Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9-PYl3F5DqZzFN413zpJZEOnBA.cer
File:                     z9-PYl3F5DqZzFN413zpJZEOnBA.cer (raw, json)
Hash identifier:          sEr0aCgkQyJp4SDn6WHMb6348+EIFsThH1vWyMAW9Ug=
Subject key identifier:   CF:DF:8F:62:5D:C5:E4:3A:99:CC:53:78:D7:7C:E9:25:91:0E:9C:10
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0182C4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918A755/BC665D4ED57D11EB8D378D25C4F9AE02/z9-PYl3F5DqZzFN413zpJZEOnBA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918A755/BC665D4ED57D11EB8D378D25C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 31 Dec 2022 17:27:33 +0000
Certificate not after:    Mon 01 May 2023 00:00:00 +0000
Subordinate resources:    IP: 103.145.230.0/23
                          IP: 2001:df2:3080::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99012 (0x182c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 17:27:33 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=A918A755/serialNumber=CFDF8F625DC5E43A99CC5378D77CE925910E9C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:dc:32:f3:12:6b:7f:44:4d:3e:27:6f:a9:
                    da:1a:6b:3d:89:71:c4:39:00:a9:4f:32:f2:76:d1:
                    81:b5:cf:95:83:0a:11:a8:a9:85:67:8f:1c:4b:3d:
                    49:a8:1c:d3:39:94:32:65:e0:33:b0:a6:44:7a:32:
                    ae:12:75:37:d8:8c:bd:e5:c7:f8:0d:71:b2:97:4b:
                    49:f3:f5:1f:16:6d:19:ce:9e:44:41:a2:f1:36:d6:
                    9f:5b:b0:ec:62:c1:85:80:9a:5a:bc:18:12:57:60:
                    f3:41:2b:96:f9:61:3a:72:c4:6c:23:51:11:62:b6:
                    b5:4c:6f:8b:f5:de:f7:bb:ca:9c:8a:f7:9c:0b:c7:
                    c5:5f:d4:ef:6d:55:59:64:73:b2:c3:5b:24:5a:e1:
                    53:ab:53:e4:38:3b:62:4f:1f:d5:70:db:ba:1f:d3:
                    8e:db:d3:a3:30:f7:a8:fd:3b:f2:e2:6e:5f:dd:c6:
                    41:97:55:66:49:8f:c7:0c:8e:d9:8c:71:a8:d7:a1:
                    2a:64:8f:92:32:39:f5:42:03:b2:29:d4:b3:e8:62:
                    b9:e2:ba:f6:e1:cb:17:04:36:1f:ee:14:91:f7:64:
                    3b:d0:e7:38:bd:56:d1:37:08:f6:47:45:ab:19:f0:
                    d2:84:40:56:36:47:09:aa:6b:d3:06:2f:e9:5f:bf:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DF:8F:62:5D:C5:E4:3A:99:CC:53:78:D7:7C:E9:25:91:0E:9C:10
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A755/BC665D4ED57D11EB8D378D25C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A755/BC665D4ED57D11EB8D378D25C4F9AE02/z9-PYl3F5DqZzFN413zpJZEOnBA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.230.0/23
                IPv6:
                  2001:df2:3080::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:f0:6c:12:66:6f:e6:c4:5a:5c:93:4e:23:21:cf:7e:b5:71:
         f2:a8:af:a6:e1:6b:9b:2d:58:3e:56:01:73:2d:f5:c9:27:0f:
         e2:b4:4c:f6:18:6c:96:cd:f5:53:df:42:31:58:5e:f3:31:1a:
         1c:d5:e5:36:7c:cb:ef:c4:c3:ca:2f:3c:4e:82:68:60:cb:b0:
         56:2a:01:32:03:d7:27:ad:de:ca:ea:fe:3a:bc:e8:45:d0:31:
         97:c1:3e:aa:54:ff:ec:27:81:f0:98:4d:2c:61:59:e2:3a:94:
         5b:47:99:1c:87:29:f1:4c:a2:e1:d7:99:f7:84:09:3e:a6:4b:
         c0:5a:93:57:92:e0:99:fd:b1:db:85:5e:ce:3a:b3:34:cf:fc:
         e8:ac:3c:83:22:66:7e:17:8d:99:fc:87:5e:68:40:aa:cd:0e:
         21:20:22:72:12:ca:6b:1f:c3:48:4a:37:b4:ac:41:57:db:62:
         d2:c8:52:b8:c0:31:c6:19:51:ba:6c:ae:86:42:0a:01:28:e9:
         4c:31:41:5f:e1:11:3c:3e:3d:55:f3:13:94:f4:77:76:2f:77:
         4a:f9:65:27:2c:13:d3:44:a0:da:4f:c0:e7:e3:84:86:04:fe:
         d5:57:54:46:24:fa:fd:b9:f7:f3:b7:a0:3a:57:22:3c:58:0d:
         80:98:19:c1
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAYLEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMTIzMTE3MjczM1oXDTIzMDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEE3NTUxMTAvBgNVBAUTKENGREY4RjYyNURDNUU0M0E5OUNDNTM3
OEQ3N0NFOTI1OTEwRTlDMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+7dwy8xJrf0RNPidvqdoaaz2JccQ5AKlPMvJ20YG1z5WDChGoqYVnjxxLPUmo
HNM5lDJl4DOwpkR6Mq4SdTfYjL3lx/gNcbKXS0nz9R8WbRnOnkRBovE21p9bsOxi
wYWAmlq8GBJXYPNBK5b5YTpyxGwjURFitrVMb4v13ve7ypyK95wLx8Vf1O9tVVlk
c7LDWyRa4VOrU+Q4O2JPH9Vw27of047b06Mw96j9O/Libl/dxkGXVWZJj8cMjtmM
cajXoSpkj5IyOfVCA7Ip1LPoYrniuvbhyxcENh/uFJH3ZDvQ5zi9VtE3CPZHRasZ
8NKEQFY2Rwmqa9MGL+lfv1e1AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUz9+PYl3F
5DqZzFN413zpJZEOnBAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThBNzU1L0JDNjY1RDRFRDU3RDExRUI4RDM3OEQyNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4QTc1NS9CQzY2NUQ0RUQ1N0QxMUVCOEQzNzhEMjVDNEY5QUUwMi96OS1QWWwz
RjVEcVp6Rk40MTN6cEpaRU9uQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFnkeYwDwQCAAIwCQMHACABDfIwgDANBgkqhkiG9w0BAQsFAAOC
AQEAlPBsEmZv5sRaXJNOIyHPfrVx8qivpuFrmy1YPlYBcy31yScP4rRM9hhsls31
U99CMVhe8zEaHNXlNnzL78TDyi88ToJoYMuwVioBMgPXJ63eyur+OrzoRdAxl8E+
qlT/7CeB8JhNLGFZ4jqUW0eZHIcp8Uyi4deZ94QJPqZLwFqTV5Lgmf2x24Vezjqz
NM/86Kw8gyJmfheNmfyHXmhAqs0OISAichLKax/DSEo3tKxBV9ti0shSuMAxxhlR
umyuhkIKASjpTDFBX+ERPD49VfMTlPR3di93SvllJywT00Sg2k/A5+OEhgT+1VdU
RiT6/bn387egOlciPFgNgJgZwQ==
-----END CERTIFICATE-----