Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
File:                     5dfBsMKY7RgzccnfpJ1bX83emE8.cer (raw, json)
Hash identifier:          1GA5xApDcyn2qC0wF26SLQtcE3c8y4j8K5zkSCxaSxY=
Subject key identifier:   E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7706
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:01:52 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59077
                          IP: 42.240.128.0/17
                          IP: 101.237.0.0/16
                          IP: 103.237.28.0/22
                          IP: 106.75.0.0/16
                          IP: 113.31.96.0/19
                          IP: 113.31.144.0 -- 113.31.255.255
                          IP: 117.50.0.0/16
                          IP: 163.53.164.0/22
                          IP: 2401:3480::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30470 (0x7706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:01:52 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5c:3f:aa:6f:6d:fa:92:b0:e9:b2:c9:4c:da:
                    b1:ea:04:88:b2:f7:c4:58:8d:f4:74:2c:43:ba:d5:
                    99:90:27:fa:ad:db:3a:16:56:a1:86:d9:1d:4f:54:
                    4e:dc:94:14:9b:64:d5:8e:d1:43:7b:e9:99:56:8d:
                    10:8a:86:56:a5:94:27:ed:e6:8e:e5:80:93:d5:58:
                    56:ea:37:42:6c:8e:30:35:97:9a:c6:4f:4e:83:67:
                    81:08:ec:e8:8c:93:de:4b:ab:ca:9f:07:d4:73:fd:
                    b9:7f:c2:10:b9:ad:b9:76:63:06:f3:c0:f3:0e:6e:
                    d9:fe:21:e4:5d:d0:d4:54:5d:e1:05:87:bb:41:32:
                    57:dc:de:74:89:d9:cc:f6:9c:ba:87:23:a0:ac:1a:
                    9a:28:d2:7f:56:79:15:9c:f1:0d:1c:a7:a4:84:62:
                    57:fc:59:22:5b:70:7c:1a:b0:a0:5a:54:81:cd:a9:
                    0f:2e:87:8d:df:03:3c:ac:8e:e6:28:f8:e7:9b:e6:
                    8a:1a:44:d5:12:86:a4:ab:ec:f3:42:ac:bd:dc:6c:
                    71:dc:93:04:fd:29:d4:f0:9d:44:cb:1d:d6:4f:0f:
                    1c:52:f4:d7:be:4b:30:5e:e1:ce:ab:24:04:11:a5:
                    ca:0c:b6:b3:0f:2c:4e:4f:5b:a0:f3:6c:af:df:c8:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59077

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.240.128.0/17
                  101.237.0.0/16
                  103.237.28.0/22
                  106.75.0.0/16
                  113.31.96.0/19
                  113.31.144.0-113.31.255.255
                  117.50.0.0/16
                  163.53.164.0/22
                IPv6:
                  2401:3480::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:6e:2d:c9:6d:04:7c:21:19:e9:0b:c0:75:b6:83:40:11:
         bf:7d:c6:b4:df:eb:87:3d:76:a9:42:07:44:e7:61:a4:9e:88:
         91:af:67:63:7f:20:bb:73:c5:58:59:9a:0a:69:6d:8e:58:dc:
         81:5c:a6:c3:28:32:ec:96:e9:ba:42:92:f5:e0:d0:be:9c:04:
         60:0d:18:52:60:aa:55:28:19:b2:46:fc:86:6c:84:b4:60:3d:
         ec:b9:98:25:1a:72:19:31:b6:4b:17:57:00:d1:5b:ce:bd:02:
         61:d8:a1:50:00:f7:32:ac:b5:8a:06:66:c4:fb:78:a9:a9:63:
         a5:44:4a:d5:48:83:ca:f8:88:4c:f8:45:63:a3:4b:3e:23:8b:
         d2:09:03:c5:ba:6d:c8:0c:3d:fd:66:02:cc:72:db:4f:02:06:
         22:27:5c:2e:f9:df:42:04:e9:4c:c2:44:e7:95:12:d4:6e:81:
         6c:66:1c:e2:05:b7:25:80:ef:d7:a9:14:1e:bb:05:03:49:8a:
         1c:6c:24:a5:c9:56:cf:20:4c:66:1b:22:1e:56:34:f8:b3:73:
         f9:e5:fe:73:49:52:aa:59:e6:59:17:26:b3:c6:22:2b:20:e3:
         e7:3a:61:0e:f4:90:8a:43:b1:d9:b3:62:a0:98:70:32:9d:3a:
         23:b2:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----