Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5MDA8ju3Pj2cLXTjhfTLEidyXqg.cer
File:                     5MDA8ju3Pj2cLXTjhfTLEidyXqg.cer (raw, json)
Hash identifier:          8kCsE6frCqN2JY4O3E02LbSSicujnap1721Fc3lQqtU=
Subject key identifier:   E4:C0:C0:F2:3B:B7:3E:3D:9C:2D:74:E3:85:F4:CB:12:27:72:5E:A8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       772C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/5MDA8ju3Pj2cLXTjhfTLEidyXqg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:41 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63580
                          IP: 103.61.104.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30508 (0x772c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:41 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E4C0C0F23BB73E3D9C2D74E385F4CB1227725EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:b4:4b:a4:cc:c5:7f:a4:77:10:26:cd:a3:
                    f8:dd:01:1a:71:31:ec:1f:96:8a:cd:08:b3:ee:9a:
                    1c:56:bd:10:b6:be:ac:d4:8f:ec:23:1e:bb:4e:4d:
                    ea:60:91:e2:40:dd:f3:06:38:ec:63:bb:2e:57:f8:
                    05:34:d8:af:9e:51:b3:40:cc:b3:fe:d9:07:9a:aa:
                    66:2d:51:13:b0:1a:14:3c:a2:d4:dd:87:50:8f:f1:
                    cd:cb:e2:72:13:18:e6:d4:c5:06:7c:54:18:8e:1f:
                    88:87:20:da:d2:b3:3c:34:1c:a7:98:f9:fd:3f:7e:
                    a2:af:ae:80:a5:9f:d2:04:58:32:e6:69:7e:d3:eb:
                    37:de:36:12:e2:33:ba:22:4f:50:ea:a8:18:f6:7d:
                    76:45:c7:a0:bd:a1:86:77:74:6c:15:bc:46:4c:1f:
                    72:8a:d6:eb:a1:3f:11:2b:84:34:e3:28:e8:27:84:
                    a4:59:d5:df:88:de:b7:77:27:71:3a:61:49:af:f4:
                    c2:0f:cd:1a:90:52:d9:8d:93:a4:6a:2f:10:1e:bd:
                    37:79:8e:e9:2b:64:ac:85:70:99:16:19:9d:7d:f3:
                    ef:d5:21:fc:e1:76:57:e4:0e:aa:ab:4e:55:74:84:
                    28:74:09:93:9a:c0:ca:62:e1:4d:18:f2:37:82:51:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C0:C0:F2:3B:B7:3E:3D:9C:2D:74:E3:85:F4:CB:12:27:72:5E:A8
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/5MDA8ju3Pj2cLXTjhfTLEidyXqg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63580

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:01:8b:e4:ca:c8:4b:82:1f:6f:3a:ab:d4:c7:1d:1d:f4:
         ef:96:d1:c0:43:3d:91:a9:3b:b8:e6:5a:9f:90:62:7b:e1:1b:
         a8:f6:ad:db:f5:c5:32:5e:5d:04:db:c1:13:1e:7b:ee:4e:0a:
         e5:71:b6:39:e8:01:52:c3:a1:ca:fc:cf:ea:79:69:34:0d:1c:
         39:53:18:d6:fc:ae:5d:4c:02:f2:c5:11:56:15:04:d9:3d:9f:
         8a:b8:20:b9:84:f4:92:92:24:c0:61:9f:dd:e0:bc:2c:2a:d1:
         ba:e0:9d:40:d3:fd:f7:a7:7f:bd:c3:96:eb:b1:5c:ed:be:ad:
         09:3c:b0:9b:d0:04:c8:58:dd:41:49:b2:2e:15:67:ec:1d:07:
         cc:eb:4a:ef:06:e3:ba:a9:04:4e:b5:3b:f3:77:69:ac:91:32:
         b8:2a:a7:48:29:58:e6:29:6d:bf:ac:91:fd:6b:be:0f:29:67:
         d1:6f:d5:09:e7:6d:4e:22:5f:06:d0:0e:82:30:c3:95:0c:c5:
         68:0a:27:88:73:f4:b4:67:ef:b5:5d:ab:7c:27:b3:46:35:fb:
         b9:94:b7:27:19:41:d4:b5:62:46:f0:1c:f4:1d:b9:fc:72:c8:
         3d:d7:58:18:71:c0:67:27:53:0c:55:c8:7b:ad:c3:87:6b:f4:
         8e:48:e6:30
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgICdywwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDI0MVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRTRDMEMwRjIzQkI3M0UzRDlDMkQ3NEUzODVGNENCMTIyNzcyNUVB
ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMEhtEukzMV/pHcQJs2j
+N0BGnEx7B+Wis0Is+6aHFa9ELa+rNSP7CMeu05N6mCR4kDd8wY47GO7Llf4BTTY
r55Rs0DMs/7ZB5qqZi1RE7AaFDyi1N2HUI/xzcvichMY5tTFBnxUGI4fiIcg2tKz
PDQcp5j5/T9+oq+ugKWf0gRYMuZpftPrN942EuIzuiJPUOqoGPZ9dkXHoL2hhnd0
bBW8RkwfcorW66E/ESuENOMo6CeEpFnV34jet3cncTphSa/0wg/NGpBS2Y2TpGov
EB69N3mO6StkrIVwmRYZnX3z79Uh/OF2V+QOqqtOVXSEKHQJk5rAymLhTRjyN4JR
tuECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTkwMDyO7c+PZwtdOOF9MsSJ3JeqDAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM2
My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yMzYzLzVNREE4anUzUGoyY0xYVGpoZlRMRWlkeVhxZy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPhcMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZz1oMA0GCSqGSIb3DQEBCwUAA4IBAQBMSwGL5MrIS4Ifbzqr1Mcd
HfTvltHAQz2RqTu45lqfkGJ74Ruo9q3b9cUyXl0E28ETHnvuTgrlcbY56AFSw6HK
/M/qeWk0DRw5UxjW/K5dTALyxRFWFQTZPZ+KuCC5hPSSkiTAYZ/d4LwsKtG64J1A
0/33p3+9w5brsVztvq0JPLCb0ATIWN1BSbIuFWfsHQfM60rvBuO6qQROtTvzd2ms
kTK4KqdIKVjmKW2/rJH9a74PKWfRb9UJ521OIl8G0A6CMMOVDMVoCieIc/S0Z++1
Xat8J7NGNfu5lLcnGUHUtWJG8Bz0Hbn8csg911gYccBnJ1MMVch7rcOHa/SOSOYw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org