Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
File:                     5EHyzPLl0-sWN-747oA8tT3R6v4.cer (raw, json)
Hash identifier:          X+bisiV2FdeVHsu9esrP701j7mGtIu8kWZftl/GvOYY=
Subject key identifier:   E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7770
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:47 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63641
                          IP: 103.74.124.0/22
                          IP: 120.137.0.0/17
                          IP: 123.49.128.0 -- 123.49.247.255
                          IP: 2405:6c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30576 (0x7770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:47 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:82:c7:64:18:24:ae:04:32:af:16:37:0e:
                    fe:ce:44:04:11:c0:bb:0d:0a:e0:b1:7a:a6:a9:11:
                    5f:e1:a7:f9:7c:b7:91:02:c9:12:43:88:35:5e:31:
                    50:a4:97:e7:d0:5f:62:7a:8a:ef:8b:e5:45:39:0f:
                    7e:4e:61:4f:6c:cf:4a:63:24:8d:10:08:8a:66:12:
                    11:bb:80:1e:8a:79:e1:43:48:92:d1:93:ae:4a:c2:
                    ae:96:24:7b:4c:66:1a:15:c7:5e:a8:c1:9f:76:99:
                    74:3d:27:b3:93:5d:d9:c9:05:41:b2:4d:b8:f9:10:
                    be:7f:c8:2a:2f:b8:9d:d7:00:2f:fb:ea:9d:ce:99:
                    8a:74:bf:09:49:54:55:3e:86:74:b2:56:ca:6f:4b:
                    9f:7d:07:38:39:1f:75:d6:19:c1:1c:ab:f3:d2:dd:
                    13:12:19:d0:70:13:18:15:93:6d:e6:3d:37:25:f4:
                    29:9b:6e:41:70:df:25:b4:4d:54:c9:86:8e:b6:c0:
                    14:e5:e9:77:62:56:39:7f:41:b6:ad:1d:10:bf:16:
                    bc:18:92:35:43:ee:71:ab:9a:f3:2d:d1:9b:42:33:
                    0f:b6:db:60:3f:70:b9:97:53:57:81:55:09:26:98:
                    6a:e0:90:4f:5b:41:a2:96:31:22:e7:64:c8:68:0a:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63641

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.124.0/22
                  120.137.0.0/17
                  123.49.128.0-123.49.247.255
                IPv6:
                  2405:6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:56:b2:82:47:a8:83:f3:18:41:e4:39:9c:dc:93:f9:3c:f7:
         a4:a2:d2:9a:a9:ab:f9:e6:dc:b2:3b:33:1d:00:ed:b5:b6:19:
         e7:31:02:84:0c:c1:05:f5:77:f0:4a:dd:e7:92:d7:5e:c4:35:
         c9:67:55:6b:28:9a:f4:9e:02:a5:b9:07:9d:20:29:59:42:9d:
         8f:7b:88:f4:74:2f:08:9e:30:4f:6f:26:2d:13:34:67:a3:73:
         ba:ee:7a:fe:71:16:07:b1:11:77:10:49:79:0f:b5:26:75:0c:
         ef:1c:90:42:b3:8b:6e:23:08:53:32:a9:9c:2d:ac:ac:ab:6c:
         93:7b:cb:68:aa:68:42:85:6c:6f:fd:81:ec:42:3f:88:b0:5b:
         95:26:93:c5:29:89:7f:1b:48:76:3a:d5:38:10:3a:7b:b8:d9:
         ab:dd:0a:01:9a:21:d5:d5:d2:80:d6:21:be:f6:f6:4b:eb:4e:
         b1:70:32:62:ac:36:0b:0f:2c:0c:7c:c5:14:21:db:ac:57:c0:
         dc:1e:c6:8a:05:dc:7b:cc:df:0f:52:cc:f8:6f:60:84:c9:89:
         83:24:fd:81:4f:ef:43:98:55:51:41:e8:e4:b1:84:b9:ad:81:
         04:cc:f7:61:6a:ee:57:d7:e4:9d:55:6d:e6:52:68:d0:ff:16:
         06:6e:45:54
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICd3AwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDM0N1oXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRTQ0MUYyQ0NGMkU1RDNFQjE2MzdFRUY4RUU4MDNDQjUzREQxRUFG
RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANJfgsdkGCSuBDKvFjcO
/s5EBBHAuw0K4LF6pqkRX+Gn+Xy3kQLJEkOINV4xUKSX59BfYnqK74vlRTkPfk5h
T2zPSmMkjRAIimYSEbuAHop54UNIktGTrkrCrpYke0xmGhXHXqjBn3aZdD0ns5Nd
2ckFQbJNuPkQvn/IKi+4ndcAL/vqnc6ZinS/CUlUVT6GdLJWym9Ln30HODkfddYZ
wRyr89LdExIZ0HATGBWTbeY9NyX0KZtuQXDfJbRNVMmGjrbAFOXpd2JWOX9Btq0d
EL8WvBiSNUPucaua8y3Rm0IzD7bbYD9wuZdTV4FVCSaYauCQT1tBopYxIudkyGgK
w5cCAwEAAaOCApQwggKQMB0GA1UdDgQWBBTkQfLM8uXT6xY37vjugDy1PdHq/jAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy
Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yMTIyLzVFSHl6UExsMC1zV04tNzQ3b0E4dFQzUjZ2NC5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPiZMEIGCCsGAQUFBwEHAQH/BDMwMTAg
BAIAATAaAwQCZ0p8AwQHeIkAMAwDBAd7MYADBAN7MfAwDQQCAAIwBwMFACQFBsAw
DQYJKoZIhvcNAQELBQADggEBABRWsoJHqIPzGEHkOZzck/k896Si0pqpq/nm3LI7
Mx0A7bW2GecxAoQMwQX1d/BK3eeS117ENclnVWsomvSeAqW5B50gKVlCnY97iPR0
LwieME9vJi0TNGejc7ruev5xFgexEXcQSXkPtSZ1DO8ckEKzi24jCFMyqZwtrKyr
bJN7y2iqaEKFbG/9gexCP4iwW5Umk8UpiX8bSHY61TgQOnu42avdCgGaIdXV0oDW
Ib729kvrTrFwMmKsNgsPLAx8xRQh26xXwNwexooF3HvM3w9SzPhvYITJiYMk/YFP
70OYVVFB6OSxhLmtgQTM92Fq7lfX5J1VbeZSaND/FgZuRVQ=
-----END CERTIFICATE-----