Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/286gFxfM2LDQDP29ojpWyOlLtUY.cer
File:                     286gFxfM2LDQDP29ojpWyOlLtUY.cer (raw, json)
Hash identifier:          hkSHKPYmc4o5KhAGIrJW0QveTFOCbGk1mEDGbwb43wg=
Subject key identifier:   DB:CE:A0:17:17:CC:D8:B0:D0:0C:FD:BD:A2:3A:56:C8:E9:4B:B5:46
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7724
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/286gFxfM2LDQDP29ojpWyOlLtUY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:27 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.203.212.0/22
                          IP: 2404:280::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30500 (0x7724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:27 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=DBCEA01717CCD8B0D00CFDBDA23A56C8E94BB546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:06:13:d0:83:7e:74:83:5f:b0:e3:e4:5b:
                    5f:3c:80:5e:c1:ba:4c:84:f7:97:1c:5a:96:00:00:
                    a8:8b:16:20:ef:77:18:c4:58:18:b1:0e:96:81:3d:
                    77:ec:ac:c8:b6:44:ff:47:b1:45:33:8f:bc:dc:78:
                    d9:ad:db:cd:fb:62:41:c9:5b:12:b0:98:3a:ed:89:
                    1e:d1:3d:10:ba:dd:d9:65:ba:fe:82:81:d3:98:be:
                    cd:72:c4:86:9b:94:f4:b8:44:e2:ad:bd:ff:16:2e:
                    a8:cf:8f:e7:50:73:bc:ee:99:ed:75:73:3c:cf:cd:
                    d1:5b:eb:b7:08:e5:61:b0:58:e4:a3:29:5c:0a:ec:
                    67:59:ab:5d:9c:56:91:24:90:f1:58:58:ee:4c:3e:
                    54:db:df:12:8b:84:6e:c4:cf:98:5d:f7:d7:42:b1:
                    77:c4:2d:d7:81:06:69:59:f9:0f:8d:e0:5e:c3:cd:
                    eb:fd:9d:41:c4:ad:55:52:57:49:a2:46:33:78:12:
                    ea:30:ef:08:4f:a9:fa:bb:f5:86:d4:23:92:a8:87:
                    77:a7:ee:e5:f9:9e:1f:5d:d7:fd:86:65:b9:f0:93:
                    ef:4b:98:ea:45:a5:b5:db:dd:3f:0d:b8:28:2d:ef:
                    53:eb:92:9a:59:e4:ba:e8:e5:f5:f2:20:a8:81:f2:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CE:A0:17:17:CC:D8:B0:D0:0C:FD:BD:A2:3A:56:C8:E9:4B:B5:46
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/286gFxfM2LDQDP29ojpWyOlLtUY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.212.0/22
                IPv6:
                  2404:280::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:8f:43:4d:b2:af:e8:8c:4f:e9:09:4c:40:e2:1f:cf:2e:bc:
         7c:e2:19:17:92:b7:51:e7:c6:46:f8:de:3f:ef:95:e9:0e:ca:
         cc:df:98:63:65:53:72:51:ab:0f:12:e8:19:bf:84:29:98:73:
         1a:99:b5:31:02:95:e7:13:d7:85:56:73:b2:99:d9:9f:d6:dd:
         8f:4c:cb:d2:4f:cc:91:5e:6d:d4:68:a5:93:01:47:55:7b:d8:
         41:e8:c8:ec:87:f7:74:29:6e:81:8f:5d:a4:e3:fe:60:ea:22:
         cb:01:33:6f:40:e9:91:f3:f8:b1:05:05:fb:33:53:26:9e:cf:
         32:f2:7d:93:8f:83:e2:02:76:22:a2:15:bd:86:ba:08:0d:7b:
         89:88:08:d6:78:e5:ec:d1:9c:5d:e8:09:04:30:60:cc:a6:57:
         ff:d4:2c:5a:b7:9a:2b:2e:13:a3:c4:dc:f6:0d:20:38:e9:9f:
         6f:80:48:3b:88:c0:9c:6e:f6:f6:a1:8a:5f:98:2f:e3:e8:3f:
         98:78:29:47:a4:05:b6:bc:5b:8c:03:6e:d7:8d:ed:f4:b3:d8:
         65:13:ad:88:ea:de:c3:28:4b:78:cb:be:6e:ec:ff:ab:1c:99:
         07:80:8a:ac:64:00:c7:69:3b:53:2f:9c:10:ec:ae:ab:ff:76:
         b0:f6:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----