Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2EAh95M6OlGWNkp4TOE1sDop00.cer
File:                     W2EAh95M6OlGWNkp4TOE1sDop00.cer (raw, json)
Hash identifier:          i/H5yCWF/cbDLFOVKbxPqMilttOo3CEsPJOpX4otbns=
Subject key identifier:   5B:61:00:87:DE:4C:E8:E9:46:58:D9:29:E1:33:84:D6:C0:E8:A7:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01381E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915284E/11DE89BE1A5711EBBCB9EB82C4F9AE02/W2EAh95M6OlGWNkp4TOE1sDop00.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915284E/11DE89BE1A5711EBBCB9EB82C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Dec 2021 12:22:40 +0000
Certificate not after:    Thu 02 Mar 2023 00:00:00 +0000
Subordinate resources:    AS: 132002
                          IP: 103.31.28.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79902 (0x1381e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  1 12:22:40 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A915284E/serialNumber=5B610087DE4CE8E94658D929E13384D6C0E8A74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:87:1d:84:0a:75:26:8c:99:91:5f:eb:5a:
                    78:24:ee:67:19:63:cf:2d:33:14:1d:cd:23:77:d4:
                    75:e2:f1:db:df:ed:cd:d5:43:ee:dc:22:55:6a:0a:
                    26:27:f0:c4:b8:9d:14:70:f4:e6:89:a5:bd:21:cc:
                    50:93:a9:e3:97:d0:bb:76:b2:24:6e:b1:21:0e:0a:
                    98:aa:f0:e6:9e:e6:22:9f:19:9b:69:b9:e0:2f:6b:
                    6a:bf:38:ec:51:77:53:b7:ae:d6:61:73:42:3e:12:
                    96:69:58:aa:fe:34:65:01:ab:66:db:15:f2:89:50:
                    7d:d2:0f:58:f2:4f:64:54:44:7f:14:a4:da:2f:56:
                    57:c9:53:70:50:a3:8b:4e:dc:e4:7c:92:6d:0d:56:
                    8f:1f:9d:4c:15:98:87:c6:7c:c8:a9:36:e1:ee:e7:
                    cb:d2:b1:cd:6b:6c:0c:f5:f8:e1:87:ed:28:37:71:
                    52:a6:71:ad:35:cf:62:10:f9:ce:6a:a8:ef:4d:3c:
                    a7:24:68:cc:f9:66:ed:03:92:c7:bf:35:b1:50:56:
                    f6:87:4d:7b:90:cf:fb:f0:ea:0c:9f:a8:93:d9:a7:
                    1b:5b:2a:49:b1:93:fb:db:dd:b1:03:cf:d4:b6:7b:
                    c8:3a:14:88:55:3d:a7:2b:32:85:ce:38:cc:7a:55:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:61:00:87:DE:4C:E8:E9:46:58:D9:29:E1:33:84:D6:C0:E8:A7:4D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915284E/11DE89BE1A5711EBBCB9EB82C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915284E/11DE89BE1A5711EBBCB9EB82C4F9AE02/W2EAh95M6OlGWNkp4TOE1sDop00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132002

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:0f:f4:04:4c:23:eb:5c:32:7f:4b:55:c5:1e:ca:32:03:8a:
         c4:4c:16:52:47:eb:35:90:29:3e:5c:da:22:3f:6e:65:a1:c5:
         db:ad:27:86:e0:89:c8:1d:59:3d:4f:8a:bf:06:2f:f2:20:b9:
         4f:bc:60:36:c8:e5:c7:1a:eb:63:eb:f4:b6:f2:48:3e:4d:84:
         dd:c8:a3:4e:bd:b2:52:a0:cf:c0:45:42:58:28:0d:39:57:41:
         ed:68:0f:d1:c6:ef:1c:82:6d:46:c4:d3:b7:0e:54:59:98:e1:
         1a:fa:3e:bd:a2:61:a7:45:2f:4f:56:66:e3:5e:e1:d0:80:e5:
         80:00:8a:6c:71:0f:09:a6:c7:2f:9d:24:bb:a3:a8:ee:d1:df:
         b0:b3:cd:54:9c:11:36:30:7e:ed:25:df:8b:55:ba:07:0c:57:
         8a:7e:3d:58:5b:6d:ad:90:44:de:1c:ce:d2:bd:ef:ae:eb:26:
         a1:31:7d:24:b2:2a:6f:f9:e9:c4:2d:66:19:da:e3:a9:30:87:
         bc:b0:2d:58:7b:9d:ef:2d:db:4e:26:52:24:a9:be:e7:d5:b4:
         16:0a:15:6f:d4:0a:a5:30:13:6a:2d:76:65:45:c8:89:c1:5d:
         0c:6d:c9:25:c9:e9:bc:9c:03:f4:4a:fa:72:e0:8f:8f:e3:27:
         99:55:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----