Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySWWiLuN0NM0ELM_s_BZm2waW_M.cer
File:                     ySWWiLuN0NM0ELM_s_BZm2waW_M.cer (raw, json)
Hash identifier:          nJSL7ZM3fyZtKxHFlzJ8XxUmJx0OR544QWGYxFyQgDc=
Subject key identifier:   C9:25:96:88:BB:8D:D0:D3:34:10:B3:3F:B3:F0:59:9B:6C:1A:5B:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       015E05
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91939D0/C8DA2DEC553C11EBA499C472C4F9AE02/ySWWiLuN0NM0ELM_s_BZm2waW_M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91939D0/C8DA2DEC553C11EBA499C472C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 27 Jun 2022 12:46:45 +0000
Certificate not after:    Thu 02 Mar 2023 00:00:00 +0000
Subordinate resources:    IP: 103.244.156.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89605 (0x15e05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 27 12:46:45 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91939D0/serialNumber=C9259688BB8DD0D33410B33FB3F0599B6C1A5BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:bb:ac:3b:89:c1:0f:20:0b:09:96:53:94:
                    ef:19:d1:30:9b:ec:da:69:38:f1:25:56:22:16:46:
                    6f:99:aa:38:77:d7:af:c6:10:5d:12:91:ca:b5:ee:
                    e9:16:2d:40:9f:6b:20:d8:6c:54:d7:46:5a:b6:33:
                    b5:68:d3:a6:81:f9:b8:22:b1:d1:3e:41:05:84:aa:
                    41:2b:92:92:10:ba:02:58:9d:75:7a:ae:de:44:41:
                    f5:bd:83:99:c5:39:75:2b:03:b0:c1:8a:a9:86:d5:
                    df:eb:1c:05:94:08:23:22:ba:d6:5e:25:25:ba:c9:
                    62:4a:4c:37:8d:7a:dc:dd:22:c3:40:0f:69:9e:52:
                    7e:f3:76:e1:80:0f:97:26:c6:4d:0a:a2:91:b3:53:
                    26:22:79:76:32:f3:74:37:75:11:db:8f:99:e7:0e:
                    62:57:50:b3:75:48:bc:ad:00:25:76:20:fa:5a:33:
                    7b:22:b1:74:4b:c4:37:a1:bc:80:c9:58:be:e6:e9:
                    7c:24:f4:d5:71:4a:0c:d4:3d:00:99:6d:ca:33:00:
                    30:de:de:af:78:0b:91:c1:92:8d:dd:64:f0:5a:38:
                    e6:db:77:d5:40:31:70:87:72:1b:27:61:1f:26:dd:
                    f0:57:b3:3e:07:00:f2:42:da:ee:c1:fc:bb:6f:7f:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:25:96:88:BB:8D:D0:D3:34:10:B3:3F:B3:F0:59:9B:6C:1A:5B:F3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91939D0/C8DA2DEC553C11EBA499C472C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91939D0/C8DA2DEC553C11EBA499C472C4F9AE02/ySWWiLuN0NM0ELM_s_BZm2waW_M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:58:71:97:04:8b:b1:bc:c7:77:37:bf:6f:02:0d:22:36:
         0f:f7:18:fb:7b:b3:27:40:73:41:e8:9e:f5:70:11:d7:d0:4f:
         d1:aa:22:05:3e:a3:ae:c6:28:57:11:65:c0:2c:dc:b3:fb:ba:
         65:c0:20:3e:a8:c0:00:c2:e0:81:fa:ea:e4:46:e6:8d:ab:e4:
         ef:7d:c2:83:8e:6d:f7:60:8f:51:cf:2f:8b:12:5e:9d:fe:72:
         d8:22:ff:9c:ed:86:ca:6f:ab:13:21:45:8c:ec:45:f8:85:09:
         96:75:38:03:56:b4:fc:f1:2e:06:10:56:85:d9:81:e4:4b:c1:
         f5:ed:e4:71:86:1b:e2:99:db:21:33:45:3c:ed:f7:c2:41:53:
         eb:70:bc:5b:1c:9c:88:4f:33:7e:76:53:f1:6e:37:df:66:d5:
         64:43:bd:68:1c:d6:f4:cd:d1:cd:03:f5:9b:17:7c:08:c4:21:
         4d:b5:f7:fc:8e:c3:45:a7:9d:3c:ef:b8:3a:46:65:b3:5c:8f:
         ce:5c:8d:6d:8b:a5:ca:fe:a0:be:89:da:09:d7:4e:cf:3b:6b:
         66:16:c9:b4:f4:13:fa:10:4f:a1:6c:5e:95:d9:5b:c2:9c:ea:
         bc:8b:59:a5:72:ea:1c:72:b8:c5:06:b7:c4:34:91:74:30:7f:
         a4:91:fe:88
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAV4FMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDYyNzEyNDY0NVoXDTIzMDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTM5RDAxMTAvBgNVBAUTKEM5MjU5Njg4QkI4REQwRDMzNDEwQjMz
RkIzRjA1OTlCNkMxQTVCRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdOrusO4nBDyALCZZTlO8Z0TCb7NppOPElViIWRm+Zqjh316/GEF0Skcq17ukW
LUCfayDYbFTXRlq2M7Vo06aB+bgisdE+QQWEqkErkpIQugJYnXV6rt5EQfW9g5nF
OXUrA7DBiqmG1d/rHAWUCCMiutZeJSW6yWJKTDeNetzdIsNAD2meUn7zduGAD5cm
xk0KopGzUyYieXYy83Q3dRHbj5nnDmJXULN1SLytACV2IPpaM3sisXRLxDehvIDJ
WL7m6Xwk9NVxSgzUPQCZbcozADDe3q94C5HBko3dZPBaOObbd9VAMXCHchsnYR8m
3fBXsz4HAPJC2u7B/Ltvf0cbAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUySWWiLuN
0NM0ELM/s/BZm2waW/MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzOUQwL0M4REEyREVDNTUzQzExRUJBNDk5QzQ3MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MzlEMC9DOERBMkRFQzU1M0MxMUVCQTQ5OUM0NzJDNEY5QUUwMi95U1dXaUx1
TjBOTTBFTE1fc19CWm0yd2FXX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAJn9JwwDQYJKoZIhvcNAQELBQADggEBAAEcWHGXBIuxvMd3N79v
Ag0iNg/3GPt7sydAc0HonvVwEdfQT9GqIgU+o67GKFcRZcAs3LP7umXAID6owADC
4IH66uRG5o2r5O99woOObfdgj1HPL4sSXp3+ctgi/5zthspvqxMhRYzsRfiFCZZ1
OANWtPzxLgYQVoXZgeRLwfXt5HGGG+KZ2yEzRTzt98JBU+twvFscnIhPM352U/Fu
N99m1WRDvWgc1vTN0c0D9ZsXfAjEIU219/yOw0WnnTzvuDpGZbNcj85cjW2Lpcr+
oL6J2gnXTs87a2YWybT0E/oQT6FsXpXZW8Kc6ryLWaVy6hxyuMUGt8Q0kXQwf6SR
/og=
-----END CERTIFICATE-----