Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6Pt6bkDU3V5se9Bo38DwEHnzfA.cer
File:                     j6Pt6bkDU3V5se9Bo38DwEHnzfA.cer (raw, json)
Hash identifier:          64h4wCyrO7zV2I/uaeV1D/yoqnMuneMvd3/sH+AGE+k=
Subject key identifier:   8F:A3:ED:E9:B9:03:53:75:79:B1:EF:41:A3:7F:03:C0:41:E7:CD:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A6DA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/j6Pt6bkDU3V5se9Bo38DwEHnzfA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 31 May 2023 22:03:05 +0000
Certificate not after:    Sun 01 Oct 2023 00:00:00 +0000
Subordinate resources:    AS: 138933
                          IP: 103.137.86.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108250 (0x1a6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 31 22:03:05 2023 GMT
            Not After : Oct  1 00:00:00 2023 GMT
        Subject: CN=A91BB2D3/serialNumber=8FA3EDE9B903537579B1EF41A37F03C041E7CDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:76:28:06:a7:a4:a3:10:6a:80:1c:62:92:
                    1a:3b:99:34:3a:d7:c4:1b:71:9c:a8:57:d5:8e:63:
                    62:61:4b:e2:44:7d:56:1a:d8:66:89:74:91:57:db:
                    8c:09:04:b8:26:32:ed:28:f4:41:11:9b:6e:5e:72:
                    bc:9a:c0:62:85:8c:0e:8f:8e:c9:1e:6f:f0:51:c4:
                    3e:f0:3a:66:64:f0:99:dc:03:f5:67:68:9d:f9:59:
                    41:79:92:63:ff:fd:81:a0:d4:e6:08:69:e9:18:92:
                    db:26:a6:62:1d:4e:46:d9:36:95:7a:61:4a:e8:5c:
                    cc:2b:cd:ff:6d:ae:40:cd:d2:9d:9d:08:5e:c1:96:
                    b2:de:1d:43:d7:68:ff:d8:ca:0b:eb:fd:2a:3c:60:
                    92:6b:02:cf:92:af:5d:89:b2:c4:d3:eb:a0:04:1b:
                    4c:ae:30:6b:9b:0a:69:11:a1:6c:dd:8e:1a:4f:d4:
                    f3:c5:cf:8a:1f:03:4e:3a:98:4e:d3:bc:f1:33:8a:
                    74:d6:2e:ed:79:6d:b8:aa:56:ea:b5:84:99:07:f0:
                    c4:3a:eb:94:43:21:4d:d0:bd:11:8b:3b:ff:d9:5f:
                    20:fc:73:2f:db:ce:42:b5:38:68:2a:0b:eb:41:8e:
                    de:8a:58:4b:e4:6e:6f:e4:d7:ad:f6:8c:f7:fa:a7:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:ED:E9:B9:03:53:75:79:B1:EF:41:A3:7F:03:C0:41:E7:CD:F0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/j6Pt6bkDU3V5se9Bo38DwEHnzfA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138933

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:e7:70:aa:73:b0:f8:48:7f:1c:6c:42:5f:93:62:79:ac:
         1b:bf:ae:bc:80:c5:cc:94:34:fa:dc:a6:15:d3:dd:62:94:d2:
         9e:41:8a:43:ee:96:4c:b9:08:36:b6:36:66:f1:94:bb:51:e6:
         6c:ca:0a:75:09:bb:66:5b:79:99:c8:c4:b1:0b:56:1a:cd:ff:
         d8:f8:8d:2e:8c:03:57:e5:af:28:69:6e:40:30:e8:76:2f:d4:
         6a:87:8b:70:e4:f1:3e:89:e2:e1:d3:4a:f0:8f:ab:17:5e:c0:
         95:56:a1:35:92:7d:5a:17:17:98:39:c3:c4:18:52:d0:11:50:
         92:27:ea:73:02:f0:46:54:a9:89:32:7a:63:67:3a:7c:a7:17:
         67:88:75:0f:0a:cf:39:4e:c4:18:60:d5:75:35:15:65:4c:08:
         dd:2a:68:4b:0e:78:99:40:80:e0:94:84:11:49:38:fc:8f:98:
         1d:cc:b2:05:6d:ca:07:a9:cc:64:e9:2c:5b:0f:2b:d1:a6:a6:
         b3:d0:2c:af:c1:03:9f:d9:41:65:a7:95:18:08:3d:c3:33:2e:
         03:04:e5:61:f6:2b:cf:54:c5:0a:a0:23:2b:ef:0a:0a:f1:19:
         e6:9b:6b:b7:a6:76:cc:9e:51:82:fb:8c:f1:b5:b6:7c:3b:10:
         f1:d4:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:54 2024 by rpki-client on console-fra.rpki-client.org