Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2V4DuTga4dCKeF1h61xDOkm7Dvg.cer
File:                     2V4DuTga4dCKeF1h61xDOkm7Dvg.cer (raw, json)
Hash identifier:          qTIphJF+V3Fu951JSWtfKE6c5MesmqcnpM1m2dC2iRY=
Subject key identifier:   D9:5E:03:B9:38:1A:E1:D0:8A:78:5D:61:EB:5C:43:3A:49:BB:0E:F8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       9B81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3221/2V4DuTga4dCKeF1h61xDOkm7Dvg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3221/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 05 Jun 2023 07:49:48 +0000
Certificate not after:    Tue 04 Jun 2024 07:30:10 +0000
Subordinate resources:    AS: 151314
                          IP: 103.213.196.0/23
                          IP: 2401:620::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39809 (0x9b81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  5 07:49:48 2023 GMT
            Not After : Jun  4 07:30:10 2024 GMT
        Subject: CN=D95E03B9381AE1D08A785D61EB5C433A49BB0EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:ab:30:68:42:6b:ef:1d:c3:85:e2:3b:62:
                    89:26:59:7c:bd:db:a2:25:b8:89:28:11:65:89:b8:
                    47:a3:26:d6:b5:72:24:26:dd:02:5c:1c:58:4b:79:
                    a2:08:af:e0:ca:95:c6:56:f0:e2:e4:9e:36:1e:a0:
                    4a:04:cd:8c:af:09:91:d8:43:a9:b9:68:41:70:53:
                    51:ed:5d:00:01:40:a3:2f:79:9d:b6:1e:18:76:8a:
                    ae:a5:29:5e:26:16:d5:f8:e2:16:5d:3d:55:97:6f:
                    8d:a4:bf:3c:00:23:0c:ee:52:f0:14:1b:5e:ee:99:
                    78:c5:5f:bc:a1:7f:e3:9a:28:65:3c:e6:e5:10:6d:
                    a6:77:2f:4f:fa:bc:b9:86:21:c8:8a:00:d5:ac:d5:
                    c0:83:3c:96:21:30:84:bf:cf:57:ee:f7:a0:27:1e:
                    08:a7:b6:f6:5d:8d:3f:03:ee:81:8d:6f:bb:7f:d6:
                    89:b4:a3:cc:d2:32:ff:d3:ec:3d:b1:f0:c6:70:a9:
                    10:4c:01:bc:4e:e0:c7:7a:fe:f3:14:ae:88:d4:16:
                    21:2a:20:10:3a:9b:ad:ef:9f:4d:6c:1a:7c:e8:45:
                    1a:c8:ac:d7:15:53:5f:93:ce:9e:44:41:7c:f9:83:
                    ea:8d:b2:fe:c2:f1:97:d7:b5:0f:24:95:ac:e6:a7:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5E:03:B9:38:1A:E1:D0:8A:78:5D:61:EB:5C:43:3A:49:BB:0E:F8
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3221/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3221/2V4DuTga4dCKeF1h61xDOkm7Dvg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151314

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.196.0/23
                IPv6:
                  2401:620::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:5a:42:ea:be:82:cd:e2:88:6c:0f:49:46:42:88:13:be:
         12:a8:c1:00:8b:af:c2:5e:5c:a1:88:a4:37:b0:28:4a:c3:38:
         ea:75:ae:bc:c1:2b:91:b6:fc:7b:49:d3:dc:78:04:0b:ce:9a:
         ef:5f:8a:ec:c6:04:f4:e7:3a:2f:57:e8:4a:43:59:c8:17:11:
         f8:3e:f5:e9:22:c3:85:c3:fd:f3:f9:9f:90:b4:6c:d4:78:e8:
         55:50:f5:33:76:28:f0:83:63:08:3c:87:cd:dc:3d:74:fd:88:
         1b:c0:49:53:ac:87:26:2d:3a:6b:85:d3:f3:7f:9d:31:07:4a:
         dc:a7:09:81:bf:5c:60:f2:4e:d9:73:6f:7a:dd:7f:16:68:6a:
         e8:fa:a3:00:85:6b:72:48:c8:11:cd:53:d0:57:74:01:86:30:
         36:42:ce:67:95:17:e4:b5:f7:0c:5c:17:e5:b9:3e:87:4b:cb:
         84:09:aa:bb:61:d9:52:19:18:f5:85:47:03:0e:92:97:ac:73:
         ab:ef:52:bf:6f:41:48:87:a7:cc:ce:8e:97:48:88:77:43:a8:
         c1:61:92:6f:30:4c:8b:ba:1d:5a:fb:23:63:fa:02:9a:07:2e:
         c7:1c:9c:59:c6:07:b4:09:b1:83:9b:ed:60:ff:73:f7:32:45:
         40:68:aa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----