Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCH81BRg4cqUoCE-LCo4Vf_AIvY.cer
File:                     WCH81BRg4cqUoCE-LCo4Vf_AIvY.cer (raw, json)
Hash identifier:          1poNTtzwBr6YwdYyq97B+J8tKsa41TOvKoDEOOzE588=
Subject key identifier:   58:21:FC:D4:14:60:E1:CA:94:A0:21:3E:2C:2A:38:55:FF:C0:22:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016D78
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9113BCE/0D45B38C5C2611E9AB0A9B64C4F9AE02/WCH81BRg4cqUoCE-LCo4Vf_AIvY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9113BCE/0D45B38C5C2611E9AB0A9B64C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Sep 2022 06:21:02 +0000
Certificate not after:    Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources:    IP: 103.68.223.0/24
                          IP: 103.71.254.0/24
                          IP: 103.72.4.0/23
                          IP: 2001:df3:2e00::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93560 (0x16d78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 12 06:21:02 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=A9113BCE/serialNumber=5821FCD41460E1CA94A0213E2C2A3855FFC022F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:f3:2a:93:f8:b7:5d:45:31:72:61:1a:c6:
                    55:ae:a5:3b:31:eb:b8:0d:ba:fd:0d:69:4c:ec:9f:
                    52:04:d8:66:e9:9e:d9:4d:ff:f6:bd:4f:2b:4e:08:
                    ff:09:0e:46:9c:8e:9b:37:c2:2e:2d:68:f7:a0:be:
                    be:d2:fc:b9:f4:05:c9:4c:02:de:52:d3:ca:fa:b6:
                    ed:7e:c3:36:43:f1:11:89:03:fe:21:f0:56:72:38:
                    24:4c:d8:67:a6:ab:d4:68:21:9f:9d:01:2e:03:d6:
                    35:ac:00:1f:d9:2b:50:c8:da:df:27:b0:d7:6e:47:
                    c1:74:7a:7e:f1:7e:49:2f:2d:ca:77:54:7e:5a:3c:
                    62:29:4b:b6:e4:ae:8f:8f:55:45:c5:da:6e:43:ef:
                    c7:92:9d:22:62:a4:23:f1:61:6b:21:c0:bf:e9:e0:
                    38:97:79:7f:8b:30:e4:85:91:a5:79:2e:7a:34:5e:
                    91:7f:e4:95:b3:c5:e6:2e:03:c6:02:95:dc:8e:5b:
                    29:be:53:25:14:a9:bd:c5:d9:b7:81:9e:01:12:1c:
                    87:01:fc:17:23:88:7c:7e:f6:cd:68:48:0a:ef:16:
                    89:66:61:15:77:64:73:c1:e9:e0:8e:44:17:48:9f:
                    c5:ce:c8:33:48:56:ee:67:6c:53:76:b8:be:ab:dc:
                    1d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:21:FC:D4:14:60:E1:CA:94:A0:21:3E:2C:2A:38:55:FF:C0:22:F6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113BCE/0D45B38C5C2611E9AB0A9B64C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113BCE/0D45B38C5C2611E9AB0A9B64C4F9AE02/WCH81BRg4cqUoCE-LCo4Vf_AIvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.223.0/24
                  103.71.254.0/24
                  103.72.4.0/23
                IPv6:
                  2001:df3:2e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:fe:49:04:5b:d7:ed:33:f6:c2:3f:d4:dc:f3:e4:7e:0d:
         14:6f:a3:04:de:d0:17:7a:49:26:a7:e9:8c:d6:d9:97:80:00:
         7f:7f:42:c1:e7:fd:e2:47:d2:f8:f6:e5:9b:5b:cf:cd:ef:af:
         58:06:5f:83:5b:a2:28:f8:c3:71:ed:58:2f:0c:9b:da:0f:a2:
         54:72:a2:c5:53:0a:46:01:ee:32:9f:65:25:c9:d0:0c:e5:95:
         2a:e8:37:3a:24:78:18:ba:42:e9:44:41:80:87:8d:75:60:df:
         5b:da:69:d6:9e:9f:c2:c6:0c:f3:c1:ac:c7:ad:af:2e:ec:21:
         5a:51:f4:ef:6d:23:9a:78:4c:6b:1a:88:b5:6a:2d:85:dd:a1:
         a8:b9:da:b3:80:62:87:13:11:33:be:7d:c4:6a:bf:47:39:39:
         0a:9e:3b:a9:3b:9a:95:85:bf:24:f3:1c:c8:78:41:ff:98:2d:
         66:e2:4d:5f:cf:0a:89:c2:1d:68:f7:b0:b8:f2:ab:b0:a2:d0:
         83:85:cb:49:70:b7:56:fb:a7:a4:cb:41:0a:45:21:7f:d7:cc:
         da:b1:49:24:35:af:74:68:4d:e7:58:ee:01:20:eb:e8:de:4e:
         88:c1:50:5e:e0:6e:76:0f:90:57:a6:89:09:4b:f6:e4:aa:df:
         39:0c:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----