Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rejE_gsnzFxSGjBJtmSeJkyyWlo.cer
File:                     rejE_gsnzFxSGjBJtmSeJkyyWlo.cer (raw, json)
Hash identifier:          PlibNMTIbxkFrAPxq0iN1NWbBqipD1DrIU6kTXcK1aE=
Subject key identifier:   AD:E8:C4:FE:0B:27:CC:5C:52:1A:30:49:B6:64:9E:26:4C:B2:5A:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018F1C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FA0BF/5272F720B97A11ED8E542047C4F9AE02/rejE_gsnzFxSGjBJtmSeJkyyWlo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FA0BF/5272F720B97A11ED8E542047C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 03 Mar 2023 04:17:41 +0000
Certificate not after:    Wed 29 May 2024 00:00:00 +0000
Subordinate resources:    AS: 138512
                          IP: 103.93.214.0/23
                          IP: 2400:e2a0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102172 (0x18f1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  3 04:17:41 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=A91FA0BF/serialNumber=ADE8C4FE0B27CC5C521A3049B6649E264CB25A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:ae:8c:db:ce:0f:1e:df:9c:d8:16:72:a6:
                    be:dd:31:13:31:b3:e5:c8:70:50:b3:bd:c3:c3:80:
                    11:b9:25:46:9c:2b:60:d2:0f:ac:ba:c4:f6:39:ef:
                    44:8c:f7:81:e1:8e:25:43:74:16:72:10:bd:0b:bf:
                    08:21:b3:24:8f:27:a0:ce:e3:81:d1:d9:36:2a:27:
                    3e:73:87:fa:b6:c4:82:40:c0:b7:f8:64:33:1d:fd:
                    b8:ac:21:c4:36:dd:9f:da:fc:2a:0a:ab:93:96:6e:
                    e5:c0:0e:6f:ef:7b:b1:c2:9b:be:88:ad:5c:27:53:
                    ec:8b:e4:3f:1c:50:a5:0f:90:bd:22:9b:6e:f9:ae:
                    c5:c1:8a:ce:79:9e:9c:55:e2:ee:e1:3f:fa:c0:4a:
                    54:9b:a7:95:c1:30:7e:1a:85:97:0a:14:4a:44:a3:
                    a1:7e:1e:b0:5a:b8:46:6d:36:3b:80:40:f7:94:dd:
                    83:f2:8f:a9:d8:c1:76:31:ad:cd:f8:56:16:5c:96:
                    e3:c7:31:93:ff:73:dc:44:ad:1d:84:11:29:c5:31:
                    50:60:1c:8a:86:17:1c:78:f6:7a:53:b2:71:c6:59:
                    58:f7:25:09:0e:2a:57:b0:2e:8e:d6:ae:78:5d:27:
                    b2:d6:5a:96:8e:05:18:90:b2:b9:a1:7d:93:18:e4:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E8:C4:FE:0B:27:CC:5C:52:1A:30:49:B6:64:9E:26:4C:B2:5A:5A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA0BF/5272F720B97A11ED8E542047C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA0BF/5272F720B97A11ED8E542047C4F9AE02/rejE_gsnzFxSGjBJtmSeJkyyWlo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138512

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.214.0/23
                IPv6:
                  2400:e2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:83:0f:09:ac:fe:58:67:a8:86:fc:fc:cf:a0:8d:73:e2:d1:
         18:8f:52:d4:d2:75:a1:13:e4:0d:91:15:db:d3:a3:2d:f5:6b:
         f9:f7:0b:a3:f5:32:4b:ce:91:43:1a:51:e2:f3:59:18:03:93:
         88:d4:16:22:80:d9:2b:ce:b8:75:65:61:44:15:8b:ce:a3:af:
         89:3e:5c:69:54:9f:7c:3a:80:9d:2c:d0:2e:ce:cb:ce:f1:20:
         d5:64:89:6a:52:87:df:71:84:c7:a8:6c:bb:06:88:6a:12:c9:
         09:89:9c:30:9c:66:ad:8b:26:25:39:7b:2b:21:7d:a1:a0:03:
         ec:43:12:0a:a9:fd:95:9d:9f:3a:52:84:73:4a:42:52:82:ee:
         36:dc:30:f4:0c:25:de:fa:d4:3a:51:4c:a0:b2:93:0b:38:c1:
         b1:f8:c8:b1:dc:3f:6e:e0:aa:9e:ba:c5:c9:ed:10:41:c8:a5:
         f4:08:d4:72:d4:87:1a:ce:6c:59:24:c3:47:3b:dc:6a:20:53:
         c2:e5:81:04:33:19:3c:20:f9:f8:94:7a:04:09:a9:5d:b0:d7:
         e3:d8:f9:05:38:ad:22:0e:b1:79:50:e4:2b:59:f9:e3:55:e5:
         40:2e:e6:88:5c:fd:0a:0c:0f:63:d3:2a:d9:49:ea:b9:ed:c7:
         d1:92:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----