Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asimded5blBAxcEeigHwqTSw9Ug.cer
File:                     asimded5blBAxcEeigHwqTSw9Ug.cer (raw, json)
Hash identifier:          gP4RwU9xdFjysNeBPupUGkaSLYwrGETH5NfdvVgfm6U=
Subject key identifier:   6A:C8:A6:75:E7:79:6E:50:40:C5:C1:1E:8A:01:F0:A9:34:B0:F5:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018E36
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917D6FE/28F1F63E366911ECA80AB14BC4F9AE02/asimded5blBAxcEeigHwqTSw9Ug.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917D6FE/28F1F63E366911ECA80AB14BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Mar 2023 03:50:28 +0000
Certificate not after:    Fri 30 Jun 2023 00:00:00 +0000
Subordinate resources:    IP: 103.173.28.0/23
                          IP: 2001:df7:8a80::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101942 (0x18e36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 03:50:28 2023 GMT
            Not After : Jun 30 00:00:00 2023 GMT
        Subject: CN=A917D6FE/serialNumber=6AC8A675E7796E5040C5C11E8A01F0A934B0F548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:69:eb:f0:84:03:df:8e:4f:4f:5f:c0:51:52:
                    fe:0f:fb:36:d0:b1:b5:35:6c:a7:38:fe:d6:5d:8a:
                    c8:bf:74:ed:00:93:0b:d2:28:4e:64:12:16:1a:ca:
                    34:07:0a:a9:db:17:e0:5f:ed:73:82:a9:52:1e:92:
                    e3:7e:8d:77:75:d3:b8:e5:74:c4:7d:72:58:a3:e6:
                    54:4a:f0:f9:b7:02:39:07:26:62:52:f7:fa:57:68:
                    17:16:e9:04:e7:9b:3d:59:71:4a:f7:c9:e9:cb:9a:
                    1d:85:de:8a:de:a8:86:74:7c:d7:15:99:89:c8:f9:
                    1e:c2:b2:1c:99:a6:02:36:9d:0a:2b:d9:f9:1e:71:
                    98:d3:c1:af:4b:3c:3c:35:01:45:57:2e:ff:74:e6:
                    24:53:2f:6b:89:8a:56:3e:b1:ff:78:68:db:35:79:
                    e3:05:be:d4:c9:6d:53:2d:c4:fa:92:6f:70:b7:d2:
                    14:fb:32:8b:58:72:48:c2:a3:55:46:88:04:09:6c:
                    63:d0:26:93:6d:3c:0a:2b:19:84:41:1e:2f:a4:fb:
                    39:a3:58:4a:80:22:ba:2e:8c:be:15:29:27:98:58:
                    39:2f:95:93:a8:3f:9b:a4:53:11:a7:dd:99:d2:f9:
                    be:42:05:2f:27:8e:8a:9f:83:d9:1f:d9:07:cc:21:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C8:A6:75:E7:79:6E:50:40:C5:C1:1E:8A:01:F0:A9:34:B0:F5:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D6FE/28F1F63E366911ECA80AB14BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D6FE/28F1F63E366911ECA80AB14BC4F9AE02/asimded5blBAxcEeigHwqTSw9Ug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.28.0/23
                IPv6:
                  2001:df7:8a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:4d:b7:bd:88:7f:6c:e5:1f:d4:3d:3f:5f:c4:07:f0:67:36:
         72:2d:9e:f9:ce:7f:64:ec:a4:5c:6c:d0:ea:05:aa:ac:1f:72:
         56:0c:92:06:a8:70:a7:ec:34:0b:1d:62:91:96:28:83:37:d6:
         0d:55:0c:b6:17:09:1b:7f:2d:dd:b1:f1:88:3c:2e:c8:d4:40:
         97:28:39:3a:4e:a8:8b:32:b9:df:30:8a:20:bd:fa:c0:4a:ae:
         39:bc:3a:99:dc:f6:42:03:f0:9e:5d:bc:68:18:2e:13:86:49:
         6b:77:05:a8:ea:8f:03:71:9d:e7:25:c3:71:0a:ea:c1:83:a6:
         f2:36:a9:94:57:f0:04:2b:31:1d:f2:9c:60:0c:3b:a6:11:2a:
         99:f5:29:8c:79:af:a3:28:41:7a:35:57:7b:d8:38:a0:60:3a:
         02:8b:96:51:ab:02:6a:a1:f9:3f:9f:ac:32:2b:81:8e:73:b1:
         ef:15:ef:88:78:ce:4c:d4:d6:94:1c:3f:f1:a2:ad:74:45:1e:
         87:f8:13:01:04:20:e0:9a:8a:21:b5:d7:5e:e8:4d:8e:70:c1:
         c5:f8:02:58:70:57:eb:0c:52:98:f1:f0:10:6e:d5:43:01:02:
         73:cf:b5:fc:cc:e7:02:41:8e:7d:7a:57:cf:de:16:53:99:0d:
         af:f4:fc:c3
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAY42MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDMwMTAzNTAyOFoXDTIzMDYzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0Q2RkUxMTAvBgNVBAUTKDZBQzhBNjc1RTc3OTZFNTA0MEM1QzEx
RThBMDFGMEE5MzRCMEY1NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuaevwhAPfjk9PX8BRUv4P+zbQsbU1bKc4/tZdisi/dO0AkwvSKE5kEhYayjQH
CqnbF+Bf7XOCqVIekuN+jXd107jldMR9clij5lRK8Pm3AjkHJmJS9/pXaBcW6QTn
mz1ZcUr3yenLmh2F3oreqIZ0fNcVmYnI+R7CshyZpgI2nQor2fkecZjTwa9LPDw1
AUVXLv905iRTL2uJilY+sf94aNs1eeMFvtTJbVMtxPqSb3C30hT7MotYckjCo1VG
iAQJbGPQJpNtPAorGYRBHi+k+zmjWEqAIroujL4VKSeYWDkvlZOoP5ukUxGn3ZnS
+b5CBS8njoqfg9kf2QfMIdhTAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUasimded5
blBAxcEeigHwqTSw9UgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdENkZFLzI4RjFGNjNFMzY2OTExRUNBODBBQjE0QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3RDZGRS8yOEYxRjYzRTM2NjkxMUVDQTgwQUIxNEJDNEY5QUUwMi9hc2ltZGVk
NWJsQkF4Y0VlaWdId3FUU3c5VWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFnrRwwDwQCAAIwCQMHACABDfeKgDANBgkqhkiG9w0BAQsFAAOC
AQEAI023vYh/bOUf1D0/X8QH8Gc2ci2e+c5/ZOykXGzQ6gWqrB9yVgySBqhwp+w0
Cx1ikZYogzfWDVUMthcJG38t3bHxiDwuyNRAlyg5Ok6oizK53zCKIL36wEquObw6
mdz2QgPwnl28aBguE4ZJa3cFqOqPA3Gd5yXDcQrqwYOm8japlFfwBCsxHfKcYAw7
phEqmfUpjHmvoyhBejVXe9g4oGA6AouWUasCaqH5P5+sMiuBjnOx7xXviHjOTNTW
lBw/8aKtdEUeh/gTAQQg4JqKIbXXXuhNjnDBxfgCWHBX6wxSmPHwEG7VQwECc8+1
/MznAkGOfXpXz94WU5kNr/T8ww==
-----END CERTIFICATE-----