Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAmAGmVwd06-WZ_Y7mfg8r_TJgs.cer
File:                     gAmAGmVwd06-WZ_Y7mfg8r_TJgs.cer (raw, json)
Hash identifier:          nBeBRVUbtpHhPbIrgFlHfzSrO1E5xel185zITnLrvSU=
Subject key identifier:   80:09:80:1A:65:70:77:4E:BE:59:9F:D8:EE:67:E0:F2:BF:D3:26:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0142E5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919D02E/C53FF7BC059911ECAA2DAF64C4F9AE02/gAmAGmVwd06-WZ_Y7mfg8r_TJgs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919D02E/C53FF7BC059911ECAA2DAF64C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Feb 2022 15:39:08 +0000
Certificate not after:    Wed 01 Jun 2022 00:00:00 +0000
Subordinate resources:    AS: 141005
                          IP: 103.154.186.0/23
                          IP: 2001:df4:9880::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82661 (0x142e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  1 15:39:08 2022 GMT
            Not After : Jun  1 00:00:00 2022 GMT
        Subject: CN=A919D02E/serialNumber=8009801A6570774EBE599FD8EE67E0F2BFD3260B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:14:da:62:33:7d:19:ab:af:d2:e8:66:78:
                    3c:9f:10:ea:98:8a:ea:9d:b0:14:bc:33:9f:60:5d:
                    41:6d:c0:f8:7a:26:5e:8b:2c:01:df:f8:f6:66:e0:
                    7b:72:41:44:26:f7:2a:d5:2a:28:4f:84:c3:aa:ae:
                    ba:89:65:c8:b9:8c:0a:59:dc:94:92:78:b7:47:2d:
                    32:24:62:03:ea:a2:4e:93:d2:a7:40:c2:25:d1:28:
                    db:e8:5b:c3:5c:49:ad:80:49:fc:d9:5f:98:a3:44:
                    32:b2:25:04:5d:f4:f5:37:93:ab:54:a8:d5:c3:6c:
                    3d:c6:5b:86:f1:c8:eb:ca:bb:86:c5:3b:b5:96:8d:
                    b7:b9:58:af:ea:2b:9f:f5:72:e6:3a:de:4b:1a:82:
                    85:b5:f3:90:9f:da:ae:bd:1c:27:36:cd:8d:cf:80:
                    a8:ec:63:13:68:a7:f5:78:bd:0b:8b:43:f2:a4:e6:
                    c5:0c:fd:a0:d1:fa:f0:2f:cc:56:e9:65:84:2a:4d:
                    02:d2:10:ea:32:e7:eb:be:cb:5c:32:1c:8d:a9:29:
                    3f:90:ff:16:9f:38:ae:ea:0c:45:c1:61:9a:5a:b5:
                    e6:4c:92:42:01:ea:d7:cb:74:cd:ce:fe:bc:aa:77:
                    f7:f7:82:2d:7c:74:78:7f:11:23:a5:fd:c9:70:6c:
                    15:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:09:80:1A:65:70:77:4E:BE:59:9F:D8:EE:67:E0:F2:BF:D3:26:0B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D02E/C53FF7BC059911ECAA2DAF64C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D02E/C53FF7BC059911ECAA2DAF64C4F9AE02/gAmAGmVwd06-WZ_Y7mfg8r_TJgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141005

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.186.0/23
                IPv6:
                  2001:df4:9880::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:30:3b:c3:1b:16:9f:9a:e1:4b:a3:47:dd:ec:64:df:db:
         60:61:e5:0c:d1:20:f7:42:ca:21:c7:08:71:7b:15:d9:82:9d:
         b6:75:ce:87:e8:36:03:35:99:f9:f4:2e:85:85:a6:0b:e4:7b:
         8f:12:74:60:ff:d3:b6:c8:c0:d3:1c:ef:fc:95:44:9e:8f:08:
         34:0b:b5:cc:ed:bf:ca:fc:58:87:52:46:b0:c6:03:5a:d1:9c:
         55:9f:97:aa:93:4d:b6:41:4d:e4:10:44:80:dc:bf:42:41:99:
         60:03:4d:67:2d:69:bd:42:d2:e3:19:a5:fd:b5:c1:15:4b:18:
         85:9a:f3:9f:7c:b2:05:ae:d7:63:7f:31:f8:4f:7b:7b:98:f4:
         d3:c4:6b:3d:17:c0:68:97:69:9c:1f:ee:9c:ac:de:1b:22:7b:
         3f:bc:fd:77:a4:6e:86:e6:ed:13:00:30:2e:92:0f:cb:f0:b2:
         7a:4e:ad:99:49:5b:72:0c:04:af:90:ba:22:32:2a:3a:4b:95:
         35:55:97:3f:2c:1b:c0:c8:5d:0b:40:90:bd:fb:a9:8a:9f:a2:
         4e:34:44:61:82:c3:b1:53:a6:e5:7c:cc:3c:fe:6b:ad:eb:06:
         5c:15:1d:4a:77:fa:95:6f:04:f8:13:dc:6f:59:48:6d:26:5a:
         c9:4c:c7:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----