Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg1t3eQz7310IAd_wpcDaIvqi_E.cer
File:                     gg1t3eQz7310IAd_wpcDaIvqi_E.cer (raw, json)
Hash identifier:          kS8lygcn46sqR4ds9/bKtNcSmjTvzCBjHZPjxqg8a4U=
Subject key identifier:   82:0D:6D:DD:E4:33:EF:7D:74:20:07:7F:C2:97:03:68:8B:EA:8B:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01654E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9132F01/683C9266A10611EB88AAAB29C4F9AE02/gg1t3eQz7310IAd_wpcDaIvqi_E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9132F01/683C9266A10611EB88AAAB29C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 Jul 2022 18:32:40 +0000
Certificate not after:    Thu 01 Dec 2022 00:00:00 +0000
Subordinate resources:    AS: 133619
                          IP: 103.248.201.0/24
                          IP: 2407:700::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91470 (0x1654e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 31 18:32:40 2022 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A9132F01/serialNumber=820D6DDDE433EF7D7420077FC29703688BEA8BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:d2:77:e6:7e:ce:9f:21:56:d9:0a:b4:71:
                    39:92:d3:5e:6a:4d:08:5f:80:00:d9:de:67:3a:e4:
                    3e:42:d7:9c:4d:75:8d:40:5f:c5:07:af:9d:b0:0e:
                    96:b4:c8:d3:12:01:8a:74:b8:ff:c9:5c:b4:8e:fb:
                    9c:74:69:19:df:71:9a:8a:e6:86:ea:cd:d2:8f:61:
                    c1:3a:67:e0:c4:2c:83:4d:4f:d1:62:26:04:ce:97:
                    a2:3d:23:31:c5:4d:8b:ab:65:fe:0b:94:9b:ae:e5:
                    0c:e1:82:33:13:1f:71:17:45:6f:20:e5:3b:bf:d9:
                    00:15:8a:a0:19:90:55:39:d0:97:a6:b1:46:55:7e:
                    e1:47:12:a2:9a:ce:bd:8d:24:ba:05:57:39:5d:7b:
                    87:71:fb:7e:a8:51:bc:c0:05:7d:ce:dc:3c:b6:ee:
                    2c:2f:c3:60:43:55:f4:3a:12:52:56:27:8a:af:30:
                    b3:78:f2:e8:c1:b0:a7:f2:d7:de:92:0e:eb:84:dd:
                    56:f7:a4:70:63:ff:93:8c:a5:74:d3:49:6e:66:9a:
                    a5:66:49:4a:74:a4:72:f1:45:07:69:26:97:c9:a5:
                    fb:a7:3b:7c:c9:cf:52:27:18:14:7f:bc:39:bc:ac:
                    23:e7:02:d4:f5:16:b6:39:8b:d4:62:9b:2f:64:a8:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:6D:DD:E4:33:EF:7D:74:20:07:7F:C2:97:03:68:8B:EA:8B:F1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132F01/683C9266A10611EB88AAAB29C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132F01/683C9266A10611EB88AAAB29C4F9AE02/gg1t3eQz7310IAd_wpcDaIvqi_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133619

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.201.0/24
                IPv6:
                  2407:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:ff:28:79:64:f3:af:ba:8c:a9:8e:51:c1:3a:10:e5:01:8a:
         bc:87:28:44:ac:ab:01:55:2b:55:8f:4a:f1:0a:d1:89:ee:1d:
         87:e0:31:2e:67:cd:33:75:09:b3:61:c0:11:c3:33:27:37:50:
         15:ba:10:1a:66:7b:81:92:0f:84:0f:fe:35:f4:cf:bd:71:7d:
         a4:68:e6:54:57:30:2f:55:e1:73:03:a9:4a:8e:3a:31:38:ab:
         e4:ff:0d:11:4a:d1:61:8e:58:66:9e:68:36:52:9b:80:37:9f:
         b3:d6:eb:eb:41:f5:a3:73:f5:05:17:76:97:00:be:52:29:71:
         2c:d0:87:fd:e7:5a:1e:1e:b3:f8:40:93:a4:b3:fe:1c:f8:17:
         c0:6c:4b:c1:da:4d:db:36:8e:7a:c3:a4:5d:3f:97:3f:b9:6f:
         e5:4e:29:76:cf:61:cf:b6:a9:c6:a1:04:86:d9:a6:13:29:a6:
         06:8a:9d:1c:35:c7:4b:99:e8:e6:80:28:75:15:0d:c4:f6:ce:
         58:62:9b:0d:dc:eb:58:22:c0:ba:18:5c:47:41:c7:48:11:26:
         87:96:31:5c:77:fa:5c:65:e1:17:52:c4:41:d4:fe:a9:f3:d6:
         c4:bf:ee:f9:20:66:d6:47:2d:9d:49:d8:5f:45:ec:bb:fa:13:
         14:68:73:c3
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAWVOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDczMTE4MzI0MFoXDTIyMTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzJGMDExMTAvBgNVBAUTKDgyMEQ2RERERTQzM0VGN0Q3NDIwMDc3
RkMyOTcwMzY4OEJFQThCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHqNJ35n7OnyFW2Qq0cTmS015qTQhfgADZ3mc65D5C15xNdY1AX8UHr52wDpa0
yNMSAYp0uP/JXLSO+5x0aRnfcZqK5obqzdKPYcE6Z+DELINNT9FiJgTOl6I9IzHF
TYurZf4LlJuu5QzhgjMTH3EXRW8g5Tu/2QAViqAZkFU50JemsUZVfuFHEqKazr2N
JLoFVzlde4dx+36oUbzABX3O3Dy27iwvw2BDVfQ6ElJWJ4qvMLN48ujBsKfy196S
DuuE3Vb3pHBj/5OMpXTTSW5mmqVmSUp0pHLxRQdpJpfJpfunO3zJz1InGBR/vDm8
rCPnAtT1FrY5i9Rimy9kqO6zAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUgg1t3eQz
7310IAd/wpcDaIvqi/EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMyRjAxLzY4M0M5MjY2QTEwNjExRUI4OEFBQUIyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzMkYwMS82ODNDOTI2NkExMDYxMUVCODhBQUFCMjlDNEY5QUUwMi9nZzF0M2VR
ejczMTBJQWRfd3BjRGFJdnFpX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgnzMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZ/jJMA0EAgAC
MAcDBQAkBwcAMA0GCSqGSIb3DQEBCwUAA4IBAQBn/yh5ZPOvuoypjlHBOhDlAYq8
hyhErKsBVStVj0rxCtGJ7h2H4DEuZ80zdQmzYcARwzMnN1AVuhAaZnuBkg+ED/41
9M+9cX2kaOZUVzAvVeFzA6lKjjoxOKvk/w0RStFhjlhmnmg2UpuAN5+z1uvrQfWj
c/UFF3aXAL5SKXEs0If951oeHrP4QJOks/4c+BfAbEvB2k3bNo56w6RdP5c/uW/l
Til2z2HPtqnGoQSG2aYTKaYGip0cNcdLmejmgCh1FQ3E9s5YYpsN3OtYIsC6GFxH
QcdIESaHljFcd/pcZeEXUsRB1P6p89bEv+75IGbWRy2dSdhfRey7+hMUaHPD
-----END CERTIFICATE-----