Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCgXGrH-qLmKRvmN4iY8931sOyg.cer
File:                     eCgXGrH-qLmKRvmN4iY8931sOyg.cer (raw, json)
Hash identifier:          1JKgngEDkAqD/O+6SqzFAnZzffaPzBHxgSTMHDYYwTE=
Subject key identifier:   78:28:17:1A:B1:FE:A8:B9:8A:46:F9:8D:E2:26:3C:F7:7D:6C:3B:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014750
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E3CDE/6CBEE262611C11E8B2044947C4F9AE02/eCgXGrH-qLmKRvmN4iY8931sOyg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E3CDE/6CBEE262611C11E8B2044947C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Mar 2022 06:11:55 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2407:d280::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83792 (0x14750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 06:11:55 2022 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A91E3CDE/serialNumber=7828171AB1FEA8B98A46F98DE2263CF77D6C3B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:c4:f3:f7:74:6c:83:ff:18:dd:09:33:00:
                    01:c8:45:17:e7:83:f7:21:11:57:6d:aa:bc:fc:28:
                    54:a5:00:24:1c:e5:b1:b9:1f:d7:93:ed:f6:c0:48:
                    cf:a7:69:ec:32:8f:67:6f:a7:8e:41:46:00:37:26:
                    ac:24:e2:6f:d0:9f:01:df:bd:7b:77:1f:12:e8:74:
                    4f:79:be:c8:7d:9e:d2:b2:c0:ef:3a:f4:c6:29:19:
                    8e:3a:58:f0:13:85:3b:0b:72:a1:af:84:eb:e1:2b:
                    15:da:5e:4d:bd:98:3d:59:61:e8:cf:6b:a1:42:3d:
                    ad:b1:82:16:3b:b5:9e:49:60:29:32:50:f2:bc:41:
                    5c:24:ce:39:2a:89:60:2b:fd:e7:97:aa:fe:5e:6e:
                    a7:f5:92:11:dc:7c:6c:1e:d0:c3:19:33:eb:77:ad:
                    b9:00:2c:56:8a:ba:73:e4:77:51:57:23:7e:a5:d7:
                    6d:34:52:df:54:ed:62:f9:06:3d:79:09:d1:f1:64:
                    f3:62:cd:4b:b0:8e:83:25:7b:f6:68:86:28:a6:8c:
                    54:8d:73:84:3f:b1:eb:43:29:62:6b:55:95:65:b3:
                    41:2c:97:ca:a9:10:f4:5d:5f:bc:1c:88:af:70:9d:
                    14:f6:21:48:5b:0a:a7:c7:c6:e4:2c:4e:1f:73:42:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:28:17:1A:B1:FE:A8:B9:8A:46:F9:8D:E2:26:3C:F7:7D:6C:3B:28
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3CDE/6CBEE262611C11E8B2044947C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3CDE/6CBEE262611C11E8B2044947C4F9AE02/eCgXGrH-qLmKRvmN4iY8931sOyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d280::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:2f:0b:e5:7b:81:5d:1c:e9:13:48:fd:f2:35:f8:49:9f:b0:
         80:6c:ee:64:d3:58:0f:4c:a4:3b:a1:7a:1d:6a:c1:30:21:c2:
         f9:f9:1b:15:b1:34:69:8b:56:f4:14:b7:2e:95:90:1c:6d:d7:
         7d:24:97:59:25:b3:09:c4:10:69:f4:de:1a:75:57:97:31:ad:
         f1:94:64:ba:4b:46:81:3f:5f:03:55:46:76:3d:d2:e1:92:a4:
         1b:93:2e:be:1a:2f:27:ff:07:47:84:c1:ef:72:63:7d:9f:ab:
         a7:50:ff:8d:0f:01:e7:0b:a7:79:82:35:46:f2:08:aa:a9:5c:
         a3:e8:4f:a8:19:0d:a6:16:92:e0:76:35:46:87:ec:0c:76:f3:
         87:3d:b2:ad:9c:9e:32:0c:7a:24:4d:98:56:db:76:bf:8f:14:
         e0:26:a1:40:9c:d0:9f:21:41:61:9e:ce:4c:54:73:48:9d:ff:
         67:9f:58:5f:7b:96:6b:37:f7:20:32:88:7b:72:10:ff:d8:40:
         10:70:c7:9d:81:d4:28:b6:53:05:07:70:b1:98:f6:38:71:a0:
         0b:76:54:e5:29:a3:3f:6f:8a:87:02:ce:8b:ff:4b:ae:50:30:
         81:ba:f2:bc:5b:c5:88:fc:46:2f:50:bf:91:bd:19:f5:17:85:
         8e:16:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----