Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XVCUeOpbctGX5DJlkElFTwPkwi0.cer
File:                     XVCUeOpbctGX5DJlkElFTwPkwi0.cer (raw, json)
Hash identifier:          le+VWG2Pn8nCop0MBqH7it+7nAYSgVU3jCRVv+QPUOM=
Subject key identifier:   5D:50:94:78:EA:5B:72:D1:97:E4:32:65:90:49:45:4F:03:E4:C2:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       017E65
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FC387/FAD8C6965E2D11EC827FC065C4F9AE02/XVCUeOpbctGX5DJlkElFTwPkwi0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FC387/FAD8C6965E2D11EC827FC065C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 07 Dec 2022 08:26:19 +0000
Certificate not after:    Wed 31 Jan 2024 00:00:00 +0000
Subordinate resources:    IP: 45.252.184.0/22
                          IP: 103.197.96.0/22
                          IP: 2403:180::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97893 (0x17e65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  7 08:26:19 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=A91FC387/serialNumber=5D509478EA5B72D197E432659049454F03E4C22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:51:8b:b3:8c:09:dc:4e:17:9e:7a:7d:24:
                    13:bf:63:8d:20:f6:2a:27:e9:ce:8e:7b:d0:ce:94:
                    23:48:0b:03:99:24:f0:af:6c:88:70:2b:20:a3:dd:
                    a9:dc:9f:ad:31:d2:92:e2:65:06:fa:5f:a5:91:29:
                    a0:34:22:5b:94:3f:ef:c5:76:87:17:0f:de:9f:d7:
                    2b:a1:e0:69:1a:df:9f:6f:68:a7:55:17:f8:aa:99:
                    10:31:65:e0:45:ff:3e:a3:c8:2f:57:96:57:b0:45:
                    29:1b:ea:e5:a3:63:e5:56:90:b1:81:b0:03:ec:08:
                    83:e0:c2:c4:b3:f0:37:d3:e9:75:ce:37:20:4d:90:
                    a5:7b:6f:8b:55:84:ae:ab:37:fd:fb:7c:07:98:60:
                    8f:bd:3c:73:c6:05:8f:c5:91:06:c9:3b:d8:e7:51:
                    a5:c8:66:0a:c3:9a:fa:fb:aa:cf:64:0e:99:9b:b7:
                    68:a9:f4:b2:3b:2e:53:5b:fa:61:e4:3f:81:ab:24:
                    95:d5:4e:e9:91:d3:29:d9:04:2e:33:59:db:2b:8d:
                    e0:71:3e:46:e7:18:79:e1:61:8f:c5:bd:60:38:f7:
                    01:f9:73:31:53:74:ce:55:8d:2c:24:3f:e8:2d:04:
                    bd:f1:30:be:2d:44:63:aa:ad:8a:94:e1:2f:46:b4:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:50:94:78:EA:5B:72:D1:97:E4:32:65:90:49:45:4F:03:E4:C2:2D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FC387/FAD8C6965E2D11EC827FC065C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FC387/FAD8C6965E2D11EC827FC065C4F9AE02/XVCUeOpbctGX5DJlkElFTwPkwi0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.252.184.0/22
                  103.197.96.0/22
                IPv6:
                  2403:180::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:90:f5:f1:da:4f:5d:8a:14:9c:f6:70:5a:25:b7:7c:e0:a5:
         55:0e:b8:2d:0b:e8:7c:d7:e0:6b:9c:55:c0:e8:de:bf:19:0a:
         bd:8c:68:c0:f0:df:73:69:88:09:0b:1a:cd:15:6b:89:d0:56:
         30:29:6e:5c:b6:61:6f:61:68:ac:67:6a:a8:b8:55:2c:53:64:
         5c:99:2e:67:17:25:78:c5:52:91:44:4f:29:22:ca:7a:0f:23:
         a8:1f:9b:88:a0:ad:dd:72:f2:0c:cb:7d:57:85:30:17:c2:5e:
         17:b2:87:39:a3:1d:85:44:df:67:40:27:e7:e0:c3:90:2a:ff:
         ad:65:6e:b2:d3:19:7e:76:d2:d3:78:63:1d:bd:a7:b6:e4:24:
         4b:41:68:e2:70:0f:62:19:e9:29:2a:d9:a6:f0:5f:2d:03:a2:
         ff:dd:e7:83:19:fa:ef:ce:91:73:5b:87:74:01:f1:a5:59:ab:
         2a:8e:c7:1b:4f:7e:13:54:7c:bf:00:dc:1f:60:f1:d6:09:19:
         ee:95:95:0e:58:c9:c1:39:60:9d:4d:3b:89:92:5b:a8:32:fe:
         0b:70:bd:26:ba:89:42:ed:76:3b:7f:26:23:da:80:ea:b2:2f:
         0d:72:03:6b:b5:e0:df:03:27:aa:93:d6:a2:12:20:a3:f7:e8:
         5a:d1:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----