Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b34Jog7xAHQ5EDun7axk6QZqIZM.cer
File:                     b34Jog7xAHQ5EDun7axk6QZqIZM.cer (raw, json)
Hash identifier:          0riMxnICDTG7Ld/XsN3JMwXmnFIqaiUG6n2EzRBFMYo=
Subject key identifier:   6F:7E:09:A2:0E:F1:00:74:39:10:3B:A7:ED:AC:64:E9:06:6A:21:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019FB8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91903B4/401B81A61D9411E295BC4EF808B02CD2/b34Jog7xAHQ5EDun7axk6QZqIZM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91903B4/401B81A61D9411E295BC4EF808B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Apr 2023 19:44:43 +0000
Certificate not after:    Mon 28 Aug 2023 00:00:00 +0000
Subordinate resources:    AS: 38460
                          IP: 123.242.200.0/21
                          IP: 2404:a7c0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106424 (0x19fb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 28 19:44:43 2023 GMT
            Not After : Aug 28 00:00:00 2023 GMT
        Subject: CN=A91903B4/serialNumber=6F7E09A20EF1007439103BA7EDAC64E9066A2193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:72:45:f7:a9:86:a2:3b:57:9d:49:98:60:
                    d9:be:50:56:91:cc:4c:6c:80:5c:4e:06:8b:83:3d:
                    fe:45:c4:3e:11:7f:dc:b5:22:3b:3f:34:71:fa:2e:
                    28:92:22:f4:9a:49:c2:28:93:2f:7f:b5:00:60:91:
                    70:83:06:37:79:14:04:79:b6:e5:3b:81:ce:fc:25:
                    ce:74:df:d1:97:a7:96:53:bd:00:df:46:e3:26:b1:
                    c7:3b:fc:e2:83:3d:58:70:99:e9:79:68:46:c9:af:
                    f0:c0:da:a0:26:26:cd:e2:13:e9:d0:ff:ea:6d:0c:
                    d6:51:02:16:56:bb:6d:a5:ab:b3:86:c3:a5:a0:54:
                    93:69:c7:b6:53:e4:c8:5e:a8:47:85:c4:c1:ed:21:
                    fb:c6:bc:f8:17:af:a1:2d:c0:84:e9:4d:3d:8d:7c:
                    c3:45:f1:b3:42:52:fc:7b:c8:23:07:d3:76:84:ed:
                    fb:76:c5:3a:b8:6b:72:b8:49:5d:01:96:e4:89:3c:
                    dc:19:97:fb:e3:a7:a4:a0:09:18:f3:61:a9:f3:6d:
                    4a:d4:53:42:01:a0:88:64:a1:ed:5c:35:73:9c:a5:
                    cd:af:a9:0e:91:dc:27:2e:54:61:f9:e0:69:66:14:
                    cd:b3:24:59:52:c8:c4:6e:30:cf:5e:fe:56:5f:8c:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7E:09:A2:0E:F1:00:74:39:10:3B:A7:ED:AC:64:E9:06:6A:21:93
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91903B4/401B81A61D9411E295BC4EF808B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91903B4/401B81A61D9411E295BC4EF808B02CD2/b34Jog7xAHQ5EDun7axk6QZqIZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38460

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.242.200.0/21
                IPv6:
                  2404:a7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:13:09:56:ef:b3:6d:de:15:6f:9b:c2:2b:07:4d:fc:5a:d3:
         49:88:f5:06:d5:db:0e:7e:38:c7:f6:d0:9e:5d:ab:31:e9:92:
         f6:82:d0:94:3c:af:08:85:73:42:f9:41:c0:76:68:17:52:03:
         60:b2:99:5a:80:3d:e9:ea:af:4c:2b:a5:9f:bf:a7:31:90:fb:
         1c:09:f0:82:c7:7b:4b:16:a3:84:57:7c:a7:11:02:ee:1b:00:
         d6:24:df:e1:06:6d:ca:46:3d:16:3e:36:b1:cd:54:40:81:ff:
         43:2f:2c:38:eb:c6:d0:fe:4c:da:12:91:79:57:0b:1c:0d:2a:
         b9:7a:f8:1f:e8:2f:04:81:ff:ee:82:6b:3c:f6:47:41:cc:65:
         2d:be:0a:4b:66:9f:56:45:98:05:ff:d6:fe:a1:c4:31:ef:04:
         81:0b:b5:6b:3a:75:4d:5b:12:c5:4f:e8:ce:d7:45:11:90:c7:
         3f:b7:0d:ea:c6:75:92:8c:bd:a7:d6:48:64:f4:4c:1b:fd:dd:
         42:c0:a6:14:18:f3:f9:3d:5c:8f:8e:e5:64:8f:8b:2e:99:18:
         f9:a6:2d:69:cc:30:49:48:b1:62:d8:76:aa:df:fd:f7:a9:19:
         dd:24:3b:dd:1f:7f:4d:40:26:64:2f:c1:d3:f3:7d:b5:8e:1d:
         22:19:30:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----