Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBg4wSLR0OYmdjFU3ZBtqBbHmWw.cer
File:                     YBg4wSLR0OYmdjFU3ZBtqBbHmWw.cer (raw, json)
Hash identifier:          EYOnMOitftCMwCBq8DUIZ9xiRufiE4lRXviXiUWAwGs=
Subject key identifier:   60:18:38:C1:22:D1:D0:E6:26:76:31:54:DD:90:6D:A8:16:C7:99:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0159A6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916421F/FD95A6CA69D211EAB7D95E33C4F9AE02/YBg4wSLR0OYmdjFU3ZBtqBbHmWw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916421F/FD95A6CA69D211EAB7D95E33C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jun 2022 15:36:15 +0000
Certificate not after:    Sat 01 Oct 2022 00:00:00 +0000
Subordinate resources:    AS: 140307
                          IP: 103.149.167.0/24
                          IP: 103.161.1.0/24
                          IP: 2001:df3:e380::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88486 (0x159a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  1 15:36:15 2022 GMT
            Not After : Oct  1 00:00:00 2022 GMT
        Subject: CN=A916421F/serialNumber=601838C122D1D0E626763154DD906DA816C7996C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:89:dd:b5:fb:8f:69:68:17:52:9f:34:09:
                    59:ac:41:cd:af:49:f5:9c:73:ea:6d:b3:aa:c0:2c:
                    d4:e2:10:39:fe:c8:0f:ff:ce:d6:97:cb:46:5f:c8:
                    0b:1d:1c:c3:42:05:c7:25:f9:3e:fd:4c:8c:4e:e2:
                    41:7d:20:de:f0:30:6d:fb:4c:77:93:12:84:86:78:
                    f4:b6:dc:54:57:8a:5a:83:42:20:aa:54:ec:9b:30:
                    37:46:22:a4:af:9c:1e:7e:b2:1b:a4:39:4d:fc:f9:
                    c4:4a:2b:67:e7:88:cc:45:e4:f4:14:e0:2c:68:c5:
                    57:e1:63:de:8d:bd:2d:f9:f0:82:94:a3:5f:df:24:
                    5d:cc:6a:5e:6e:2d:71:b8:3a:62:90:d1:8e:f2:ab:
                    2b:d1:c9:fb:75:c7:0e:0f:30:e0:77:78:3e:ae:3c:
                    3b:d8:48:e7:73:08:49:5f:0b:11:9b:63:14:4e:8c:
                    b7:b5:b0:ed:4c:58:a5:bd:92:28:b1:66:8b:4e:1e:
                    84:df:a2:ba:6a:05:51:cb:8a:eb:1a:bd:f5:ab:3a:
                    5e:45:e3:6d:e2:b0:c1:46:31:68:8a:12:0b:93:be:
                    77:1a:59:98:e2:7f:db:cd:f3:0a:0b:49:6f:38:92:
                    31:b2:0f:af:3a:8f:85:28:9e:d9:23:30:95:e6:9b:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:18:38:C1:22:D1:D0:E6:26:76:31:54:DD:90:6D:A8:16:C7:99:6C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916421F/FD95A6CA69D211EAB7D95E33C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916421F/FD95A6CA69D211EAB7D95E33C4F9AE02/YBg4wSLR0OYmdjFU3ZBtqBbHmWw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140307

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.167.0/24
                  103.161.1.0/24
                IPv6:
                  2001:df3:e380::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:ad:48:88:aa:0f:8b:3d:6d:62:b1:8a:67:c3:23:92:a5:3f:
         c2:cd:7c:6c:61:73:82:f1:95:e6:f7:14:e5:b7:1c:e0:03:ef:
         5b:41:85:b0:6c:77:de:7b:4e:f6:68:db:38:33:ec:52:ec:37:
         41:05:32:48:6b:62:37:61:d7:b3:c8:97:d3:80:a8:34:64:e8:
         53:f5:31:4e:7b:7e:5b:e7:79:cc:bd:b7:8c:99:93:31:8d:65:
         f0:be:96:35:62:b8:e5:7a:f6:42:07:7a:8b:5c:aa:ef:b8:cd:
         08:86:eb:22:cd:1f:ea:cb:b0:48:ee:46:b0:a0:07:aa:10:9c:
         2a:c1:19:3b:1e:aa:da:e5:d7:26:f6:26:f7:3d:30:17:aa:e1:
         8b:38:d1:7b:5d:43:ef:b0:59:78:0e:d2:1d:95:e7:f9:de:2a:
         65:e2:d0:b7:32:8b:8e:7b:ac:94:27:a1:83:8c:bc:26:02:d7:
         e1:60:9b:8c:51:26:67:f2:73:0e:1c:c4:44:9c:22:08:16:cd:
         64:d1:4f:19:bd:39:3a:07:6a:19:82:0b:8e:64:5d:d5:f9:e0:
         06:5d:6e:30:91:5e:91:a5:51:0d:6f:6e:a7:5c:b7:15:08:95:
         fe:0f:57:f5:6f:26:45:bd:9b:01:f1:5e:7b:c2:7a:ab:06:57:
         be:8a:48:c7
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAVmmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDYwMTE1MzYxNVoXDTIyMTAwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjQyMUYxMTAvBgNVBAUTKDYwMTgzOEMxMjJEMUQwRTYyNjc2MzE1
NEREOTA2REE4MTZDNzk5NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzc4ndtfuPaWgXUp80CVmsQc2vSfWcc+pts6rALNTiEDn+yA//ztaXy0ZfyAsd
HMNCBccl+T79TIxO4kF9IN7wMG37THeTEoSGePS23FRXilqDQiCqVOybMDdGIqSv
nB5+shukOU38+cRKK2fniMxF5PQU4CxoxVfhY96NvS358IKUo1/fJF3Mal5uLXG4
OmKQ0Y7yqyvRyft1xw4PMOB3eD6uPDvYSOdzCElfCxGbYxROjLe1sO1MWKW9kiix
ZotOHoTforpqBVHLiusavfWrOl5F423isMFGMWiKEguTvncaWZjif9vN8woLSW84
kjGyD686j4UontkjMJXmm7JPAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUYBg4wSLR
0OYmdjFU3ZBtqBbHmWwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY0MjFGL0ZEOTVBNkNBNjlEMjExRUFCN0Q5NUUzM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NDIxRi9GRDk1QTZDQTY5RDIxMUVBQjdEOTVFMzNDNEY5QUUwMi9ZQmc0d1NM
UjBPWW1kakZVM1pCdHFCYkhtV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiQTMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ5WnAwQAZ6EB
MA8EAgACMAkDBwAgAQ3z44AwDQYJKoZIhvcNAQELBQADggEBAJatSIiqD4s9bWKx
imfDI5KlP8LNfGxhc4Lxleb3FOW3HOAD71tBhbBsd957TvZo2zgz7FLsN0EFMkhr
Yjdh17PIl9OAqDRk6FP1MU57flvnecy9t4yZkzGNZfC+ljViuOV69kIHeotcqu+4
zQiG6yLNH+rLsEjuRrCgB6oQnCrBGTseqtrl1yb2Jvc9MBeq4Ys40XtdQ++wWXgO
0h2V5/neKmXi0Lcyi457rJQnoYOMvCYC1+Fgm4xRJmfycw4cxEScIggWzWTRTxm9
OToHahmCC45kXdX54AZdbjCRXpGlUQ1vbqdctxUIlf4PV/VvJkW9mwHxXnvCeqsG
V76KSMc=
-----END CERTIFICATE-----