Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSw_TZvWsI4e2AlfzGJChfeqrC8.cer
File:                     lSw_TZvWsI4e2AlfzGJChfeqrC8.cer (raw, json)
Hash identifier:          iZUHyR91Y0GvSMYaHkIXt4s6md2w56SPRXjk9KL7R1w=
Subject key identifier:   95:2C:3F:4D:9B:D6:B0:8E:1E:D8:09:5F:CC:62:42:85:F7:AA:AC:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01499B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916A75B/99277692295711EB916CE46EC4F9AE02/lSw_TZvWsI4e2AlfzGJChfeqrC8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916A75B/99277692295711EB916CE46EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 11 Mar 2022 12:53:13 +0000
Certificate not after:    Mon 01 May 2023 00:00:00 +0000
Subordinate resources:    IP: 103.85.64.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84379 (0x1499b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 11 12:53:13 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=A916A75B/serialNumber=952C3F4D9BD6B08E1ED8095FCC624285F7AAAC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:ac:f8:40:01:3a:5f:e4:58:c4:1d:35:f1:
                    b2:dc:82:4e:d9:79:5d:06:40:98:fa:98:c0:c1:b3:
                    e2:6a:14:f3:f2:75:32:e1:73:f4:60:13:42:22:ab:
                    7b:d3:3b:d1:d7:fa:90:c4:8a:95:9b:d5:17:39:e7:
                    36:0c:83:54:3a:75:bf:d2:41:2e:78:d9:07:9f:e8:
                    10:68:e2:5e:c8:db:47:6b:23:50:0e:9a:6b:d8:87:
                    1c:28:ce:d9:46:dc:51:2c:3c:b3:fd:70:98:09:48:
                    0b:44:04:c8:57:ac:a4:0f:6a:ba:51:92:3e:46:1d:
                    30:25:b5:f8:83:c7:c1:7e:aa:7a:86:41:a2:0a:dc:
                    aa:8b:6d:f4:43:42:86:71:8d:13:7b:b1:fb:81:22:
                    ad:c6:6c:14:3e:73:5a:b2:25:75:6f:ee:e3:0d:bf:
                    de:bc:c0:da:71:ad:6d:3e:6b:76:c5:f4:c1:59:b6:
                    82:f1:f5:9c:2f:6d:be:e4:f0:57:64:3d:7e:bc:c7:
                    2a:13:10:4d:22:5b:c6:b2:b7:5c:ad:e4:05:b2:a8:
                    a3:0d:81:ca:38:df:d7:36:84:55:c5:6c:df:68:0d:
                    37:50:e7:42:5b:6f:3f:a5:a0:e5:0b:ca:2e:5f:3c:
                    37:94:c1:e9:76:89:97:3e:89:4f:0c:47:f8:71:5d:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2C:3F:4D:9B:D6:B0:8E:1E:D8:09:5F:CC:62:42:85:F7:AA:AC:2F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A75B/99277692295711EB916CE46EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A75B/99277692295711EB916CE46EC4F9AE02/lSw_TZvWsI4e2AlfzGJChfeqrC8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:ae:2f:9b:6d:dd:ad:e2:4a:88:ed:2b:b5:e0:ef:94:dd:a6:
         be:16:6e:cc:b4:8c:ca:1d:f1:c8:35:0f:6d:68:4e:ff:96:c7:
         62:55:3b:b3:cd:35:ab:9c:49:7a:e4:2d:00:a9:6d:37:13:f0:
         49:e8:4d:7d:9c:2a:2b:bc:2e:6f:a4:a2:23:20:7c:84:4d:ab:
         a0:6f:18:90:5c:68:e2:d7:ba:ea:07:3b:5c:60:75:05:ac:75:
         cf:6a:d3:89:3c:21:d4:95:7e:26:f9:57:8c:1f:6a:a9:47:66:
         b0:95:f8:a6:46:4c:0a:a4:04:69:c3:5a:41:a9:ff:99:74:c2:
         7b:f5:37:88:20:36:87:9e:c5:de:9f:01:9c:c0:2a:f9:ed:b5:
         41:78:ac:0d:d7:b4:9c:bd:4b:84:22:14:3a:0e:33:69:c2:4f:
         44:fa:53:2f:c3:4b:15:fc:22:91:0a:bb:47:a3:3d:bf:c1:48:
         7e:0c:af:67:08:54:ed:d7:bf:b3:6b:cf:20:f2:77:ce:78:f3:
         64:d6:fd:66:08:37:0e:7b:94:50:d1:f5:da:9c:30:68:4b:32:
         31:76:4d:eb:97:c0:19:3a:6c:c2:f6:c1:22:d1:d5:f4:19:5b:
         d5:2e:40:dc:f1:4a:de:dc:91:f0:b3:a2:79:91:4f:98:c4:0c:
         4c:6c:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----