:09:53:d0:f9:7c:
                    73:45:b7:95:db:f9:e3:ce:80:90:70:4a:e3:71:0f:
                    c6:c8:9e:ce:d9:cf:60:b0:5c:9d:e2:df:71:fc:8d:
                    7c:9e:a4:bd:03:12:1c:ac:20:6f:0a:a2:75:48:13:
                    d9:70:46:bf:d0:d0:42:c6:33:87:61:f2:00:73:da:
                    c1:8c:5a:a5:6a:07:07:05:9c:ea:46:db:ef:b8:3a:
                    86:03:7c:01:04:60:47:62:7f:8c:48:52:70:77:3c:
                    32:65:ee:4c:2c:79:11:4d:83:36:43:dc:67:c5:f5:
                    82:94:54:21:9b:c2:69:f3:c2:2c:12:a7:10:0a:b7:
                    b4:6f:96:b4:78:d9:aa:9d:16:6e:03:e3:46:18:73:
                    f9:ef:8a:d5:fe:c1:c4:c9:c2:22:6d:fb:af:56:eb:
                    9d:fd:53:d5:95:33:91:74:e5:00:da:82:90:5d:8a:
                    9f:1c:af:96:28:3c:4f:ec:91:fe:2b:48:c8:f8:aa:
                    d4:82:b1:b9:1d:97:e5:9e:0c:ec:be:1a:33:c2:9b:
                    36:7c:95:9c:66:55:d4:52:48:ec:06:79:74:ff:84:
                    15:c5:da:9d:40:22:44:86:fe:8c:2e:a5:a1:21:e4:
                    aa:6f:20:53:03:96:97:da:a0:8a:95:83:59:ee:cc:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:8E:07:34:30:56:75:88:2A:8B:E2:AC:71:5C:21:5A:71:86:A6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8F31/D30159AC41D711ECB0E78776C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8F31/D30159AC41D711ECB0E78776C4F9AE02/VD2OBzQwVnWIKovirHFcIVpxhqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.208.0/22
                IPv6:
                  2400:1f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:d7:39:cb:8c:fe:4f:56:64:9a:6e:47:28:59:2b:60:ef:fa:
         cc:36:89:60:39:c2:c9:e4:00:31:f9:9c:1f:86:35:9f:a1:3a:
         0f:43:d1:50:9e:2a:6f:42:e0:4f:cc:54:c5:48:79:da:41:7d:
         46:cf:1a:f8:5c:82:71:d0:cc:78:c8:ec:43:3e:cc:c8:f5:3d:
         27:0a:8e:6f:0d:f0:b8:b7:1a:10:dc:4c:2d:b2:fc:3d:af:0d:
         24:25:b3:cb:77:44:26:03:d4:07:f4:87:d6:61:0d:fa:aa:4f:
         5d:2b:34:bd:d2:95:5c:80:64:94:ee:f3:81:09:47:a3:ad:aa:
         47:fa:7d:7a:5a:43:df:d1:d6:f1:fa:a6:03:05:ed:7c:9e:f6:
         f8:e4:b6:8e:20:e1:aa:ce:1c:29:16:c0:29:64:ad:3d:5b:90:
         b0:a2:c9:3b:cc:83:cd:85:a1:c7:42:95:0d:7f:02:ec:5b:3d:
         b0:d9:b8:71:68:67:a7:d2:22:4c:4f:c3:71:87:8e:1e:17:4e:
         f1:78:38:7a:54:b2:3f:11:d8:a6:c0:aa:cd:35:a1:a4:31:40:
         36:b2:6c:f2:43:15:4e:46:75:e6:74:ce:a8:72:90:5a:5a:d3:
         b9:96:b4:c3:55:b8:30:cb:19:34:c4:24:29:e9:0c:ad:61:49:
         60:5a:4f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----