Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z2DvJRw36wzx64XIR11qpwE7Khg.cer
File:                     Z2DvJRw36wzx64XIR11qpwE7Khg.cer (raw, json)
Hash identifier:          KKZ6zHdnVevo5J4w0o6Vv3djyudOYGinPiWzXXBDOLs=
Subject key identifier:   67:60:EF:25:1C:37:EB:0C:F1:EB:85:C8:47:5D:6A:A7:01:3B:2A:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0158D3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/Z2DvJRw36wzx64XIR11qpwE7Khg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jun 2022 00:16:02 +0000
Certificate not after:    Sat 30 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2407:5980::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88275 (0x158d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  1 00:16:02 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A91BCAB4/serialNumber=6760EF251C37EB0CF1EB85C8475D6AA7013B2A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:d8:a9:c3:29:49:ec:e1:6e:7c:f1:f5:ef:
                    70:b4:d6:ac:d6:a4:f0:5b:a7:08:0f:b3:ed:d9:a4:
                    a4:5a:d5:2b:cd:6e:cf:78:47:8b:27:8e:0c:c3:c8:
                    74:95:f8:6c:49:29:f2:8f:a1:4e:18:e0:d0:7b:6c:
                    fe:26:09:28:cd:1f:b6:b1:bd:3a:51:cd:9e:4f:ff:
                    58:bc:dc:2a:54:fd:a4:46:66:87:33:5d:52:86:1f:
                    59:64:e7:18:9f:fa:b5:1c:f6:a0:f7:d2:32:dd:1f:
                    83:c7:a3:19:69:05:0a:49:13:47:fc:31:97:b1:57:
                    d5:e1:35:eb:43:73:42:11:dc:19:4f:70:26:a1:0a:
                    c5:22:32:b9:22:2d:66:77:7a:92:cb:c4:13:89:12:
                    5a:94:ac:22:ed:5f:d3:ac:1b:3d:38:e0:1e:57:46:
                    7b:74:e6:e5:60:ce:c7:9c:9b:be:bb:f9:32:6d:d5:
                    77:16:46:c2:e0:b2:c3:46:03:31:ce:87:46:f9:5f:
                    f2:a2:95:17:24:5f:11:16:df:e4:2e:a4:0e:85:66:
                    21:b4:26:00:7c:e9:b3:e3:a2:9c:06:61:ff:70:28:
                    59:35:71:b5:ce:a4:3d:a8:b5:df:5a:30:86:69:84:
                    7f:3c:d3:eb:f8:95:6a:c2:98:e9:eb:46:86:19:57:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:60:EF:25:1C:37:EB:0C:F1:EB:85:C8:47:5D:6A:A7:01:3B:2A:18
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/Z2DvJRw36wzx64XIR11qpwE7Khg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:5980::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:8d:a5:21:fe:b4:f7:a2:60:21:3c:24:43:6e:7b:46:33:dc:
         1a:0c:db:36:01:b6:93:cb:52:e9:b5:44:48:ea:55:f5:04:87:
         6f:98:75:83:a4:11:ff:43:05:da:ad:b7:26:c1:36:0c:d4:08:
         ad:3b:47:f7:3a:cc:d4:b7:5f:48:83:94:95:7f:79:48:91:18:
         cc:9b:7d:26:36:f0:ab:36:ed:23:73:ec:07:9a:18:d3:7f:72:
         df:f6:21:24:c9:d2:6f:83:db:46:50:83:83:01:f2:02:c3:f5:
         49:5e:2b:7b:31:09:be:cd:dc:e9:8a:33:40:cf:92:0f:7c:7b:
         ef:34:7b:31:38:57:d8:7d:47:fb:fc:6a:03:56:bf:d0:50:4c:
         37:cd:08:7f:d4:ab:41:7a:4a:26:1b:c6:2b:09:4c:33:72:a3:
         ba:34:f1:59:90:55:30:01:ff:11:ca:96:2c:36:9e:22:db:19:
         5b:fd:64:72:50:cf:d7:86:35:d6:85:48:ba:4b:11:8c:45:35:
         70:3b:cc:e5:5b:91:ae:92:83:0b:62:4d:2d:cd:ff:5e:6b:0e:
         b1:a4:6b:66:68:f5:25:74:b1:2f:4f:e7:02:08:d4:a9:fb:03:
         66:8a:01:f6:04:99:c8:34:c2:26:22:8d:45:35:1d:be:d6:5d:
         96:82:06:c7
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDAVjTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDYwMTAwMTYwMloXDTIyMDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkNBQjQxMTAvBgNVBAUTKDY3NjBFRjI1MUMzN0VCMENGMUVCODVD
ODQ3NUQ2QUE3MDEzQjJBMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBqtipwylJ7OFufPH173C01qzWpPBbpwgPs+3ZpKRa1SvNbs94R4snjgzDyHSV
+GxJKfKPoU4Y4NB7bP4mCSjNH7axvTpRzZ5P/1i83CpU/aRGZoczXVKGH1lk5xif
+rUc9qD30jLdH4PHoxlpBQpJE0f8MZexV9XhNetDc0IR3BlPcCahCsUiMrkiLWZ3
epLLxBOJElqUrCLtX9OsGz044B5XRnt05uVgzsecm767+TJt1XcWRsLgssNGAzHO
h0b5X/KilRckXxEW3+QupA6FZiG0JgB86bPjopwGYf9wKFk1cbXOpD2otd9aMIZp
hH880+v4lWrCmOnrRoYZVzwfAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUZ2DvJRw3
6wzx64XIR11qpwE7KhgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJDQUI0LzZBQTY4NzJBRUZFOTExRTlCMTk5MzM1MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQ0FCNC82QUE2ODcyQUVGRTkxMUU5QjE5OTMzNTJDNEY5QUUwMi9aMkR2SlJ3
MzZ3eng2NFhJUjExcXB3RTdLaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkB1mAMA0GCSqGSIb3DQEBCwUAA4IBAQCyjaUh/rT3omAhPCRD
bntGM9waDNs2AbaTy1LptURI6lX1BIdvmHWDpBH/QwXarbcmwTYM1AitO0f3OszU
t19Ig5SVf3lIkRjMm30mNvCrNu0jc+wHmhjTf3Lf9iEkydJvg9tGUIODAfICw/VJ
Xit7MQm+zdzpijNAz5IPfHvvNHsxOFfYfUf7/GoDVr/QUEw3zQh/1KtBekomG8Yr
CUwzcqO6NPFZkFUwAf8RypYsNp4i2xlb/WRyUM/XhjXWhUi6SxGMRTVwO8zlW5Gu
koMLYk0tzf9eaw6xpGtmaPUldLEvT+cCCNSp+wNmigH2BJnINMImIo1FNR2+1l2W
ggbH
-----END CERTIFICATE-----