Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zikfbsxg3UzEgdi9LEZQrR3-41U.cer
File:                     zikfbsxg3UzEgdi9LEZQrR3-41U.cer (raw, json)
Hash identifier:          07RR9wbDsF62m5Ur8KaOmKvUfscwXxTVKLRzlzOi66M=
Subject key identifier:   CE:29:1F:6E:CC:60:DD:4C:C4:81:D8:BD:2C:46:50:AD:1D:FE:E3:55
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       015A4C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/zikfbsxg3UzEgdi9LEZQrR3-41U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 03 Jun 2022 02:48:36 +0000
Certificate not after:    Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 38016
                          IP: 124.252.0.0/16
                          IP: 203.17.66.0/24
                          IP: 203.62.196.0/24
                          IP: 2406:c800::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88652 (0x15a4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  3 02:48:36 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=A913429A/serialNumber=CE291F6ECC60DD4CC481D8BD2C4650AD1DFEE355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:5e:04:b8:c0:f8:60:5b:46:07:c9:36:f9:
                    4b:e2:6c:c8:c6:45:de:f3:33:77:2b:71:45:aa:dc:
                    9c:53:54:5c:8b:f5:90:71:f8:ff:ce:2d:75:7c:bc:
                    58:44:42:43:15:02:3e:5d:8c:a8:df:a3:c5:65:5b:
                    84:dc:8d:a2:b3:2f:b8:dd:f3:85:6e:c0:9e:58:ea:
                    95:d9:2f:b4:ef:8a:cf:6f:b6:5f:26:8e:36:7a:dc:
                    b9:ee:81:33:d3:3b:94:92:d9:c3:63:db:a3:cd:80:
                    77:6a:78:80:ee:64:2a:a5:c3:66:ea:13:8d:09:7a:
                    af:bf:83:bc:3c:e5:4f:07:18:b6:5b:57:c0:0c:da:
                    40:d0:da:b1:54:5a:33:b4:92:a7:1d:80:e2:b7:a5:
                    b4:cf:e5:e9:1d:fe:18:a1:3e:06:25:53:c6:44:6a:
                    a7:3d:a3:cd:1b:02:0b:d5:76:a8:6d:70:bd:5b:b3:
                    2d:77:68:3a:ee:b8:aa:33:be:d7:81:61:6d:ea:be:
                    47:90:5b:b8:3a:c4:a3:45:8c:0d:99:ed:eb:40:a6:
                    cc:0a:75:d8:65:c6:6c:92:b4:82:f8:56:7a:e6:9e:
                    5c:e2:30:73:12:67:ae:01:56:c8:e7:7a:a5:d4:89:
                    c3:02:ae:dc:ec:99:1b:eb:ac:e9:d6:94:c9:46:79:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:29:1F:6E:CC:60:DD:4C:C4:81:D8:BD:2C:46:50:AD:1D:FE:E3:55
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/zikfbsxg3UzEgdi9LEZQrR3-41U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38016

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.252.0.0/16
                  203.17.66.0/24
                  203.62.196.0/24
                IPv6:
                  2406:c800::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:91:e1:26:55:40:07:e3:55:5d:6f:89:c6:bc:a6:1f:62:ac:
         96:7a:00:a8:2d:c6:f6:2e:11:2c:f6:4a:70:ab:2b:69:86:32:
         49:4b:aa:34:a2:27:b7:98:97:63:52:43:0a:b7:64:b2:14:08:
         b4:2c:73:65:f7:5d:00:d8:b0:06:95:ed:0a:3a:81:28:95:bf:
         ec:e1:76:12:f2:75:7e:cc:65:24:92:76:77:e5:b4:bf:1e:ff:
         f0:e1:52:95:5e:28:19:71:6a:de:94:63:40:0e:29:cc:a6:41:
         45:dd:11:d1:c2:33:e3:b8:f6:64:0d:e8:30:af:25:65:79:53:
         2e:3f:86:9b:7f:f1:6c:99:63:0f:3f:95:6b:a5:06:9b:73:87:
         c9:73:be:78:03:0e:12:70:24:28:59:75:ae:ef:a1:aa:d7:9b:
         a2:56:d6:fc:4c:a5:07:bc:c9:8e:98:db:84:df:e9:2a:d6:b4:
         7e:33:b3:cf:fb:b1:99:6c:99:2a:ca:ea:c7:d8:ac:e0:23:ce:
         37:e7:ef:77:f8:37:ee:40:c2:fb:67:38:b4:7e:a5:06:c9:83:
         f4:29:e5:6c:d2:29:6d:7d:b5:20:99:47:93:38:c7:5a:de:83:
         b5:fc:5f:e3:01:9d:42:20:67:94:94:c5:d4:6d:c2:26:8c:4d:
         f8:0a:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:55 2024 by rpki-client on console-fra.rpki-client.org