Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2j3jov6RsLQ2YUKyUbwdeWlNZWc.cer
File:                     2j3jov6RsLQ2YUKyUbwdeWlNZWc.cer (raw, json)
Hash identifier:          pFluLlJBeXUAV/skWyx54EpGIFk4k6T4baJkDqRMbAs=
Subject key identifier:   DA:3D:E3:A2:FE:91:B0:B4:36:61:42:B2:51:BC:1D:79:69:4D:65:67
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7766
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/2j3jov6RsLQ2YUKyUbwdeWlNZWc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:36 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 37970
                          IP: 202.60.112.0/20
                          IP: 2401:8200::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30566 (0x7766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:36 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=DA3DE3A2FE91B0B4366142B251BC1D79694D6567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ad:12:c6:b9:2b:88:d3:1c:0e:fa:8f:66:a6:
                    4a:de:89:bf:28:74:61:cd:bc:5f:6c:93:cd:5c:0c:
                    e3:79:4a:6a:dc:fe:44:4a:93:74:41:79:7b:1e:c2:
                    51:d5:c2:3a:47:67:ac:63:12:97:0c:1a:96:25:bb:
                    20:2e:2d:d3:f5:92:82:97:2c:ec:b9:67:1c:49:35:
                    37:79:df:26:ee:ed:e5:d5:54:ec:da:ca:f2:d7:9a:
                    5f:8b:61:50:51:30:8e:84:44:37:7e:ee:9c:86:1e:
                    45:aa:5b:3c:6b:8c:c8:5b:ea:01:ee:a1:22:1e:5a:
                    ba:8f:f3:c7:0c:0c:d5:80:2d:4f:10:c1:09:05:fe:
                    9a:cc:d9:18:b4:8c:a8:7f:82:64:9b:fc:f8:59:17:
                    8c:55:9f:50:6e:c3:1b:ed:6d:db:73:79:25:6e:b8:
                    14:f5:4f:42:81:bc:68:c9:d2:19:81:35:94:09:96:
                    e2:cf:74:b0:8a:b3:0c:8b:49:09:44:c7:4a:0d:fe:
                    1e:86:b1:b4:e3:ec:c9:24:24:c4:b0:a1:6f:b1:1a:
                    9d:6d:61:09:2c:80:8a:03:2c:6f:a2:20:64:51:ba:
                    83:92:ba:6b:b1:35:ab:16:ad:c5:e2:cf:da:1e:d7:
                    13:e0:45:2f:f1:c1:37:40:01:b7:e3:da:d1:75:62:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3D:E3:A2:FE:91:B0:B4:36:61:42:B2:51:BC:1D:79:69:4D:65:67
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/175/2j3jov6RsLQ2YUKyUbwdeWlNZWc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37970

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.60.112.0/20
                IPv6:
                  2401:8200::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:40:38:74:96:fe:08:aa:be:ca:83:6a:cb:7f:48:3b:2b:d3:
         9e:a3:1b:92:ff:61:12:ab:62:06:d3:b1:75:31:9a:ff:04:4e:
         4e:77:7d:92:d5:6f:32:8f:5c:cc:fc:ea:99:5d:98:5f:a1:48:
         5a:d2:fa:8c:20:f3:13:a3:d6:61:47:05:f9:7a:91:99:73:39:
         cf:6a:ef:ae:39:42:58:8b:30:49:bf:ee:7e:b6:24:28:06:94:
         af:64:37:ce:f1:06:67:8a:38:de:2b:e5:f5:b7:c7:cc:6d:ee:
         8b:f1:08:c9:ac:f8:75:02:cc:fb:8a:5a:1f:50:41:07:13:ca:
         b8:72:68:f1:02:5b:e2:36:83:7c:84:bc:40:72:1c:76:b0:ba:
         18:1d:ff:c4:65:90:f2:66:30:d1:81:da:09:8e:7d:9d:ac:72:
         0e:c1:a1:8a:4c:23:14:5b:89:8c:05:9d:4f:c4:82:fb:28:f9:
         a2:02:a4:9e:00:fe:e1:35:89:40:b4:21:7d:df:c4:96:26:1d:
         27:cd:85:42:d8:f6:63:4f:b9:53:2d:95:c5:6f:fe:21:04:a7:
         42:e1:6b:fe:4e:c6:14:4f:a7:75:a9:c6:77:0e:9d:83:66:79:
         d5:be:1c:ea:e3:10:13:ca:26:e8:2f:44:a6:5d:7f:fb:92:22:
         93:95:03:62
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICd2YwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDMzNloXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoREEzREUzQTJGRTkxQjBCNDM2NjE0MkIyNTFCQzFENzk2OTRENjU2
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM2tEsa5K4jTHA76j2am
St6Jvyh0Yc28X2yTzVwM43lKatz+REqTdEF5ex7CUdXCOkdnrGMSlwwaliW7IC4t
0/WSgpcs7LlnHEk1N3nfJu7t5dVU7NrK8teaX4thUFEwjoREN37unIYeRapbPGuM
yFvqAe6hIh5auo/zxwwM1YAtTxDBCQX+mszZGLSMqH+CZJv8+FkXjFWfUG7DG+1t
23N5JW64FPVPQoG8aMnSGYE1lAmW4s90sIqzDItJCUTHSg3+HoaxtOPsySQkxLCh
b7EanW1hCSyAigMsb6IgZFG6g5K6a7E1qxatxeLP2h7XE+BFL/HBN0ABt+Pa0XVi
2xcCAwEAAaOCAn4wggJ6MB0GA1UdDgQWBBTaPeOi/pGwtDZhQrJRvB15aU1lZzAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTc1
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzE3NS8yajNqb3Y2UnNMUTJZVUt5VWJ3ZGVXbE5aV2MubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCUUjAuBggrBgEFBQcBBwEB/wQfMB0wDAQC
AAEwBgMEBMo8cDANBAIAAjAHAwUAJAGCADANBgkqhkiG9w0BAQsFAAOCAQEAkEA4
dJb+CKq+yoNqy39IOyvTnqMbkv9hEqtiBtOxdTGa/wROTnd9ktVvMo9czPzqmV2Y
X6FIWtL6jCDzE6PWYUcF+XqRmXM5z2rvrjlCWIswSb/ufrYkKAaUr2Q3zvEGZ4o4
3ivl9bfHzG3ui/EIyaz4dQLM+4paH1BBBxPKuHJo8QJb4jaDfIS8QHIcdrC6GB3/
xGWQ8mYw0YHaCY59naxyDsGhikwjFFuJjAWdT8SC+yj5ogKkngD+4TWJQLQhfd/E
liYdJ82FQtj2Y0+5Uy2VxW/+IQSnQuFr/k7GFE+ndanGdw6dg2Z51b4c6uMQE8om
6C9Epl1/+5Iik5UDYg==
-----END CERTIFICATE-----