Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6uX4Cy4RlrXNVm67RYKOx8NxQk.cer
File:                     s6uX4Cy4RlrXNVm67RYKOx8NxQk.cer (raw, json)
Hash identifier:          sXMM94Aq4oNoBT+8tjHZuCMwDKq4U6NUq9iAryrZzp0=
Subject key identifier:   B3:AB:97:E0:2C:B8:46:5A:D7:35:59:BA:ED:16:0A:3B:1F:0D:C5:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01752C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C9731/6032A23454D511EDAAB1EE4DC4F9AE02/s6uX4Cy4RlrXNVm67RYKOx8NxQk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C9731/6032A23454D511EDAAB1EE4DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 26 Oct 2022 02:25:00 +0000
Certificate not after:    Thu 02 Mar 2023 00:00:00 +0000
Subordinate resources:    AS: 139015
                          IP: 103.200.28.0/22
                          IP: 203.189.232.0/22
                          IP: 2402:cbc0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95532 (0x1752c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 26 02:25:00 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91C9731/serialNumber=B3AB97E02CB8465AD73559BAED160A3B1F0DC509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:85:bf:89:c4:dc:75:73:77:ab:69:ca:dc:
                    39:47:44:f8:52:76:c4:8c:f2:6f:82:74:5f:b1:c8:
                    e1:b1:74:6b:62:0a:d1:c3:08:84:d0:19:29:a0:4d:
                    cf:94:a5:8e:71:c3:85:be:79:c5:99:f0:b5:2c:15:
                    b8:eb:5b:14:14:a3:88:e3:c9:ca:a6:82:20:44:93:
                    f8:8d:b1:b6:f5:a4:fd:ea:47:a7:db:63:b8:f5:9b:
                    fb:d9:1d:d7:d6:29:99:95:29:22:9b:26:5d:4b:b1:
                    98:b2:fd:d2:d7:53:26:50:b3:84:10:9a:44:75:b3:
                    f9:d4:07:d5:1f:7f:32:04:37:91:d3:8c:31:ac:b0:
                    84:36:27:fd:d5:69:89:be:80:5b:73:8e:6f:7c:8f:
                    cf:2f:cb:ef:e2:15:08:74:b6:94:14:9a:92:9d:bb:
                    f6:c8:19:ec:70:63:4a:ae:f8:23:44:b1:23:15:1c:
                    59:c4:47:d5:75:c6:73:7a:df:c9:c9:86:17:cc:20:
                    29:c0:1a:68:55:08:77:b1:64:f6:9b:ba:45:ed:20:
                    5f:f1:fd:6e:ca:8d:a8:b6:1c:2e:53:9f:ea:f5:61:
                    0b:b0:2a:3d:8f:e8:27:3d:ba:be:10:b6:fc:a0:b9:
                    01:5a:1f:b9:24:41:9e:c3:c2:33:e4:89:58:ad:75:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AB:97:E0:2C:B8:46:5A:D7:35:59:BA:ED:16:0A:3B:1F:0D:C5:09
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9731/6032A23454D511EDAAB1EE4DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9731/6032A23454D511EDAAB1EE4DC4F9AE02/s6uX4Cy4RlrXNVm67RYKOx8NxQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139015

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.28.0/22
                  203.189.232.0/22
                IPv6:
                  2402:cbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:92:10:77:ba:f0:6b:d3:e9:df:b7:fb:6f:4c:23:3a:96:1a:
         b2:35:2e:99:97:d4:67:17:a1:93:b4:78:80:23:66:f3:b3:e8:
         a4:71:06:da:11:32:3c:c1:7f:ad:e3:14:74:e7:40:ce:83:25:
         ff:c7:a4:b2:bc:aa:61:30:4e:4f:16:b2:f2:eb:ca:43:64:6e:
         89:ef:6a:68:1d:50:12:79:ce:06:2d:ad:7f:a0:59:8d:2a:2c:
         8f:49:b7:1e:87:5d:d1:4c:0b:df:45:f6:8c:14:d2:c3:48:dc:
         7b:3d:61:54:66:ea:b1:4f:4b:6b:4c:26:89:98:f1:84:b4:aa:
         59:5e:72:77:a4:31:40:7d:0f:12:63:fd:e4:4c:cb:3f:81:98:
         62:f7:8a:c6:75:2b:5e:6f:fe:41:69:dc:bb:20:9d:e5:f5:b9:
         d4:e9:38:74:75:e3:c5:1d:71:ff:c6:2a:c2:d9:7c:c9:cc:39:
         a4:bb:fa:22:ad:17:06:9e:1f:53:9c:35:27:0c:fd:6b:35:2b:
         ea:34:5d:aa:11:5f:62:ad:05:38:22:9f:99:0f:dd:ca:de:1b:
         20:05:85:b9:21:38:a9:6f:13:83:73:b0:93:03:84:38:e8:94:
         9d:5a:0d:a8:42:8d:45:6e:0b:29:e9:12:b3:76:9e:99:dd:6e:
         5f:00:33:2b
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAXUsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMTAyNjAyMjUwMFoXDTIzMDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzk3MzExMTAvBgNVBAUTKEIzQUI5N0UwMkNCODQ2NUFENzM1NTlC
QUVEMTYwQTNCMUYwREM1MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+YYW/icTcdXN3q2nK3DlHRPhSdsSM8m+CdF+xyOGxdGtiCtHDCITQGSmgTc+U
pY5xw4W+ecWZ8LUsFbjrWxQUo4jjycqmgiBEk/iNsbb1pP3qR6fbY7j1m/vZHdfW
KZmVKSKbJl1LsZiy/dLXUyZQs4QQmkR1s/nUB9UffzIEN5HTjDGssIQ2J/3VaYm+
gFtzjm98j88vy+/iFQh0tpQUmpKdu/bIGexwY0qu+CNEsSMVHFnER9V1xnN638nJ
hhfMICnAGmhVCHexZPabukXtIF/x/W7Kjai2HC5Tn+r1YQuwKj2P6Cc9ur4Qtvyg
uQFaH7kkQZ7DwjPkiVitdeNdAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUs6uX4Cy4
RlrXNVm67RYKOx8NxQkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM5NzMxLzYwMzJBMjM0NTRENTExRURBQUIxRUU0REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDOTczMS82MDMyQTIzNDU0RDUxMUVEQUFCMUVFNERDNEY5QUUwMi9zNnVYNEN5
NFJsclhOVm02N1JZS094OE54UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh8HMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ8gcAwQCy73o
MA0EAgACMAcDBQAkAsvAMA0GCSqGSIb3DQEBCwUAA4IBAQB3khB3uvBr0+nft/tv
TCM6lhqyNS6Zl9RnF6GTtHiAI2bzs+ikcQbaETI8wX+t4xR050DOgyX/x6SyvKph
ME5PFrLy68pDZG6J72poHVASec4GLa1/oFmNKiyPSbceh13RTAvfRfaMFNLDSNx7
PWFUZuqxT0trTCaJmPGEtKpZXnJ3pDFAfQ8SY/3kTMs/gZhi94rGdSteb/5Bady7
IJ3l9bnU6Th0dePFHXH/xirC2XzJzDmku/oirRcGnh9TnDUnDP1rNSvqNF2qEV9i
rQU4Ip+ZD93K3hsgBYW5ITipbxODc7CTA4Q46JSdWg2oQo1Fbgsp6RKzdp6Z3W5f
ADMr
-----END CERTIFICATE-----