Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asQKabJLQbaoxEsI2lJhL8OwE18.cer
File:                     asQKabJLQbaoxEsI2lJhL8OwE18.cer (raw, json)
Hash identifier:          uT+pYxteV8WErEEkCBsJ144rfPH+b0Lebu72cLVHMgw=
Subject key identifier:   6A:C4:0A:69:B2:4B:41:B6:A8:C4:4B:08:DA:52:61:2F:C3:B0:13:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0142F0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CFAC8/3E167A58292711E692DAA117C4F9AE02/asQKabJLQbaoxEsI2lJhL8OwE18.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CFAC8/3E167A58292711E692DAA117C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Feb 2022 00:22:03 +0000
Certificate not after:    Thu 01 Dec 2022 00:00:00 +0000
Subordinate resources:    AS: 55733
                          IP: 2404:a780::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82672 (0x142f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 00:22:03 2022 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91CFAC8/serialNumber=6AC40A69B24B41B6A8C44B08DA52612FC3B0135F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:e7:99:a5:1c:f3:03:31:bd:70:0d:a3:65:
                    58:01:cd:16:12:a6:60:82:b6:6d:4b:11:9b:a9:92:
                    47:e3:a1:37:27:8b:1b:8d:33:50:c8:7f:8f:17:22:
                    f4:b6:8c:d1:a0:fc:c8:6b:9e:4d:22:0f:0e:b8:40:
                    34:88:5f:1c:f9:48:08:3c:aa:14:05:b4:6b:82:3f:
                    2d:45:73:95:f1:dc:55:f2:1d:bc:b6:28:b8:a9:eb:
                    e5:3c:8d:af:9c:03:96:33:ff:6e:9a:ad:e9:10:f6:
                    20:55:88:01:f1:4a:11:41:f4:23:2e:48:46:f8:56:
                    3f:42:0c:7a:a5:0f:fc:df:bd:14:94:12:53:a9:a7:
                    78:91:bf:b8:d2:8e:f9:b0:74:d6:12:b7:1a:0c:90:
                    0d:f5:af:bf:5b:97:41:97:f1:9b:a1:cf:3d:9e:bb:
                    4f:d8:f7:34:e4:b8:2c:82:e4:0e:59:d1:4f:08:47:
                    71:81:fc:d6:e5:8c:7e:50:3c:e8:8d:66:fd:6b:c4:
                    96:e5:c5:fc:4f:cd:ea:a6:3c:11:cc:32:64:01:db:
                    b6:51:c0:d9:9f:6c:51:0b:9d:14:29:1a:f9:38:57:
                    ca:e0:94:da:c3:d8:67:4d:73:cd:2f:25:19:8d:6e:
                    00:2d:de:85:19:98:35:90:47:df:a7:f8:ca:18:b8:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C4:0A:69:B2:4B:41:B6:A8:C4:4B:08:DA:52:61:2F:C3:B0:13:5F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFAC8/3E167A58292711E692DAA117C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFAC8/3E167A58292711E692DAA117C4F9AE02/asQKabJLQbaoxEsI2lJhL8OwE18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55733

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a780::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:29:8a:0b:2c:d9:52:54:d8:64:3c:82:7e:0e:37:28:60:
         71:e4:2d:b1:29:95:7c:83:e0:c6:98:e4:aa:4d:95:62:6f:8d:
         13:a0:5c:b6:e2:36:d7:a8:85:4b:93:c3:ac:07:7a:ef:fb:8a:
         bc:82:ed:3c:c5:66:84:7b:7f:be:38:20:9f:b2:ff:9b:7e:e8:
         71:7a:fe:4d:9b:4b:7d:c0:f9:c6:cd:2f:94:8e:8b:f8:58:dd:
         26:b8:f4:47:0f:40:a0:d4:63:0a:a8:31:b7:b4:83:42:21:d1:
         71:36:85:81:ba:e4:eb:61:e1:b1:7c:44:6a:bb:e8:62:d3:af:
         d6:76:aa:9f:2e:8e:f9:6d:19:dd:be:72:e7:ea:fb:93:4c:f9:
         88:96:90:2b:bb:0f:7f:2c:99:e8:39:c7:dd:3f:84:fd:03:d5:
         d5:59:8e:47:38:b9:8e:1c:70:aa:66:05:cc:9a:86:b5:b7:ad:
         a8:77:22:5c:4f:57:01:b2:3d:56:c6:8b:2e:8c:f5:03:9d:1b:
         71:46:d9:e7:aa:8f:dc:5b:0b:9e:7e:48:26:c9:76:66:b3:d1:
         bd:e8:4a:78:95:9c:c1:45:a6:fc:a6:19:ef:9f:b6:40:5a:e7:
         3d:cf:89:62:89:41:34:7f:6d:10:f4:ec:a4:d5:67:04:25:b4:
         19:93:a7:e3
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAULwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDIwMjAwMjIwM1oXDTIyMTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0ZBQzgxMTAvBgNVBAUTKDZBQzQwQTY5QjI0QjQxQjZBOEM0NEIw
OERBNTI2MTJGQzNCMDEzNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBSueZpRzzAzG9cA2jZVgBzRYSpmCCtm1LEZupkkfjoTcnixuNM1DIf48XIvS2
jNGg/Mhrnk0iDw64QDSIXxz5SAg8qhQFtGuCPy1Fc5Xx3FXyHby2KLip6+U8ja+c
A5Yz/26arekQ9iBViAHxShFB9CMuSEb4Vj9CDHqlD/zfvRSUElOpp3iRv7jSjvmw
dNYStxoMkA31r79bl0GX8Zuhzz2eu0/Y9zTkuCyC5A5Z0U8IR3GB/NbljH5QPOiN
Zv1rxJblxfxPzeqmPBHMMmQB27ZRwNmfbFELnRQpGvk4V8rglNrD2GdNc80vJRmN
bgAt3oUZmDWQR9+n+MoYuONDAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUasQKabJL
QbaoxEsI2lJhL8OwE18wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNGQUM4LzNFMTY3QTU4MjkyNzExRTY5MkRBQTExN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDRkFDOC8zRTE2N0E1ODI5MjcxMUU2OTJEQUExMTdDNEY5QUUwMi9hc1FLYWJK
TFFiYW94RXNJMmxKaEw4T3dFMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANm1MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJASngDANBgkq
hkiG9w0BAQsFAAOCAQEATnMpigss2VJU2GQ8gn4ONyhgceQtsSmVfIPgxpjkqk2V
Ym+NE6BctuI216iFS5PDrAd67/uKvILtPMVmhHt/vjggn7L/m37ocXr+TZtLfcD5
xs0vlI6L+FjdJrj0Rw9AoNRjCqgxt7SDQiHRcTaFgbrk62HhsXxEarvoYtOv1naq
ny6O+W0Z3b5y5+r7k0z5iJaQK7sPfyyZ6DnH3T+E/QPV1VmORzi5jhxwqmYFzJqG
tbetqHciXE9XAbI9VsaLLoz1A50bcUbZ56qP3FsLnn5IJsl2ZrPRvehKeJWcwUWm
/KYZ75+2QFrnPc+JYolBNH9tEPTspNVnBCW0GZOn4w==
-----END CERTIFICATE-----