Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/45ksc-PuThx1JOebqiLPlUh5r5c.cer
File:                     45ksc-PuThx1JOebqiLPlUh5r5c.cer (raw, json)
Hash identifier:          mlP3v1c1Sbdr9RE4vShosZqA/X3mlpmWgUd7aAaEwB4=
Subject key identifier:   E3:99:2C:73:E3:EE:4E:1C:75:24:E7:9B:AA:22:CF:95:48:79:AF:97
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       788B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/45ksc-PuThx1JOebqiLPlUh5r5c.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 07 Jun 2021 20:28:51 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59022
                          IP: 45.115.244.0/22
                          IP: 103.56.20.0/22
                          IP: 2400:ebc0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30859 (0x788b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  7 20:28:51 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E3992C73E3EE4E1C7524E79BAA22CF954879AF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:cb:00:62:c4:01:41:24:a2:a5:4c:c8:fa:
                    6a:68:b0:8c:a4:fd:b9:f8:c8:3a:fa:87:59:3a:aa:
                    76:9c:26:b5:ef:45:36:0c:33:67:c0:41:bd:a9:4e:
                    72:ba:d9:d9:33:f9:b9:11:76:1f:f0:4e:0d:97:0f:
                    fc:32:47:4a:ab:b8:d4:9b:10:a4:9b:a5:d3:45:f6:
                    d0:e5:2f:79:12:b0:b4:0f:e2:7b:c9:56:cd:ca:07:
                    e9:4d:c3:27:60:fb:c4:22:c9:59:31:b1:41:ba:20:
                    c3:e9:87:d5:ef:2b:8c:a0:27:7a:9a:d2:ca:ed:20:
                    b4:ea:d4:3a:2b:6b:a2:b8:ef:35:fb:d2:ad:c6:ed:
                    8b:8b:03:4f:10:fd:0d:de:18:f7:c2:11:c7:d8:6a:
                    df:9e:3e:20:fe:7f:f4:f9:32:f9:fd:2d:33:c7:bc:
                    13:ef:fe:f4:4a:42:37:9c:0d:83:1e:b8:6a:db:e4:
                    d4:f6:b3:88:4a:b1:49:80:5d:66:92:57:7c:6f:8f:
                    17:c0:42:55:8a:e0:9d:b1:d7:2e:f9:f1:c2:a5:74:
                    e1:a2:12:30:00:75:4a:43:aa:58:30:20:95:66:71:
                    71:96:92:fb:d3:c8:84:eb:4b:4c:69:51:4d:09:55:
                    c1:43:c6:99:7e:74:e7:a0:18:05:71:1c:c1:31:33:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:99:2C:73:E3:EE:4E:1C:75:24:E7:9B:AA:22:CF:95:48:79:AF:97
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/45ksc-PuThx1JOebqiLPlUh5r5c.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59022

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.244.0/22
                  103.56.20.0/22
                IPv6:
                  2400:ebc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:45:48:0e:b6:b5:f4:b9:ca:b3:44:96:cf:bd:24:17:a2:3e:
         da:2e:38:87:b7:4e:4a:00:29:6d:de:7d:95:67:a8:12:e1:ae:
         26:02:54:56:dc:d7:fb:e8:2b:a9:b7:f4:71:d1:e1:19:50:42:
         d9:60:83:62:35:52:50:e3:fe:ac:21:81:c2:62:4c:b5:b5:94:
         d3:ba:78:44:1e:cd:c6:17:3a:a6:ed:b7:e9:05:72:05:86:46:
         e5:ce:50:37:bf:cb:d1:44:2a:90:a7:b6:cb:c6:fe:0c:c8:d8:
         91:77:c6:60:89:76:23:8c:38:a8:ff:05:d0:17:4e:38:c9:8f:
         d1:b2:17:1a:0f:d0:31:66:2e:64:4c:e2:e9:d4:6b:2e:08:f3:
         93:e7:79:41:98:01:3a:da:4e:43:bb:6b:e7:fb:5d:62:13:dc:
         72:e0:2a:f4:6f:ae:3d:71:a4:3b:22:80:1d:af:f2:26:25:09:
         fc:24:e7:0a:18:f5:8e:d1:d4:15:a6:0a:d5:7e:bf:54:ab:70:
         2b:c5:c6:dd:bf:e7:fa:a8:5b:7f:1d:18:28:39:18:ce:c1:69:
         98:0a:e1:61:d5:1a:eb:18:08:6f:83:4a:3d:89:31:4f:9f:a6:
         ae:25:40:2f:83:9d:b1:29:6c:f7:61:b1:0a:9a:06:77:64:6d:
         38:83:3c:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICeIswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDYwNzIwMjg1MVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRTM5OTJDNzNFM0VFNEUxQzc1MjRFNzlCQUEyMkNGOTU0ODc5QUY5
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMWOywBixAFBJKKlTMj6
amiwjKT9ufjIOvqHWTqqdpwmte9FNgwzZ8BBvalOcrrZ2TP5uRF2H/BODZcP/DJH
Squ41JsQpJul00X20OUveRKwtA/ie8lWzcoH6U3DJ2D7xCLJWTGxQbogw+mH1e8r
jKAneprSyu0gtOrUOitrorjvNfvSrcbti4sDTxD9Dd4Y98IRx9hq354+IP5/9Pky
+f0tM8e8E+/+9EpCN5wNgx64atvk1PaziEqxSYBdZpJXfG+PF8BCVYrgnbHXLvnx
wqV04aISMAB1SkOqWDAglWZxcZaS+9PIhOtLTGlRTQlVwUPGmX5056AYBXEcwTEz
0AkCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBTjmSxz4+5OHHUk55uqIs+VSHmvlzAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw
MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8xMjAwLzQ1a3NjLVB1VGh4MUpPZWJxaUxQbFVoNXI1Yy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOaOMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCLXP0AwQCZzgUMA0EAgACMAcDBQAkAOvAMA0GCSqGSIb3DQEBCwUA
A4IBAQAnRUgOtrX0ucqzRJbPvSQXoj7aLjiHt05KAClt3n2VZ6gS4a4mAlRW3Nf7
6Cupt/Rx0eEZUELZYINiNVJQ4/6sIYHCYky1tZTTunhEHs3GFzqm7bfpBXIFhkbl
zlA3v8vRRCqQp7bLxv4MyNiRd8ZgiXYjjDio/wXQF044yY/RshcaD9AxZi5kTOLp
1GsuCPOT53lBmAE62k5Du2vn+11iE9xy4Cr0b649caQ7IoAdr/ImJQn8JOcKGPWO
0dQVpgrVfr9Uq3Arxcbdv+f6qFt/HRgoORjOwWmYCuFh1RrrGAhvg0o9iTFPn6au
JUAvg52xKWz3YbEKmgZ3ZG04gzwn
-----END CERTIFICATE-----