Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-e4HveoPIfpnqJxswzOVuGkaguo.cer
File:                     -e4HveoPIfpnqJxswzOVuGkaguo.cer (raw, json)
Hash identifier:          kz2VNscwWYBCRjj5/U/uwQN9khvL1XFKNAoYreVSeNM=
Subject key identifier:   F9:EE:07:BD:EA:0F:21:FA:67:A8:9C:6C:C3:33:95:B8:69:1A:82:EA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/-e4HveoPIfpnqJxswzOVuGkaguo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:59 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.120.140.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30664 (0x77c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:59 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F9EE07BDEA0F21FA67A89C6CC33395B8691A82EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:16:34:4c:bf:a6:04:06:e4:59:69:ca:21:
                    a9:82:1e:65:c2:a3:d8:b5:cd:1b:dc:84:18:12:a0:
                    5a:d6:4f:6c:d5:ce:a8:a5:26:cf:1c:87:cb:18:a1:
                    2f:62:7b:ff:bb:7a:a9:ea:32:41:0e:0f:0a:58:25:
                    d3:b2:2f:87:b6:a5:67:12:6c:f1:1c:7e:45:bc:28:
                    7a:d9:17:af:97:56:20:a6:7d:1c:59:53:17:fb:80:
                    ff:9e:37:84:8f:bd:be:f5:47:db:24:ff:77:a5:5f:
                    88:6b:67:f4:ab:ba:68:11:a9:af:47:d3:40:2d:e6:
                    62:f0:c4:aa:ce:84:0e:e1:aa:02:95:ab:5a:38:f2:
                    51:f0:7c:40:4d:13:0f:40:c5:ea:97:54:9f:59:75:
                    1e:0b:34:69:3d:d4:47:99:5a:cf:12:a8:ee:01:dd:
                    09:14:68:da:43:80:51:24:41:12:d8:3b:ee:a1:92:
                    c0:4e:af:35:65:2e:fe:f8:cd:78:2c:df:b5:22:b6:
                    8d:a6:40:e4:a8:cd:47:a2:d7:a3:39:ae:0e:0a:a0:
                    61:be:2f:25:ef:47:9c:b4:01:69:95:55:cb:86:e4:
                    e5:95:ba:c0:ec:1a:b0:cc:1a:c3:ca:1f:b6:84:3e:
                    e3:b5:9e:2a:ad:6c:fb:1d:c0:ed:a4:2e:ff:f6:ce:
                    9a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EE:07:BD:EA:0F:21:FA:67:A8:9C:6C:C3:33:95:B8:69:1A:82:EA
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2787/-e4HveoPIfpnqJxswzOVuGkaguo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:7b:1b:7e:09:41:be:82:13:df:77:23:26:ee:ee:2d:e1:4b:
         0f:a3:81:8e:08:01:bc:89:a7:10:7c:8b:ae:94:44:f4:a3:28:
         da:cc:0d:9b:7f:a3:ea:b7:a6:37:83:58:c3:b0:e5:0a:b8:d7:
         e4:9d:6e:89:b0:64:38:bb:11:f2:8d:0a:c8:51:88:40:b7:0f:
         82:97:74:a9:27:09:f6:7b:f0:25:63:70:f8:21:e3:a1:bf:36:
         43:86:09:d7:7d:c6:27:95:3a:b4:bd:25:35:0e:bd:35:36:34:
         3b:12:77:52:7c:b7:ab:fc:05:71:70:b6:e0:37:6b:aa:17:b7:
         db:50:32:2f:70:23:ab:8d:ec:d7:ca:f4:87:ba:a0:c3:14:70:
         8d:39:8a:94:1e:8f:ba:a4:0c:10:03:4a:ab:91:b8:dd:6a:b3:
         9a:d3:55:a4:33:27:f7:8e:31:50:fc:e0:ae:b0:eb:6c:7e:2b:
         0d:13:ab:02:1a:38:b1:1a:9e:a3:3a:ca:fa:a8:7f:09:bb:b7:
         9d:36:7c:b6:1c:ea:6b:65:24:e9:a0:6b:a9:56:08:8f:4a:0d:
         0a:48:ba:8c:c4:08:50:df:44:af:2d:d8:fc:f4:5e:fa:aa:fe:
         0f:b2:93:3f:c6:38:8a:b3:85:73:9e:b8:37:07:ac:21:2a:15:
         a3:cb:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----