Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-e9Xwdrpf8QMMQNClGj5-NEd6iE.cer
File:                     -e9Xwdrpf8QMMQNClGj5-NEd6iE.cer (raw, json)
Hash identifier:          nOV6a8TZY9loeOAV3DT6bTxmE4BgfOsy4Q0ysX9jB1Y=
Subject key identifier:   F9:EF:57:C1:DA:E9:7F:C4:0C:31:03:42:94:68:F9:F8:D1:1D:EA:21
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/-e9Xwdrpf8QMMQNClGj5-NEd6iE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 11 Nov 2021 20:15:25 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63691

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31827 (0x7c53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 11 20:15:25 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F9EF57C1DAE97FC40C3103429468F9F8D11DEA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:ca:e2:c0:4a:74:c1:ac:e3:42:2c:f4:77:
                    6e:b1:36:0e:a3:7b:71:8e:ce:3a:15:78:0e:08:40:
                    e8:61:3f:25:c0:9d:27:43:16:31:90:1a:c4:cf:68:
                    30:47:5c:f9:e2:e3:e1:9d:63:2f:c4:e4:ea:31:f8:
                    66:a6:15:93:00:2a:da:7f:aa:9e:2d:d9:c2:38:d7:
                    d0:b9:a4:9e:2e:20:f8:28:37:9c:ed:93:53:dc:ea:
                    5a:93:9d:1b:c9:b9:8f:e7:f9:e4:09:84:03:80:6f:
                    1d:3c:89:f9:88:38:b3:cf:6a:ea:3c:15:80:e7:fe:
                    5d:2d:ec:f1:12:e5:1c:96:fd:31:37:0e:e4:fb:0c:
                    6d:dc:d6:46:0b:ad:f3:60:17:96:29:fc:07:06:0c:
                    a6:ac:5a:f5:c4:ed:62:c4:27:22:af:24:22:0d:d1:
                    f1:8b:ca:be:9a:05:48:3f:54:e0:45:09:bd:69:3e:
                    d1:79:c6:92:b5:99:16:33:bc:2e:01:9a:fa:b3:e1:
                    5e:88:b1:50:4f:e1:80:ae:fc:8a:4c:0d:01:6b:66:
                    88:20:c2:bb:d9:c1:f9:51:4a:6e:6d:08:0b:80:f3:
                    f6:38:56:1f:d7:d3:af:a6:b7:2a:95:54:0d:82:74:
                    8a:6d:5c:87:7f:ac:40:db:2d:35:15:66:15:bf:6a:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EF:57:C1:DA:E9:7F:C4:0C:31:03:42:94:68:F9:F8:D1:1D:EA:21
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1187/-e9Xwdrpf8QMMQNClGj5-NEd6iE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63691

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:e2:bd:2a:8c:43:f6:ce:82:ab:12:5b:09:a2:3e:fc:83:
         ee:5a:ed:ce:50:a2:4f:7b:54:2f:ca:e4:40:dc:58:88:7d:dc:
         a0:63:a7:3a:65:4d:ef:66:d9:57:65:9a:a8:8d:34:8b:d7:1a:
         96:19:79:c5:70:f9:af:7d:66:6f:27:a2:b5:5b:fa:f1:ae:f5:
         e6:96:6e:5d:fe:a7:3e:ba:f2:a0:1c:b4:c2:a0:64:7c:88:32:
         87:e2:e6:bf:d0:ab:3d:da:ff:3d:6d:df:40:31:9e:40:f3:e8:
         f9:9a:fb:46:45:99:c1:bc:b0:68:03:32:17:01:c7:2f:c0:00:
         e4:14:84:87:23:3a:26:8d:3e:fd:e2:bb:46:83:54:07:fb:7a:
         88:a2:01:c4:6e:87:03:31:57:e4:9b:e3:69:df:7d:1c:1f:f6:
         59:7e:8a:5b:3e:88:dd:f5:7d:bd:f3:08:27:e6:1e:d0:15:8d:
         32:62:ef:dd:bd:3b:28:fb:c9:cc:54:7c:a2:c6:87:ce:38:19:
         01:7e:a8:67:5b:82:18:05:2e:cc:c5:22:9d:a8:0e:0b:da:ff:
         49:0f:ec:47:a7:7a:6b:9f:a6:ad:f7:27:30:10:38:b6:fb:4c:
         7d:1c:b9:7f:04:ae:ba:d7:5a:e7:78:e2:80:7a:64:30:97:1f:
         a4:b8:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----