Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezRg56wfsNYK8V-ERcosre0fP2A.cer
File:                     ezRg56wfsNYK8V-ERcosre0fP2A.cer (raw, json)
Hash identifier:          ra5ejAhhet9ogTUYBJlbK02mIYtWQWfVs0NdlkxTzcM=
Subject key identifier:   7B:34:60:E7:AC:1F:B0:D6:0A:F1:5F:84:45:CA:2C:AD:ED:1F:3F:60
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019BE1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919BB2B/93960D465D5A11ECB2D87452C4F9AE02/ezRg56wfsNYK8V-ERcosre0fP2A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919BB2B/93960D465D5A11ECB2D87452C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 21 Apr 2023 07:20:32 +0000
Certificate not after:    Fri 01 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 149179
                          IP: 103.177.213.0/24
                          IP: 2001:df0:2b40::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105441 (0x19be1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 21 07:20:32 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=A919BB2B/serialNumber=7B3460E7AC1FB0D60AF15F8445CA2CADED1F3F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:4e:38:da:2c:61:2b:6f:a1:91:32:17:da:
                    41:74:0c:31:db:e1:ae:34:a2:da:6f:e1:8a:7e:fb:
                    b6:f3:95:70:1e:dc:fb:d2:de:eb:c1:f3:e0:6b:69:
                    77:9b:4d:91:ec:43:84:20:87:38:7f:36:08:88:7b:
                    63:18:95:a7:59:29:4a:28:bb:74:7b:24:7c:0a:be:
                    9d:3f:93:6f:3d:c6:ef:7e:1d:05:51:f2:5b:8f:b3:
                    bd:b0:a6:b6:d4:27:b1:a4:19:4b:98:93:61:08:96:
                    17:d8:86:18:78:7e:0f:fa:56:88:97:36:df:cd:f1:
                    74:bb:1e:df:8b:b2:ee:ad:e4:33:09:ef:bf:fc:ac:
                    e1:d3:5c:36:bd:21:13:dd:e4:ff:01:76:4b:70:6a:
                    0e:df:b3:95:f4:7c:b5:81:c2:af:99:70:0a:f9:e4:
                    5d:67:79:49:a8:7f:17:9d:36:b5:51:5d:73:70:c7:
                    97:37:4b:8e:22:97:f2:94:18:2f:8f:06:92:0c:55:
                    b5:c8:0c:df:1a:19:83:a4:8e:6c:86:d6:54:ae:f3:
                    56:8e:b5:59:54:36:fb:9f:85:f5:61:81:b8:61:8c:
                    4f:06:42:9a:f3:4e:d4:b6:ab:62:a2:2d:87:20:3f:
                    73:2f:d8:1b:bf:cc:2a:f7:4f:b8:c6:dc:0c:97:d4:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:34:60:E7:AC:1F:B0:D6:0A:F1:5F:84:45:CA:2C:AD:ED:1F:3F:60
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919BB2B/93960D465D5A11ECB2D87452C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919BB2B/93960D465D5A11ECB2D87452C4F9AE02/ezRg56wfsNYK8V-ERcosre0fP2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149179

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.213.0/24
                IPv6:
                  2001:df0:2b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:91:17:27:54:b9:11:e4:73:20:f8:54:29:88:71:48:eb:f8:
         d3:4a:48:1b:b9:01:19:48:f4:69:9c:ed:fb:a8:22:6f:05:43:
         95:23:9d:81:0e:55:14:b7:0d:e0:66:44:be:15:c6:4e:b2:a8:
         d2:7e:86:31:48:52:af:7b:17:54:bd:eb:e7:3d:89:54:f1:d8:
         dc:62:38:92:91:1a:90:ef:3f:0a:22:b6:13:3f:f8:f8:30:27:
         92:de:81:b5:56:14:68:cb:b7:e9:1e:f3:58:63:1b:72:27:f3:
         82:66:54:d4:33:97:16:ba:9e:b1:ee:39:7a:f3:5f:45:a1:4b:
         04:a1:48:b3:64:bc:73:c6:0b:dc:69:4c:c7:39:94:50:e7:d4:
         70:8e:19:44:5d:ae:64:a8:37:62:4c:1c:5c:95:6b:66:87:d9:
         cc:3b:48:2e:8a:62:c1:66:8d:5b:59:c0:42:89:d0:da:92:54:
         95:d8:f1:2b:38:33:8d:19:5e:8a:79:cb:2a:0c:2d:4c:98:38:
         ad:8c:47:d3:68:cb:4e:8b:98:ac:8a:f5:14:f6:ff:20:e0:fd:
         65:94:ca:98:1a:2a:4d:dc:40:0d:45:e0:27:92:fa:71:e4:2c:
         e4:65:7a:1a:09:e6:7c:9b:6e:ba:63:7c:88:f5:22:f2:00:e7:
         2c:22:17:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----