Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65BHE8WSPONe5Mw_67Reu3lr1nM.cer
File:                     65BHE8WSPONe5Mw_67Reu3lr1nM.cer (raw, json)
Hash identifier:          pbbNzooh+GWLPjwHUo/F5luttwTz4xZqq67bJIQfsec=
Subject key identifier:   EB:90:47:13:C5:92:3C:E3:5E:E4:CC:3F:EB:B4:5E:BB:79:6B:D6:73
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/65BHE8WSPONe5Mw_67Reu3lr1nM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 16 Nov 2021 19:46:22 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 17429
                          IP: 1.88.0.0/14
                          IP: 43.247.236.0/22
                          IP: 58.30.0.0/15
                          IP: 101.240.0.0/14
                          IP: 103.238.48.0/22
                          IP: 180.77.0.0 -- 180.79.255.255
                          IP: 218.246.96.0/19
                          IP: 2403:4300::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31864 (0x7c78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 16 19:46:22 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=EB904713C5923CE35EE4CC3FEBB45EBB796BD673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:bc:51:a5:7b:1b:b8:8d:ea:6a:9e:95:cb:
                    d0:da:82:91:ae:c8:c1:2c:2d:84:a2:d0:8b:a0:37:
                    75:eb:b7:85:e6:97:08:cc:21:74:bc:97:e2:82:e0:
                    ff:f9:b9:1c:8f:33:e5:83:93:89:73:e6:c8:a8:54:
                    b8:20:fd:d8:eb:b3:b5:21:62:70:b2:b1:50:38:06:
                    0e:5d:67:0c:e8:3b:2f:d3:7c:00:c9:ed:c7:91:b7:
                    79:e5:89:1a:55:ca:57:af:45:ae:f5:15:10:2c:b2:
                    e5:c8:d8:5b:80:25:42:d5:cf:75:ab:0b:8e:67:ae:
                    1f:52:6b:96:41:58:77:22:72:5f:ec:11:a0:78:cf:
                    a0:f1:11:87:2b:7d:17:d2:fb:7d:6c:65:0a:2b:4b:
                    3b:2b:3b:00:c4:44:06:f0:cf:33:11:21:3b:5e:4f:
                    7c:a0:dc:8b:9f:ee:d2:d9:91:d9:2d:38:b7:a9:7c:
                    f0:47:20:e5:c8:0d:61:4c:d8:5b:4d:bb:a5:5d:a3:
                    fd:c9:77:ab:0d:48:d6:40:22:eb:5d:45:6b:f7:37:
                    3e:f5:fa:59:47:b2:0a:56:02:ae:52:59:d2:63:b7:
                    da:a5:63:0d:e3:57:cf:5a:ce:e1:34:f6:d6:39:b5:
                    02:3e:df:6c:ac:2e:96:18:ce:6d:85:8f:33:8e:4a:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:90:47:13:C5:92:3C:E3:5E:E4:CC:3F:EB:B4:5E:BB:79:6B:D6:73
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/65BHE8WSPONe5Mw_67Reu3lr1nM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17429

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.88.0.0/14
                  43.247.236.0/22
                  58.30.0.0/15
                  101.240.0.0/14
                  103.238.48.0/22
                  180.77.0.0-180.79.255.255
                  218.246.96.0/19
                IPv6:
                  2403:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:ae:91:06:87:44:e4:93:09:53:0f:f0:ed:06:34:5b:98:94:
         ae:82:cb:bc:84:23:38:5f:d5:58:5c:fb:ca:7a:aa:09:ca:7d:
         14:af:6a:7f:73:1a:1a:32:c5:f0:94:a0:60:b6:30:8d:ae:dc:
         db:73:1c:cf:09:4b:00:fc:d1:8f:2e:9c:ab:64:4e:7e:60:59:
         71:7f:d8:df:62:24:9b:ae:d2:e4:b0:16:fc:b7:2f:79:9c:99:
         5c:c0:57:a5:e3:e5:ce:74:90:72:a2:d3:60:fa:ad:8f:5c:b5:
         11:12:77:b9:2a:7e:9f:a3:fa:54:86:10:48:26:af:fb:13:9a:
         0f:e6:e3:e7:71:20:a5:b3:2d:c9:b8:46:93:9f:cf:41:e0:fb:
         fb:b5:e5:25:dd:39:2a:dc:ec:b4:30:8f:39:82:ad:9d:6c:44:
         a0:ba:7c:d9:81:48:25:e3:32:5e:8f:25:03:c1:d2:ce:ae:33:
         07:d3:6d:8e:7f:d7:4f:a9:27:23:4f:45:5e:1b:75:ee:08:6f:
         f0:2b:9e:ef:c9:3a:25:5b:f3:d5:7b:48:ae:8b:5f:c1:40:60:
         63:da:88:23:7e:c3:80:c2:f0:d0:38:40:50:47:e8:bc:06:b8:
         9f:17:83:ae:b1:2f:a8:79:41:c6:8a:79:30:12:72:89:88:51:
         26:67:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----