Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YS2ANb3LNI5m5rJMxYNAB1e1Cqc.cer
File:                     YS2ANb3LNI5m5rJMxYNAB1e1Cqc.cer (raw, json)
Hash identifier:          xtJRGzySEsu7xOs6bWgOX+lbti9GiAp+hI5r9tlwc+c=
Subject key identifier:   61:2D:80:35:BD:CB:34:8E:66:E6:B2:4C:C5:83:40:07:57:B5:0A:A7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01452B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9191B70/A037F1428EFE11EC87A6EA17C4F9AE02/YS2ANb3LNI5m5rJMxYNAB1e1Cqc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9191B70/A037F1428EFE11EC87A6EA17C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 16 Feb 2022 08:01:28 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    AS: 38327

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83243 (0x1452b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 16 08:01:28 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A9191B70/serialNumber=612D8035BDCB348E66E6B24CC583400757B50AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:2e:d5:9e:31:80:6b:d3:ae:19:26:22:b4:
                    c8:fa:ea:8f:3c:60:26:19:fe:ae:4d:a9:bd:b0:db:
                    47:29:2b:8a:b9:8d:ce:1e:b3:c2:c4:27:15:aa:3d:
                    2f:a7:c1:7f:e3:0c:85:50:8a:8d:cc:88:92:82:54:
                    07:d0:1c:d4:8c:43:61:e4:c7:33:b5:fe:0f:cc:1d:
                    f7:4b:a3:df:cb:92:b7:f5:99:9b:f4:ad:50:7a:30:
                    e6:44:de:81:83:d1:30:fa:1d:29:94:05:98:99:8c:
                    7d:1b:df:18:32:3b:d9:58:53:9e:66:a9:0e:c4:0e:
                    2a:36:ba:d7:ce:18:c6:19:b4:83:96:7a:ac:d0:cb:
                    05:4e:ea:df:d4:d0:3d:6f:88:f8:e3:b1:7e:63:4d:
                    78:00:0b:a4:e8:ab:71:ff:9f:8f:23:3c:9e:c6:86:
                    5a:db:13:ab:22:5b:d8:ea:8b:1e:b2:17:cf:b2:83:
                    e4:ab:e5:11:07:d5:ec:cb:ce:39:50:06:12:0e:27:
                    b3:74:f3:8b:5f:17:1b:24:40:d2:30:f3:13:69:fc:
                    4f:ea:08:d0:12:12:11:e6:42:d5:8e:53:d1:d6:44:
                    ab:77:0d:be:34:01:14:03:38:13:9f:c5:93:60:bc:
                    65:c7:fd:41:00:65:f8:23:36:9f:d9:f0:83:38:e7:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2D:80:35:BD:CB:34:8E:66:E6:B2:4C:C5:83:40:07:57:B5:0A:A7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191B70/A037F1428EFE11EC87A6EA17C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191B70/A037F1428EFE11EC87A6EA17C4F9AE02/YS2ANb3LNI5m5rJMxYNAB1e1Cqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38327

    Signature Algorithm: sha256WithRSAEncryption
         3e:97:d7:25:78:37:2e:64:4a:da:96:31:fa:f6:c5:43:3e:64:
         ad:21:41:11:d7:3f:a7:4e:99:46:3e:9f:2f:4c:dd:ef:95:24:
         c9:41:59:52:be:3f:91:92:a7:ad:2a:9e:d0:90:01:f4:65:b4:
         65:8a:f4:30:25:c5:a1:7c:4f:1a:a2:ec:1a:ad:59:a2:27:9b:
         19:5c:fa:fe:ca:b1:58:1b:55:13:78:b8:da:dc:d2:28:c0:78:
         77:a3:b6:ca:d7:8a:80:4a:f9:f8:29:b6:77:4c:25:8c:18:6a:
         00:3b:6c:bd:ac:e6:31:0c:b9:5b:31:fa:52:1c:60:54:66:92:
         8d:ec:5b:2f:be:f1:57:15:d1:c4:69:fe:86:70:76:98:b8:52:
         8a:0b:2f:78:20:e7:2c:7e:6e:ef:8d:25:55:de:77:1a:ed:cf:
         1b:c7:df:75:25:7d:29:c0:a8:11:0b:5d:d5:af:24:5b:66:b9:
         3f:b8:29:47:60:61:68:10:76:ed:83:6d:cd:d4:23:bf:85:c1:
         3e:b8:ad:fa:b3:0e:f3:2a:7a:cd:b5:f1:ce:26:a4:a5:b6:8c:
         ba:a6:39:f6:0b:b9:d4:8c:29:0c:b1:d9:91:5f:ac:91:fd:a6:
         63:5a:ea:27:2e:25:04:60:bb:43:8c:7d:b4:58:32:29:45:28:
         91:11:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----