Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.cer
File:                     n3zYuTH9B_3xJ6jVWpvLjw2R2ms.cer (raw, json)
Hash identifier:          rCgqCdyd23O19kk1IRcFnHB94ksZaLqphHHIcTNFWp0=
Subject key identifier:   9F:7C:D8:B9:31:FD:07:FD:F1:27:A8:D5:5A:9B:CB:8F:0D:91:DA:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0167DC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 12 Aug 2022 02:06:31 +0000
Certificate not after:    Tue 31 Jan 2023 00:00:00 +0000
Subordinate resources:    IP: 103.175.26.0/23
                          IP: 2001:df0:5a40::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92124 (0x167dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 12 02:06:31 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A91BE6D7/serialNumber=9F7CD8B931FD07FDF127A8D55A9BCB8F0D91DA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:24:00:97:85:fd:2b:58:e7:98:05:c7:92:a9:
                    3f:9e:50:f7:f7:13:c2:65:72:b8:02:22:61:08:e5:
                    0f:91:7b:08:71:29:b4:6e:99:71:6c:77:0a:21:0c:
                    06:f9:52:63:77:2b:63:ed:03:5f:92:8d:a1:09:f6:
                    f3:61:6c:4f:df:8e:45:3e:a4:34:7a:1a:37:cf:c9:
                    7f:4c:96:ac:c3:1a:64:68:ae:fb:20:9b:4c:b0:84:
                    aa:e3:df:c9:79:84:64:69:08:dd:86:c9:47:76:30:
                    6b:02:43:a4:fc:f3:93:1a:8b:51:e0:ba:81:6e:a5:
                    82:43:c2:68:e3:55:6c:6f:0a:eb:61:fd:13:0b:04:
                    1d:04:6c:fb:d3:20:6f:82:f8:e1:6a:2e:4f:73:70:
                    64:54:55:37:9f:58:f9:c2:b8:ee:69:7f:19:77:aa:
                    73:e4:1c:e4:af:48:c5:0d:96:e5:b3:f2:ed:d2:59:
                    6c:9a:f1:e1:89:b7:e9:4b:ef:e2:ae:e3:78:ab:e8:
                    6b:e0:b3:11:03:21:ea:71:e3:bc:02:6b:7c:e2:bf:
                    81:04:d4:74:47:c3:d7:d8:89:e3:95:5f:93:66:a7:
                    4b:13:79:6c:37:31:42:9a:a3:de:b9:56:12:c2:11:
                    ef:f0:68:45:6e:fe:54:0f:8a:c8:46:29:57:df:ae:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:D8:B9:31:FD:07:FD:F1:27:A8:D5:5A:9B:CB:8F:0D:91:DA:6B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.26.0/23
                IPv6:
                  2001:df0:5a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:f9:a1:3c:b5:fa:d3:01:d7:78:da:88:62:1f:68:0a:83:
         41:66:e4:f6:60:e5:44:72:09:ae:8f:2d:08:0a:e0:d9:42:07:
         f2:a8:c9:cb:86:7e:95:e4:0f:ff:71:b8:81:8f:95:d7:2d:44:
         e8:b2:13:bf:5a:bd:ce:42:42:de:29:a3:9a:78:62:79:e7:19:
         43:ee:17:34:ab:c7:ef:bc:d4:ee:0d:a4:ef:11:55:d3:1f:32:
         73:c2:13:b1:0b:39:9f:ff:1a:19:29:ac:75:e1:28:e2:9f:b7:
         6b:c9:ec:e1:ab:d3:dd:c8:7e:9e:26:43:ab:ad:87:9b:be:f7:
         3a:12:b2:19:52:52:7b:35:ff:e6:15:44:6b:2d:48:80:9c:7f:
         c8:56:bf:91:bd:f3:ba:f4:d5:45:66:02:41:ec:57:5e:02:87:
         3d:64:0d:bf:99:e4:48:a3:43:15:88:9e:2f:19:ff:6d:9c:b1:
         a8:b6:4c:9e:e9:93:31:ef:07:f4:d5:70:5b:2c:82:6d:47:c7:
         78:4f:01:f8:ee:f3:b1:8c:74:43:a0:b5:60:20:79:61:d0:f9:
         3e:3c:93:1b:fa:0c:21:f1:8b:fa:14:c0:30:3f:a9:c8:99:36:
         19:4c:82:d8:2b:f4:75:b4:b6:f1:31:f8:b3:aa:96:24:fb:c4:
         08:d5:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----