Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKA9CxeVvsMdcjBECIfKqUaz-7w.cer
File:                     WKA9CxeVvsMdcjBECIfKqUaz-7w.cer (raw, json)
Hash identifier:          pkPeEDBvY0mOOpknq3oLuL483zx02i5tM9tD+wS6gCg=
Subject key identifier:   58:A0:3D:0B:17:95:BE:C3:1D:72:30:44:08:87:CA:A9:46:B3:FB:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018039
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AF33A/EC77A9EC7E0B11ED93A28849C4F9AE02/WKA9CxeVvsMdcjBECIfKqUaz-7w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AF33A/EC77A9EC7E0B11ED93A28849C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 17 Dec 2022 13:08:46 +0000
Certificate not after:    Sat 30 Sep 2023 00:00:00 +0000
Subordinate resources:    AS: 132326
                          IP: 103.12.144.0/22
                          IP: 2404:6f00::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98361 (0x18039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 17 13:08:46 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=A91AF33A/serialNumber=58A03D0B1795BEC31D7230440887CAA946B3FBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:cf:32:d4:c3:e7:47:2c:4a:40:46:2a:f2:
                    34:fe:a9:8c:ea:9b:eb:f8:6e:60:0c:3c:fb:6f:94:
                    b9:37:9b:2e:13:5d:7e:bc:cf:96:bf:d2:62:31:10:
                    fb:84:10:5c:57:c4:3e:77:83:e9:c4:47:dd:65:23:
                    2c:a9:bc:2a:21:dc:17:d4:69:36:2c:15:72:db:2d:
                    ba:ad:65:e0:0c:08:bd:40:9e:03:03:76:6e:17:4f:
                    5c:5b:14:fe:49:cb:fe:8f:37:47:59:c8:79:a0:70:
                    84:36:2e:e2:6c:9f:ac:20:7d:e8:87:22:bf:80:1b:
                    1e:17:2d:4b:b5:42:7b:fa:4c:86:24:7d:ab:78:bb:
                    2c:86:9d:f8:b8:e1:4e:a0:ec:43:26:6c:4b:a8:57:
                    39:62:3c:12:3a:ad:84:b8:1b:9b:4e:b0:aa:a7:07:
                    8a:de:24:13:91:79:a5:f9:ab:19:8a:7a:d6:c7:e8:
                    a1:61:25:65:fc:81:9d:2f:6f:e3:8d:98:f4:3f:0d:
                    74:bb:39:27:a7:08:a1:33:3a:7d:6a:35:70:b9:2c:
                    10:d5:01:60:c0:23:71:98:6e:8d:eb:ca:22:27:de:
                    b0:cf:22:a7:c3:fc:34:ba:f4:92:28:cf:1e:20:3d:
                    22:6c:8b:9f:4f:02:43:75:5b:44:b9:b6:23:b0:26:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:3D:0B:17:95:BE:C3:1D:72:30:44:08:87:CA:A9:46:B3:FB:BC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF33A/EC77A9EC7E0B11ED93A28849C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF33A/EC77A9EC7E0B11ED93A28849C4F9AE02/WKA9CxeVvsMdcjBECIfKqUaz-7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132326

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.144.0/22
                IPv6:
                  2404:6f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:a3:5f:25:56:12:e5:0c:c2:a8:40:94:29:c9:a0:27:f5:b4:
         31:4e:09:5b:7f:3c:97:f3:17:31:ee:cc:83:1e:b6:d3:29:52:
         b5:4e:24:0e:c6:34:dd:3d:af:b3:1c:91:01:6c:4d:33:cf:84:
         a2:cb:cb:4f:8d:80:43:46:8f:80:35:64:ad:56:2d:51:5f:82:
         43:c2:b2:35:6f:9b:6a:75:01:d9:48:1b:25:d1:14:02:f7:62:
         45:00:2a:0c:d1:e6:7f:ea:01:1b:fb:16:d2:eb:4b:ff:85:af:
         dc:6f:65:29:75:ac:ae:e9:d6:0b:45:79:de:8c:c9:a4:95:8d:
         52:f0:08:e9:ec:6f:6a:ee:24:95:86:67:67:d0:5d:4e:69:3d:
         20:9c:2f:19:a4:c9:72:53:92:73:4d:a1:f4:8d:12:86:37:e5:
         d7:d0:ea:cc:f2:12:6d:f7:c1:93:63:80:8f:6a:1c:79:b5:12:
         76:d0:ea:81:38:b9:5b:9f:d2:f9:27:d9:45:91:f3:92:e9:25:
         6b:c9:c2:c2:a4:1f:c1:fe:83:91:18:81:ce:fe:85:ed:ab:6e:
         86:26:bf:d5:28:74:b8:4d:3d:cb:b6:0e:b3:a9:b1:00:06:40:
         2e:7b:6d:cc:58:91:70:d0:9c:96:47:9d:b7:e6:50:93:07:35:
         5c:1a:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----