Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5-cJpo2zTqzvt9pAtHi37j5X6w8.cer
File:                     5-cJpo2zTqzvt9pAtHi37j5X6w8.cer (raw, json)
Hash identifier:          xNQODMYTb7OOlHa6KdliZoe6IOvEcqO3/ck8WGj9f/U=
Subject key identifier:   E7:E7:09:A6:8D:B3:4E:AC:EF:B7:DA:40:B4:78:B7:EE:3E:57:EB:0F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       771E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/5-cJpo2zTqzvt9pAtHi37j5X6w8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:23 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.50.44.0 -- 103.50.75.255
                          IP: 103.50.108.0 -- 103.50.127.255
                          IP: 103.50.132.0 -- 103.50.143.255
                          IP: 103.50.172.0 -- 103.50.203.255
                          IP: 103.50.220.0 -- 103.50.251.255

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30494 (0x771e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:23 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E7E709A68DB34EACEFB7DA40B478B7EE3E57EB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:4e:aa:c2:00:5f:4e:66:77:cf:ea:65:3f:
                    3f:29:c3:9b:45:94:f2:d8:a4:55:de:11:8d:e7:da:
                    ae:94:5a:71:2a:12:d0:7d:3e:11:83:5b:f9:e3:00:
                    35:76:8a:26:d6:ff:9c:53:14:34:77:33:07:dd:18:
                    7b:55:92:02:a1:df:2f:c1:93:7f:5a:21:23:30:01:
                    90:86:38:52:6b:44:b4:ec:5f:04:67:1a:73:dd:54:
                    01:d7:74:ba:33:4e:ef:87:3a:e4:49:be:b5:ed:6a:
                    86:44:cf:d0:29:50:00:82:74:46:0f:20:ff:7a:32:
                    22:51:1f:ea:0e:12:9c:e0:b1:2f:45:08:24:4a:f7:
                    4a:9d:e9:e7:fa:f3:3f:05:29:38:66:c5:3a:46:82:
                    84:33:18:ab:a0:55:d9:06:44:db:b1:74:47:57:a6:
                    5b:d6:35:6a:9c:d3:de:4a:d3:d5:a9:bb:27:85:12:
                    ee:c1:49:0f:b2:73:ec:52:e0:c5:f4:ee:ac:d1:0e:
                    b7:27:91:1e:ef:f0:76:90:e2:8f:92:0f:4e:36:87:
                    e0:3b:ce:b8:68:78:cd:8e:27:9b:33:b6:e6:79:8a:
                    a2:fa:1a:b4:82:9d:60:4b:56:4e:29:81:b8:af:11:
                    19:bb:ab:b5:c6:92:41:b5:98:a3:32:51:a6:10:03:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E7:09:A6:8D:B3:4E:AC:EF:B7:DA:40:B4:78:B7:EE:3E:57:EB:0F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/5-cJpo2zTqzvt9pAtHi37j5X6w8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.44.0-103.50.75.255
                  103.50.108.0-103.50.127.255
                  103.50.132.0-103.50.143.255
                  103.50.172.0-103.50.203.255
                  103.50.220.0-103.50.251.255

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:1b:7f:24:f7:1b:d1:12:de:a8:7e:86:e9:41:9d:b9:84:
         a3:f5:6d:f7:34:9c:a4:d6:be:2a:7c:83:6b:13:b4:f9:98:ee:
         8e:d2:60:bd:9c:da:5e:e9:ef:a4:54:21:be:2a:e5:fa:a8:5a:
         99:34:e0:50:c5:ae:43:e6:e2:ac:1c:6b:fb:a4:b1:6e:4a:7e:
         2d:3b:77:42:ed:60:41:63:ad:40:98:1e:7c:1f:e1:37:3b:57:
         aa:a2:50:6a:e1:21:2e:94:c2:56:7b:2d:71:ec:21:7b:09:f8:
         df:af:b1:e4:de:11:6b:76:d8:8c:07:72:00:88:3a:14:48:44:
         f6:e1:54:20:23:4a:a0:6d:5d:ab:04:b5:79:de:3c:bc:1a:8e:
         13:73:c8:57:f9:90:1b:6b:c5:93:65:a9:44:27:74:9c:02:6e:
         55:8c:b0:12:de:5d:a1:08:a6:96:e7:e6:f5:52:cb:8e:63:45:
         7c:bb:8e:e2:46:eb:89:e0:8d:20:43:a2:74:60:71:27:67:b6:
         66:62:cd:f2:6f:c8:d3:c6:94:4d:c0:a0:63:d6:38:4c:16:5f:
         22:a4:8d:33:b9:df:b2:c7:43:6f:09:f0:76:5c:a2:14:b7:20:
         5c:74:de:33:02:73:0d:a3:ea:a8:cb:1e:b1:3e:c5:62:55:8a:
         6b:3b:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----