Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0zlbTwqVNK_wLM4I1ku2Xy0jcI.cer
File:                     t0zlbTwqVNK_wLM4I1ku2Xy0jcI.cer (raw, json)
Hash identifier:          NhiJUO4B5/k2Uvm/m1N3++KgYBC9+KhDrqje/UE8gno=
Subject key identifier:   B7:4C:E5:6D:3C:2A:54:D2:BF:C0:B3:38:23:59:2E:D9:7C:B4:8D:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       017653
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D884A/FB0C91A68AC511EBA035025FC4F9AE02/t0zlbTwqVNK_wLM4I1ku2Xy0jcI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D884A/FB0C91A68AC511EBA035025FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 31 Oct 2022 12:38:30 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 138184
                          IP: 103.129.156.0/22
                          IP: 2403:8040::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95827 (0x17653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 31 12:38:30 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A91D884A/serialNumber=B74CE56D3C2A54D2BFC0B33823592ED97CB48DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:2f:54:1d:6b:cb:d9:98:40:24:d9:8d:ee:
                    f5:71:5c:b2:f3:38:47:2a:f8:a9:f8:ae:32:1d:d7:
                    cb:5f:67:9c:0b:15:30:e7:c9:9a:ac:15:15:e3:d1:
                    e2:54:59:12:93:74:f6:30:04:1c:86:f2:61:c8:52:
                    dd:cc:d7:25:72:04:0d:f5:c5:cf:fa:a5:61:0e:a9:
                    75:f5:72:e0:5e:98:06:5b:19:12:39:0d:33:fb:d5:
                    ea:99:53:e9:47:30:02:d2:eb:3e:8d:ba:25:39:0b:
                    23:aa:e2:81:3c:72:21:b0:dd:90:0f:6c:a2:7d:40:
                    27:ce:0f:dd:13:55:55:e5:5e:83:ab:3f:f7:33:16:
                    f5:11:d0:51:7f:00:b1:a7:f5:8e:17:60:ab:31:5d:
                    4c:51:36:fc:7c:82:cd:b0:31:5a:90:5a:17:8c:4d:
                    49:94:7b:4c:d9:b1:ed:53:df:72:af:d3:c5:e5:3f:
                    92:b3:dd:b6:1a:20:ee:16:31:48:ab:f1:f3:f1:5a:
                    dd:85:7e:ae:4d:eb:e3:92:3d:a2:93:b7:cd:f7:04:
                    e9:e7:bf:02:2f:79:98:18:ad:5f:fd:85:9e:b2:3b:
                    81:31:e1:b0:60:b9:48:76:8e:08:7b:a3:26:02:9e:
                    d6:38:ec:59:60:d6:9f:51:7e:5d:26:37:b0:95:97:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4C:E5:6D:3C:2A:54:D2:BF:C0:B3:38:23:59:2E:D9:7C:B4:8D:C2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D884A/FB0C91A68AC511EBA035025FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D884A/FB0C91A68AC511EBA035025FC4F9AE02/t0zlbTwqVNK_wLM4I1ku2Xy0jcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138184

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.156.0/22
                IPv6:
                  2403:8040::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:f2:02:05:60:9b:bc:f0:30:96:0f:fb:44:dd:db:b3:c7:c4:
         ce:d7:4d:8b:84:ee:ab:9f:da:a4:d7:39:46:65:ae:fd:90:7e:
         be:92:55:2f:2e:1b:25:67:fa:07:9e:f6:ff:bd:40:f7:a3:b6:
         2f:9c:8d:8d:80:09:1a:3d:fe:b4:36:d7:2f:6c:1c:c6:d4:e4:
         aa:ff:fd:eb:bf:6c:66:13:2a:af:88:24:6f:50:cb:0e:c4:98:
         b6:71:f4:27:50:7f:69:c7:8e:71:9b:25:99:d1:8e:8a:09:21:
         71:bd:0b:57:68:cf:2b:7c:7b:d0:9c:d8:c0:e5:a1:b1:c4:3c:
         7b:f4:0e:17:64:88:be:f0:ce:5f:25:2a:2e:93:9b:c2:49:32:
         15:e6:54:34:5b:87:2c:f8:b6:c6:88:93:98:79:e0:db:db:de:
         5a:52:f7:09:71:ea:e1:e0:07:05:c6:4b:0d:1e:39:6d:c7:14:
         95:44:ad:43:35:47:73:fe:6e:d2:05:2d:84:81:25:ae:ac:9f:
         7e:1a:02:fa:73:73:63:40:a3:80:d1:08:77:bf:11:97:ca:66:
         ee:5d:fb:94:30:1a:b3:a6:ed:f2:1c:e5:4a:12:8a:46:02:7e:
         f4:ae:68:13:3a:ce:d3:b2:46:f5:ce:a2:5c:82:f5:ba:7d:54:
         27:f7:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----