Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-D0wNcCPgAnPOtVh1FrGoIJLqug.cer
File:                     -D0wNcCPgAnPOtVh1FrGoIJLqug.cer (raw, json)
Hash identifier:          Nq6Fwfia8XgsFEMwZVZzHfnM8JDNSP1FwEzYqrDkQ64=
Subject key identifier:   F8:3D:30:35:C0:8F:80:09:CF:3A:D5:61:D4:5A:C6:A0:82:4B:AA:E8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/-D0wNcCPgAnPOtVh1FrGoIJLqug.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:18 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 137798
                          IP: 103.116.92.0/22
                          IP: 210.76.64.0/19
                          IP: 2402:f8c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30634 (0x77aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:18 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F83D3035C08F8009CF3AD561D45AC6A0824BAAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:84:e3:12:a1:01:ad:3e:46:7d:3a:09:a5:
                    47:bd:4a:75:24:65:44:79:bd:5d:d1:98:60:c6:f2:
                    f8:0a:20:a5:3d:87:4f:6a:ab:82:38:79:8c:37:b7:
                    04:bf:3c:b6:a2:d8:21:6d:f0:65:69:b8:b4:f3:cd:
                    14:8e:21:1f:88:59:c8:3e:16:eb:f0:30:1c:43:3f:
                    3c:cd:68:8a:bc:fa:8c:86:cc:7c:e9:80:90:3e:c5:
                    82:f8:7c:7d:be:94:07:9e:6c:ae:f0:0e:0c:90:f2:
                    c0:d3:a4:76:58:22:49:65:da:a8:80:57:e0:73:38:
                    0a:b1:4f:ef:a0:ba:56:42:5e:e6:17:81:fa:8b:b9:
                    ea:44:06:85:f3:de:14:26:12:0a:82:39:3d:6e:63:
                    4d:dd:9e:3e:66:b5:9f:3c:67:72:5e:c2:fd:a5:46:
                    21:fa:67:a1:16:a4:61:57:d7:6f:57:91:13:e4:2c:
                    93:6b:30:f6:1d:da:8b:36:12:b2:5b:03:86:e3:50:
                    ea:81:ba:3d:78:1c:de:f9:ac:6a:45:b4:39:30:80:
                    20:23:cb:6b:8c:28:af:d7:a1:cd:0c:9e:59:e5:42:
                    b5:1f:dc:15:c8:85:04:96:cb:fa:0c:af:da:f4:75:
                    2c:25:3c:b2:b3:49:62:b4:21:e2:6a:ff:40:7b:a9:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3D:30:35:C0:8F:80:09:CF:3A:D5:61:D4:5A:C6:A0:82:4B:AA:E8
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/-D0wNcCPgAnPOtVh1FrGoIJLqug.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137798

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.92.0/22
                  210.76.64.0/19
                IPv6:
                  2402:f8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:31:20:c0:4d:21:4f:1e:a7:54:96:e2:18:36:93:ef:e6:4f:
         7b:d3:b8:a0:a0:41:2c:a8:71:5f:f8:d2:90:2c:07:f0:87:8f:
         6c:52:d4:34:e2:f3:a4:81:c6:58:70:de:32:7d:14:04:de:05:
         6a:0d:ae:16:9f:53:61:c8:2a:2a:e0:2c:32:66:30:ad:5c:70:
         0c:af:43:78:c0:47:2b:3b:fb:70:b4:e3:1e:e9:52:d0:fe:93:
         64:b1:d1:0f:f1:a0:d8:03:cf:b2:d5:41:d3:75:17:48:44:b5:
         1a:a5:2e:60:40:62:a5:63:61:2d:8f:15:01:ba:e3:ae:fe:f6:
         2b:4a:52:d6:f6:6e:42:89:4b:df:99:e1:de:cf:99:8c:d4:b9:
         be:1e:39:3c:1f:b4:6c:cb:ee:95:0c:3e:59:cc:ae:67:71:09:
         b8:b0:55:25:51:28:be:2b:aa:27:88:27:17:ff:ee:eb:f9:d4:
         c0:d9:30:a8:0d:8f:25:95:07:3a:e4:8e:67:46:fe:f5:f7:72:
         fb:fd:00:bc:ef:6a:ee:4d:e0:c4:22:81:31:29:37:e9:5a:79:
         f3:e6:19:c5:3c:6e:25:c6:9e:a4:01:f1:c3:84:03:48:3b:d6:
         85:8a:b0:f7:4d:7c:11:43:10:05:c4:c5:ee:72:2d:3f:c3:20:
         74:fe:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----