Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1_XKVuWxX7JeDFvsSivinuN8-U.cer
File:                     i1_XKVuWxX7JeDFvsSivinuN8-U.cer (raw, json)
Hash identifier:          dEMB5WM2TCzDZaeKh6Bwg8D9DcKsnocRH3HBp62IqSU=
Subject key identifier:   8B:5F:D7:29:5B:96:C5:7E:C9:78:31:6F:B1:28:AF:8A:7B:8D:F3:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01194D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9124B5E/BA6C0D464C9911E9A468F042C4F9AE02/i1_XKVuWxX7JeDFvsSivinuN8-U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9124B5E/BA6C0D464C9911E9A468F042C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 16 Jun 2021 06:38:26 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 24242
                          IP: 103.136.144.0/22
                          IP: 2404:9540::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72013 (0x1194d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 16 06:38:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A9124B5E/serialNumber=8B5FD7295B96C57EC978316FB128AF8A7B8DF3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:6d:31:2b:dc:f6:c1:a8:71:14:ca:03:6c:
                    84:3a:2c:29:27:44:0e:d5:b9:66:5c:70:f4:57:60:
                    84:f4:12:25:27:90:7b:22:38:a3:17:82:21:0a:28:
                    d0:8a:77:9b:a4:b1:9b:6b:37:ed:2a:6a:71:67:1b:
                    8a:a6:94:35:67:60:43:0c:df:a2:cc:6d:89:3a:f9:
                    4d:a1:e0:04:e2:31:b8:56:13:d3:34:23:6d:4f:8d:
                    74:3e:d8:26:cb:31:03:16:04:8d:89:55:85:1b:65:
                    13:90:ae:dd:da:52:ad:fc:54:82:0a:2e:0e:4e:df:
                    cc:0d:bf:72:7d:dd:e2:cd:2d:b2:b8:4c:ce:68:5f:
                    56:df:8d:e2:31:5a:e5:04:0d:f7:eb:6b:96:ea:69:
                    97:5a:d4:89:23:cf:c2:b6:6c:9e:90:17:f4:90:5f:
                    83:1c:80:d7:1a:3f:8b:51:de:a0:bb:b6:39:51:34:
                    b4:62:b7:4b:b5:03:42:b7:5d:c3:df:42:39:30:b5:
                    b0:50:8c:81:22:3f:f9:7c:86:95:59:79:c2:0c:3a:
                    df:f1:bb:00:f6:38:62:a6:96:b0:8b:d9:d7:46:51:
                    c3:18:af:ef:46:22:43:92:ff:bf:f1:82:a0:35:0f:
                    46:53:62:de:d4:cb:60:27:a0:1d:96:a1:32:e0:4f:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5F:D7:29:5B:96:C5:7E:C9:78:31:6F:B1:28:AF:8A:7B:8D:F3:E5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9124B5E/BA6C0D464C9911E9A468F042C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9124B5E/BA6C0D464C9911E9A468F042C4F9AE02/i1_XKVuWxX7JeDFvsSivinuN8-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24242

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.144.0/22
                IPv6:
                  2404:9540::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:d8:cf:30:fc:99:22:71:21:b8:c1:f4:47:8a:4d:6a:b6:
         47:52:72:fc:68:a0:a0:46:54:3d:a8:c1:19:7f:8a:b3:a7:f6:
         63:34:59:36:6f:1c:63:ce:10:d4:dd:b1:32:b9:99:d3:95:6f:
         e8:67:14:f3:7b:41:64:b9:b6:77:75:1e:5f:06:a3:e1:31:6a:
         0f:46:34:6f:1c:51:da:ab:a2:55:ef:ff:13:6d:18:ad:fa:be:
         94:d4:9b:38:bc:71:a3:a5:ec:38:cf:1c:85:b9:99:3f:a0:f4:
         ad:c0:9a:f7:95:9e:f6:23:c4:4e:b8:28:1a:44:dd:bf:7b:7d:
         bb:48:a4:57:8d:cb:2d:e7:d7:86:c6:4a:a5:25:b3:0f:ff:a7:
         21:70:43:d3:48:d3:dd:e0:53:9e:5d:a7:18:c2:fc:5a:1c:67:
         76:0c:91:28:d4:7b:0a:86:83:b3:b7:1a:aa:57:78:36:a7:52:
         44:45:c5:c3:2e:2b:9e:4a:80:f3:32:40:fd:9a:e1:a0:64:6f:
         dd:f4:e6:d8:ee:5d:32:a1:1b:83:bb:a5:51:e6:1f:f7:4a:bc:
         fc:06:b0:27:6f:6f:0a:83:2a:f6:8b:ce:8f:f1:7c:26:f0:dc:
         df:b4:bf:35:e1:84:f6:cc:64:a1:97:9e:6a:23:ca:ab:07:41:
         38:43:ab:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----