Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x4hXFedt_KVwN_eFPM23UghLa0g.cer
File:                     x4hXFedt_KVwN_eFPM23UghLa0g.cer (raw, json)
Hash identifier:          5CCz7iPVYNxG9fdjuZ6EmBh53xNViQql+XJH07IJ8uE=
Subject key identifier:   C7:88:57:15:E7:6D:FC:A5:70:37:F7:85:3C:CD:B7:52:08:4B:6B:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01752A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91330AE/BB09BCB61D9911E2B7B76E8608B02CD2/x4hXFedt_KVwN_eFPM23UghLa0g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91330AE/BB09BCB61D9911E2B7B76E8608B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 26 Oct 2022 01:43:58 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 134181
                          IP: 111.235.128.0/22
                          IP: 203.33.111.0/24
                          IP: 2406:bc00::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95530 (0x1752a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 26 01:43:58 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A91330AE/serialNumber=C7885715E76DFCA57037F7853CCDB752084B6B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:1c:3e:52:37:1d:13:92:1f:f5:6c:06:15:
                    50:7a:e1:e8:a7:34:0a:74:ca:ff:9d:7d:93:cd:62:
                    ea:33:20:e9:a6:25:07:ed:3d:92:04:23:cc:63:db:
                    09:8d:c9:4d:df:65:8c:d5:8e:6e:43:25:1e:93:70:
                    b4:c8:04:ab:81:42:09:a6:7d:ba:75:1b:1f:87:e1:
                    08:c9:92:44:65:93:03:65:ec:b8:46:52:f2:bb:09:
                    ca:66:0a:2b:ec:8d:7c:25:4a:a3:a9:14:95:c3:17:
                    c6:e5:1a:41:bc:2d:a9:ac:14:f3:f2:dd:e3:50:08:
                    da:4c:42:3d:19:e9:52:01:d5:d5:46:e5:7b:d5:9f:
                    88:28:8c:dc:30:90:36:e5:d1:40:96:2d:9a:21:86:
                    75:6e:8e:a1:ab:11:10:3e:17:50:d7:fb:fa:83:4c:
                    99:36:1b:64:b6:a3:0f:ff:08:9d:ce:5f:73:7c:3f:
                    ac:11:2d:d2:d6:f1:ae:19:9c:63:3d:34:16:c8:42:
                    b2:8a:1f:09:c1:3a:9e:03:f4:d4:23:02:10:7c:05:
                    a0:21:0d:35:0f:bf:b3:cc:59:e3:1c:cd:62:5d:ab:
                    77:07:3d:90:e0:81:35:eb:21:70:02:4b:39:92:f4:
                    36:69:a0:1e:22:61:4a:bb:8f:5e:df:32:0c:25:ff:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:88:57:15:E7:6D:FC:A5:70:37:F7:85:3C:CD:B7:52:08:4B:6B:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91330AE/BB09BCB61D9911E2B7B76E8608B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91330AE/BB09BCB61D9911E2B7B76E8608B02CD2/x4hXFedt_KVwN_eFPM23UghLa0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134181

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.128.0/22
                  203.33.111.0/24
                IPv6:
                  2406:bc00::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:58:a6:7a:ec:d4:80:65:96:2e:b0:1d:6e:2f:1e:f5:3e:11:
         5a:c4:bb:4f:96:3f:cf:e8:52:af:94:b4:0a:e9:05:c5:b2:74:
         37:75:74:cf:1c:63:dd:c7:0e:79:65:ea:e6:66:22:cd:1d:ad:
         f9:49:a0:cc:fe:10:e3:75:6c:66:c1:54:5f:7a:76:2e:f9:4e:
         ac:36:15:bf:23:1b:01:f9:8f:1a:88:03:ae:1e:d5:1b:34:de:
         60:13:e1:6a:3c:2d:a4:fa:17:0c:e6:ee:21:1b:f9:34:1a:8e:
         fc:31:a7:e6:af:92:89:c0:2a:3b:d5:ef:89:8d:b6:25:80:34:
         21:d4:08:70:47:a7:e1:f2:f1:a0:97:37:75:46:19:59:99:77:
         21:60:ac:9f:1e:9a:43:91:32:ff:22:1d:74:b5:8c:08:19:df:
         c5:41:a0:bf:bf:10:0b:e4:87:29:40:a0:70:e4:e7:32:e2:49:
         49:f7:e7:f9:ba:ac:e9:97:3f:06:12:e8:5f:6b:f2:67:43:a9:
         91:d4:3f:75:9b:31:9d:d1:c4:03:7c:0a:75:bc:bb:d0:70:ba:
         14:34:45:12:aa:85:b8:1b:b6:34:64:6d:e1:50:e1:0a:22:e5:
         b2:40:27:0f:71:b7:d0:b0:fe:e0:72:d9:0b:a1:d8:a5:cf:6b:
         e7:f8:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----