Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAMZeLbvUc6i6D8CKlcv2j13WS8.cer
File:                     jAMZeLbvUc6i6D8CKlcv2j13WS8.cer (raw, json)
Hash identifier:          3s6Pwb/giVWf4zjG9H/9vw/bGU62sLWi3tn4Y+2EcdI=
Subject key identifier:   8C:03:19:78:B6:EF:51:CE:A2:E8:3F:02:2A:57:2F:DA:3D:77:59:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01340D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9145241/793306F041D711ECA1A16475C4F9AE02/jAMZeLbvUc6i6D8CKlcv2j13WS8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9145241/793306F041D711ECA1A16475C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 10 Nov 2021 03:57:24 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 103.24.240.0/22
                          IP: 2400:1f20::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78861 (0x1340d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 10 03:57:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A9145241/serialNumber=8C031978B6EF51CEA2E83F022A572FDA3D77592F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:c4:1e:7a:83:c6:9e:74:31:42:f9:71:ee:
                    7f:a1:53:6b:03:ae:2c:7e:cc:9b:83:84:10:57:29:
                    80:64:00:e0:1f:16:2d:b9:88:67:35:7e:6c:74:70:
                    33:90:91:30:d3:cf:dc:f0:b7:d7:1b:09:58:0a:61:
                    e4:3f:27:a4:f8:e6:16:b6:34:46:69:20:6a:50:0d:
                    b4:09:7e:16:03:c6:9b:cf:91:91:98:33:5f:60:69:
                    97:74:bd:18:80:8e:c3:d6:6b:20:6b:db:05:ed:99:
                    cb:dc:23:23:d6:b4:4f:f7:73:64:55:2d:4d:45:92:
                    64:bf:83:28:1e:74:3d:ae:ef:cf:97:36:12:a4:20:
                    69:aa:89:f7:a9:f9:ae:4b:80:b3:73:5c:b1:f1:84:
                    c6:ad:81:0d:8c:bd:0e:3c:a4:91:ff:79:7b:fc:16:
                    3b:3d:5f:4d:f0:4c:91:b6:f6:fb:ec:44:0d:c1:db:
                    49:d0:3d:aa:78:3f:08:49:c2:dc:f3:7a:11:ad:74:
                    33:5d:55:d9:69:6d:da:eb:af:23:fd:c0:12:b3:f3:
                    c2:a2:c6:bc:54:89:ff:11:ae:ab:bb:86:79:f8:7d:
                    36:1e:16:48:ef:83:1f:2e:7b:65:d5:de:07:d0:8c:
                    ed:f5:7e:0a:cf:a9:85:86:74:ff:71:89:41:9c:a8:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:03:19:78:B6:EF:51:CE:A2:E8:3F:02:2A:57:2F:DA:3D:77:59:2F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145241/793306F041D711ECA1A16475C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145241/793306F041D711ECA1A16475C4F9AE02/jAMZeLbvUc6i6D8CKlcv2j13WS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.240.0/22
                IPv6:
                  2400:1f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:55:2c:08:b6:81:9e:9a:87:bf:bc:d1:30:70:3d:ca:b4:a1:
         1b:fb:d8:a8:cd:2e:d3:df:09:a7:f6:7e:71:57:04:5e:40:8f:
         48:6c:ec:84:8c:a2:b3:85:41:b9:a3:6e:bc:cc:00:00:d4:5e:
         1d:29:a4:76:4e:43:a4:09:5f:36:59:6b:11:74:52:e1:c6:4a:
         48:9e:02:8b:a3:e4:46:57:55:fc:8f:7c:68:fa:31:ee:e5:bc:
         ac:a3:67:25:89:71:fe:a5:9f:33:24:9c:d2:53:3d:30:6b:40:
         61:4e:d6:ee:87:83:09:0b:37:3c:56:90:cb:0a:e3:1f:ea:6d:
         fb:76:a3:ff:59:5c:ef:7a:cd:af:00:62:ba:f6:cc:27:cc:4f:
         7d:1e:91:00:f3:14:00:33:1d:9a:8b:39:1d:49:12:e2:af:82:
         0e:5d:d5:6b:75:aa:e6:27:0f:be:eb:3a:32:fb:73:d2:32:95:
         7c:07:52:a2:c6:82:71:77:f1:67:97:76:4b:2b:76:11:71:00:
         fb:6f:1e:ee:f0:cd:31:25:b9:12:bb:25:00:a5:a1:b4:2f:85:
         33:c4:1c:ce:cd:71:fd:65:8b:ca:89:65:d6:a5:73:33:a9:3b:
         af:49:40:f0:63:5c:dc:28:55:59:67:78:34:f9:02:b7:ec:41:
         95:2f:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----