Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ggaScBVppx6-cRZchPph0qOouo.cer
File:                     _ggaScBVppx6-cRZchPph0qOouo.cer (raw, json)
Hash identifier:          0CAFbrrPr+e1to03ukLXa/L+NqfdOqSAxEvKvOdIsQc=
Subject key identifier:   FE:08:1A:49:C0:55:A6:9C:7A:F9:C4:59:72:13:E9:87:4A:8E:A2:EA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0134BA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9167200/E62983D28D8311EB8D8BD60BC4F9AE02/_ggaScBVppx6-cRZchPph0qOouo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9167200/E62983D28D8311EB8D8BD60BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 14 Nov 2021 02:32:46 +0000
Certificate not after:    Tue 31 Jan 2023 00:00:00 +0000
Subordinate resources:    IP: 202.50.109.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79034 (0x134ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 14 02:32:46 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A9167200/serialNumber=FE081A49C055A69C7AF9C4597213E9874A8EA2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:76:5a:5c:d1:63:f2:ad:d6:4a:e4:c7:50:
                    93:dd:7d:bb:fb:e0:66:44:a8:76:78:95:bd:31:32:
                    23:65:6c:8c:3b:bd:f0:e3:7b:a9:5b:83:55:fb:c0:
                    d6:f1:f2:aa:3b:1e:39:4c:40:f8:27:27:33:4a:8e:
                    9b:9c:56:81:65:25:3d:93:47:69:ca:50:ba:d7:a7:
                    a7:4b:08:ef:6e:27:13:66:18:eb:34:f2:6a:3c:42:
                    61:4d:24:11:bd:36:b3:f6:3a:83:bd:aa:f3:f8:66:
                    2c:f7:2c:d2:be:80:10:43:fe:ee:d3:82:7f:c8:f8:
                    2a:50:1c:d2:2c:7d:ea:12:5d:a3:b2:a0:e3:e5:3a:
                    04:22:f5:34:ee:8b:02:5c:37:45:f9:7b:87:67:54:
                    0b:34:b8:cf:a9:1e:af:eb:a6:dc:8a:49:ab:cd:91:
                    7e:3a:03:ca:1d:97:39:8c:20:7c:46:76:17:2c:22:
                    a4:89:df:63:b7:e2:e2:90:63:4b:3e:91:1c:b1:cb:
                    2a:89:1d:8b:22:76:cf:5f:c9:f4:a0:c3:99:eb:94:
                    32:a8:93:73:84:29:46:a7:f2:7e:1d:c1:ae:83:74:
                    db:95:09:7c:42:dc:ba:10:1c:e0:10:7e:53:b3:06:
                    33:ec:05:01:44:bd:b1:bc:a4:a5:23:1a:37:99:a1:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:08:1A:49:C0:55:A6:9C:7A:F9:C4:59:72:13:E9:87:4A:8E:A2:EA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167200/E62983D28D8311EB8D8BD60BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167200/E62983D28D8311EB8D8BD60BC4F9AE02/_ggaScBVppx6-cRZchPph0qOouo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:65:70:4b:1b:e5:90:d4:4b:6d:f2:d4:cb:b8:a3:37:06:0a:
         0c:bc:06:0d:f9:db:45:28:23:ab:f6:14:f3:cd:ad:35:34:bc:
         b2:60:31:19:1d:23:17:8d:2f:3d:8f:84:72:ab:0c:b8:70:a6:
         86:9d:ae:b3:c3:0f:60:76:99:96:12:e4:7f:a0:90:18:a1:21:
         0f:df:a8:96:e2:29:91:2e:7f:27:54:cf:06:ac:53:e2:51:d2:
         09:9a:56:3b:5a:21:bd:57:a0:23:a5:73:1f:77:79:84:4f:95:
         14:21:5e:f5:22:b1:5c:73:17:c9:25:2f:a0:42:51:63:18:1f:
         8f:37:be:07:71:66:6c:7f:6e:f1:19:06:f1:ef:81:f7:4f:df:
         71:fe:d5:4f:e9:ba:2b:0d:c3:bd:02:21:9f:21:f9:14:fb:4f:
         7a:e3:64:e5:a0:1d:ee:f8:d8:08:b6:2d:06:51:35:d4:3a:74:
         a9:6c:18:87:1c:c7:6c:fc:12:75:86:9d:0b:bb:fd:0f:ba:ff:
         8b:12:9d:ec:ee:3e:75:88:82:75:a3:1c:6d:19:92:e2:4b:06:
         aa:3e:02:c4:0d:da:58:55:99:01:19:83:5c:10:9e:ac:85:d8:
         c6:8c:5a:7a:4f:36:04:9e:3b:92:a4:d2:eb:db:ec:23:d5:42:
         2c:c0:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----