Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5xtQq87zzsP3Elw6TezBPYqFBpE.cer
File:                     5xtQq87zzsP3Elw6TezBPYqFBpE.cer (raw, json)
Hash identifier:          oKqpTg79e2oNZTCP0rs1297TMz15YBAX8pghtHmHkLU=
Subject key identifier:   E7:1B:50:AB:CE:F3:CE:C3:F7:12:5C:3A:4D:EC:C1:3D:8A:85:06:91
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7EC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/5xtQq87zzsP3Elw6TezBPYqFBpE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 24 Feb 2022 02:22:07 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63679
                          IP: 103.208.44.0/22
                          IP: 2406:e680::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32455 (0x7ec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb 24 02:22:07 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E71B50ABCEF3CEC3F7125C3A4DECC13D8A850691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:7d:48:fe:da:d0:07:80:dd:f6:ef:06:58:
                    ac:1d:a1:ea:e6:18:58:f4:42:9c:38:4a:e9:f5:e4:
                    0f:ba:86:4e:d5:3c:00:ae:a6:56:0f:73:e3:41:6c:
                    13:19:de:9d:32:c6:f6:b3:aa:8c:8e:2d:55:cd:76:
                    69:3c:d9:4a:a6:79:6b:d9:70:a4:7f:71:a8:32:9d:
                    29:67:ca:fe:13:f6:66:ea:27:a0:9a:3a:46:12:3a:
                    6c:37:d7:aa:47:77:f8:37:a3:b0:c3:a5:ca:83:22:
                    87:76:38:a6:39:21:15:16:80:6f:12:7f:d0:0f:ee:
                    45:0c:4b:48:e8:0f:1c:50:df:12:21:64:fd:11:ec:
                    13:6d:54:60:5c:7b:45:c8:0b:97:02:72:74:6b:07:
                    7f:95:82:43:35:de:28:98:97:d4:00:5a:c0:9b:7e:
                    53:06:c7:98:01:48:95:4d:62:22:9f:c8:07:16:ff:
                    01:c5:d8:87:2f:15:2c:a4:80:ba:d4:80:23:41:10:
                    82:9f:0f:0f:ad:c8:56:ca:34:32:f2:bc:3b:75:ae:
                    30:92:36:75:d3:b0:b7:6d:eb:58:f6:fa:e5:a9:4d:
                    99:cc:13:6c:69:26:5a:85:64:ca:03:0d:a5:f7:89:
                    4d:f2:5a:d9:5f:34:ec:e7:25:be:33:fa:45:58:ec:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:50:AB:CE:F3:CE:C3:F7:12:5C:3A:4D:EC:C1:3D:8A:85:06:91
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/5xtQq87zzsP3Elw6TezBPYqFBpE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63679

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.44.0/22
                IPv6:
                  2406:e680::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:26:5e:12:0e:44:84:9c:d2:45:6a:a0:2d:ba:68:07:9c:
         82:6e:17:93:b8:e1:b7:f1:ec:d0:7e:29:5a:7b:1e:d6:7e:92:
         c6:c3:c3:0d:57:fc:55:1f:b7:35:84:0f:7f:ff:94:e0:5f:5f:
         7c:c2:ce:7d:e8:c3:70:18:eb:44:77:60:2b:52:da:c5:76:11:
         43:60:96:c9:c9:f2:9c:e2:8b:55:13:6e:0e:70:71:db:ef:e2:
         a3:26:f7:b7:40:05:07:a5:d2:3c:bd:87:ce:d3:1b:26:da:6c:
         a5:f2:b7:4e:6b:40:a2:49:7a:7d:26:37:36:00:6e:14:23:ec:
         dc:45:f5:d0:29:56:2f:79:a8:61:68:d9:cb:42:66:e7:15:b0:
         12:23:83:9d:84:2b:0d:65:99:b7:e9:76:90:e8:f2:7a:11:86:
         b4:67:93:0a:0b:73:c8:ac:f5:67:9f:1d:f5:0e:2b:7e:6d:cc:
         01:7a:4f:9f:a8:7a:3c:c4:36:84:b6:66:98:7d:d3:90:6e:33:
         0a:e6:c2:4a:a0:2e:40:cc:ec:c0:2d:c7:55:32:ee:eb:56:c2:
         d5:7c:f2:1c:c1:01:ff:a4:59:1a:76:dc:3a:74:46:95:4c:5a:
         af:f4:0c:53:0e:c2:23:a7:5a:e6:b3:d7:0f:06:92:b1:f2:f6:
         2f:c0:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----