Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zo_W119dmeKy7sEfTdKiTpx8UlQ.cer
File:                     Zo_W119dmeKy7sEfTdKiTpx8UlQ.cer (raw, json)
Hash identifier:          ALnWZGqKvJVb2cXl+mQYRmzaHLQBmv2qyh6p3u1ZBY0=
Subject key identifier:   66:8F:D6:D7:5F:5D:99:E2:B2:EE:C1:1F:4D:D2:A2:4E:9C:7C:52:54
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014338
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/Zo_W119dmeKy7sEfTdKiTpx8UlQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Feb 2022 15:42:29 +0000
Certificate not after:    Thu 02 Jun 2022 00:00:00 +0000
Subordinate resources:    AS: 141391
                          IP: 103.158.13.0/24
                          IP: 2406:abc0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82744 (0x14338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 15:42:29 2022 GMT
            Not After : Jun  2 00:00:00 2022 GMT
        Subject: CN=A9188B9C/serialNumber=668FD6D75F5D99E2B2EEC11F4DD2A24E9C7C5254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:91:58:c4:21:7e:48:3c:6f:95:6b:ab:7f:
                    d1:55:cb:5c:10:52:b6:4b:62:95:09:56:96:3d:85:
                    92:83:c4:a1:15:6e:ce:f1:cf:12:df:7a:d2:e6:ef:
                    5f:2d:e8:75:9b:b6:79:4b:3c:95:1f:f0:3b:8a:a3:
                    80:df:23:c9:33:c2:9c:91:f9:96:d3:17:68:7f:1d:
                    d7:b8:ea:ea:1a:d9:86:dc:f6:3f:9a:d0:dc:12:03:
                    c7:a2:e2:0b:43:38:7f:7e:e0:93:2d:e7:62:2d:1e:
                    60:d9:68:24:f5:3a:e2:a9:c1:35:b3:4d:14:e5:df:
                    18:21:7e:59:88:42:8f:a3:2a:80:b6:8f:c1:87:9b:
                    18:e8:d5:5e:d9:fe:41:70:f1:ad:5d:70:48:e9:b2:
                    f2:b8:47:34:3d:6f:82:c6:43:6a:db:92:2a:ef:5b:
                    c8:2e:0f:33:6e:81:0c:f1:8e:fb:fe:05:bf:70:64:
                    e5:ff:13:27:42:07:80:f3:76:6a:07:15:4f:f8:57:
                    49:92:6a:e9:bb:c5:82:1c:2d:53:31:9f:b2:36:2d:
                    89:82:9f:73:7d:df:08:4c:ae:e8:5e:48:4e:b3:8d:
                    60:a8:c2:8e:ad:b1:10:e6:47:a1:bd:12:de:ac:36:
                    79:5f:29:92:e2:16:f9:75:a2:fa:08:ac:f1:b6:ea:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8F:D6:D7:5F:5D:99:E2:B2:EE:C1:1F:4D:D2:A2:4E:9C:7C:52:54
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/Zo_W119dmeKy7sEfTdKiTpx8UlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141391

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.13.0/24
                IPv6:
                  2406:abc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:2b:48:39:b8:3a:eb:f2:37:e3:48:59:0f:62:80:bb:e0:54:
         8f:c6:40:95:e5:02:b2:1b:fd:d6:ce:04:78:32:4c:a4:c5:f5:
         51:63:94:b0:cf:c5:26:9f:91:1d:9f:b7:0c:d4:64:13:68:9b:
         31:3e:77:5e:a6:85:63:9b:a4:c1:31:33:36:3c:ae:15:25:92:
         13:7e:85:6a:15:98:a7:1a:45:8a:28:5f:6c:3e:38:13:cb:85:
         5f:bf:b5:09:e0:68:cd:89:10:b1:cc:76:ba:3a:e7:92:94:8f:
         c0:0f:7c:2f:2c:0b:7b:8d:1a:67:a4:0d:64:1d:ae:d1:6a:bf:
         bf:f9:a3:24:21:dc:89:cf:9b:f5:56:ec:d7:ba:f8:6d:8a:c4:
         80:91:19:e3:1a:d6:87:b3:92:eb:c1:27:7f:50:73:cd:1d:8a:
         de:19:fa:44:4b:6a:8e:9a:21:2a:41:89:94:38:4a:8f:74:cc:
         97:bc:8e:ab:cb:2d:64:fd:a5:b1:c2:db:79:ed:43:48:c2:3c:
         d2:6e:2a:ec:fe:bc:58:6f:e1:be:db:80:27:65:07:06:55:d4:
         af:57:cd:45:62:74:07:a5:69:81:93:64:75:ea:8e:fd:17:a5:
         d0:88:02:d8:30:28:81:c0:0f:48:92:3f:8b:1f:d0:51:d6:69:
         48:3e:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----