Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.cer
File:                     2tetR2XbcOqFjxgXgYH4Ow8s_Ko.cer (raw, json)
Hash identifier:          D7IICKHn9VYp12IdBd1Cd2J4uK3rPLf7F2w2BWaWkpE=
Subject key identifier:   DA:D7:AD:47:65:DB:70:EA:85:8F:18:17:81:81:F8:3B:0F:2C:FC:AA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7A2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 12 Aug 2021 02:16:35 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 37965
                          AS: 55988
                          AS: 58857
                          IP: 43.247.44.0 -- 43.247.51.255
                          IP: 103.13.124.0/22
                          IP: 103.26.240.0/22
                          IP: 222.126.128.0/17
                          IP: 2401:2a00::/32
                          IP: 2407:5500::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31279 (0x7a2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Aug 12 02:16:35 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=DAD7AD4765DB70EA858F18178181F83B0F2CFCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:17:9d:72:63:15:f0:55:fd:92:18:79:41:
                    8f:a0:a1:9f:ee:3e:eb:d5:9e:10:bf:7c:56:1c:8e:
                    af:1a:18:81:63:c4:65:1e:7d:91:93:38:53:38:3f:
                    23:7f:76:ab:1b:d3:07:74:74:6a:9f:2e:8a:cc:ac:
                    2c:49:f7:80:be:72:f2:02:84:7b:9e:70:c8:b6:ca:
                    b1:69:e4:d9:06:59:b2:9d:a9:2b:fb:34:7f:15:44:
                    38:43:a6:a7:1a:7f:fc:19:09:67:c0:8d:12:13:02:
                    a9:75:38:6d:fe:a1:26:2c:02:f1:54:f9:65:cd:92:
                    19:01:0e:86:95:e4:05:87:3c:a0:44:50:a3:15:b3:
                    6b:37:05:d5:b6:a9:aa:0b:ab:dc:8a:0e:61:b8:49:
                    20:8d:12:17:31:30:b1:6b:c7:d4:90:d1:db:ba:9e:
                    49:cd:48:cb:36:f4:13:c9:e2:a5:d6:07:6b:20:84:
                    57:f4:67:db:de:a3:81:41:a8:f9:0d:e1:3a:75:26:
                    e2:78:a3:2e:04:7f:b4:66:8d:11:fe:29:77:ea:63:
                    d6:5b:f9:70:17:ea:82:15:90:ef:6c:ca:e9:48:78:
                    0f:b4:bd:e0:a7:15:9d:77:9a:ea:12:3d:08:24:2b:
                    a0:dc:0f:f4:69:a4:7d:9c:60:65:03:a9:51:92:f8:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D7:AD:47:65:DB:70:EA:85:8F:18:17:81:81:F8:3B:0F:2C:FC:AA
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37965
                  55988
                  58857

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.44.0-43.247.51.255
                  103.13.124.0/22
                  103.26.240.0/22
                  222.126.128.0/17
                IPv6:
                  2401:2a00::/32
                  2407:5500::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:63:a6:82:ca:32:44:dd:f9:f8:b7:c3:06:7a:5e:03:65:1f:
         83:1f:37:fd:75:49:56:f6:fa:69:36:b3:46:89:6c:c2:07:bc:
         41:55:5f:96:ad:18:38:62:6f:fb:6d:7f:9d:29:a6:9f:03:9c:
         96:ab:95:96:58:5a:4b:36:df:86:26:02:5e:89:e3:ef:77:3e:
         e4:2a:3b:ce:2a:7d:46:c0:ef:09:44:6b:a5:6a:06:c6:f8:9c:
         b4:c7:f6:81:db:ea:63:37:1b:d3:b5:8e:8e:b2:e8:81:66:e6:
         3e:29:89:8d:57:53:1c:36:ff:ee:3b:f1:5f:c5:6f:6b:aa:65:
         2f:53:80:2d:35:26:5c:86:8e:0f:77:92:f4:04:63:d6:d1:d8:
         8c:48:0d:0e:51:ba:06:d2:e4:6b:5a:9e:75:f3:7c:85:b0:bc:
         ac:64:39:96:e4:f9:d7:9d:f9:76:e7:64:57:60:5a:81:51:0e:
         b2:ee:b4:7a:99:9f:e7:15:6b:3c:b1:01:d2:8a:9e:a0:3e:9d:
         3a:ed:27:6b:7b:43:cb:5d:34:ae:20:a4:fe:0a:e5:73:a7:20:
         41:f4:2d:d5:16:b8:31:3f:79:56:c0:0e:02:a4:c4:9a:1f:f1:
         0d:9f:c7:f8:db:2e:b4:39:d0:47:7a:80:66:a2:c8:2a:2b:11:
         8f:5b:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----