Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5H7bdqIYoEpBUrF2rptQQ9-mvM.cer
File:                     o5H7bdqIYoEpBUrF2rptQQ9-mvM.cer (raw, json)
Hash identifier:          NMGu5U6quaxEWmAC/jUfdJ43ehwWvZ15Ine5lhqn6o8=
Subject key identifier:   A3:91:FB:6D:DA:88:62:81:29:05:4A:C5:DA:BA:6D:41:0F:7E:9A:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013E94
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911D968/A71A030655AF11E8A710E976C4F9AE02/o5H7bdqIYoEpBUrF2rptQQ9-mvM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911D968/A71A030655AF11E8A710E976C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 08 Jan 2022 05:52:35 +0000
Certificate not after:    Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources:    AS: 137283
                          IP: 103.106.188.0/22
                          IP: 2001:df3:b100::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81556 (0x13e94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  8 05:52:35 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A911D968/serialNumber=A391FB6DDA88628129054AC5DABA6D410F7E9AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:63:9f:85:dc:64:a0:75:39:ba:42:a5:83:
                    5c:1c:d3:9f:e1:dc:7e:6d:cc:a5:6f:39:b6:95:a8:
                    05:e5:89:ab:3f:5b:87:d0:24:a3:d3:1a:15:7a:d0:
                    c0:68:ef:7e:d0:90:fe:4a:27:eb:e8:6a:ab:e5:ed:
                    cd:99:fa:02:26:24:80:c0:fd:3e:91:cd:fb:5a:bb:
                    72:d4:43:05:74:29:a0:a4:ec:2a:d9:a8:8e:da:b9:
                    90:a6:e9:a9:84:bc:20:3d:bb:68:15:3a:15:33:02:
                    ac:d6:cd:f2:03:33:60:aa:44:61:c6:12:31:34:2f:
                    f6:a6:bf:2d:f1:73:8a:01:33:96:1a:e5:f4:a8:e3:
                    13:b7:93:0e:63:c8:c0:30:e0:d5:88:6b:90:fd:79:
                    ad:4a:a8:e7:0d:5b:d7:67:06:29:48:20:f6:5d:81:
                    d2:c4:2f:e0:10:6e:28:4d:75:74:17:19:91:df:c3:
                    b2:2f:86:1c:5f:d8:d2:06:a7:7c:ae:b4:f0:0c:7a:
                    4b:7f:17:43:6a:27:c8:dc:11:a8:6c:ee:f6:cf:d8:
                    e1:56:e8:46:9e:35:32:4a:74:1c:32:08:5b:46:2d:
                    c3:de:43:13:42:eb:6f:21:24:b3:59:d9:25:0a:8b:
                    a2:b7:10:bc:59:b6:5b:6e:72:14:09:40:7e:7c:a8:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:91:FB:6D:DA:88:62:81:29:05:4A:C5:DA:BA:6D:41:0F:7E:9A:F3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911D968/A71A030655AF11E8A710E976C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911D968/A71A030655AF11E8A710E976C4F9AE02/o5H7bdqIYoEpBUrF2rptQQ9-mvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137283

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.188.0/22
                IPv6:
                  2001:df3:b100::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:00:25:55:d6:6a:f6:78:73:5f:c5:84:24:e0:77:22:8d:
         48:47:55:17:bc:10:a3:4f:e8:90:15:2f:df:62:13:3a:cf:5e:
         7f:67:b7:55:94:73:a4:b8:2c:7a:d9:b9:9f:ab:a6:f2:0b:19:
         58:c3:33:dd:b0:d3:75:1a:57:cb:da:83:6d:94:a1:c1:b1:3d:
         38:2b:63:55:d6:04:66:fd:15:17:a3:6c:79:c0:4f:35:38:f1:
         5e:bd:45:0f:75:2d:48:bb:7c:84:1b:0d:ba:c2:22:ab:6e:74:
         62:82:0d:d1:84:73:d9:40:0b:f1:f7:e2:a9:01:bf:80:6c:03:
         36:ac:fd:2b:84:db:a8:f0:b6:1a:78:78:42:c2:61:13:66:68:
         53:7b:37:78:a0:c2:ac:c1:2d:e0:61:8a:01:75:fb:68:97:ce:
         80:d9:8c:7d:b0:b7:2a:14:3f:12:0f:e8:10:45:9c:61:5b:d3:
         6c:e9:84:e1:68:92:9d:1b:d7:3b:fc:72:82:6b:09:9e:40:a1:
         94:df:b6:cc:89:5c:28:e6:9d:7a:ed:08:07:06:ab:8b:87:0a:
         28:0a:37:53:6b:99:75:59:6f:8c:4f:f6:19:4d:bd:30:6c:c5:
         aa:5d:3a:1d:f1:d4:31:bb:2b:a7:88:76:04:02:3f:39:a3:e5:
         25:7e:00:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----