Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6YtfGSQmTbKod2gU9fXKkSc8ZvM.cer
File:                     6YtfGSQmTbKod2gU9fXKkSc8ZvM.cer (raw, json)
Hash identifier:          TSW81cPZ3kT+b0J3PN8m2Tq5ZUIL0pNWKeOUTYIl4CE=
Subject key identifier:   E9:8B:5F:19:24:26:4D:B2:A8:77:68:14:F5:F5:CA:91:27:3C:66:F3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/6YtfGSQmTbKod2gU9fXKkSc8ZvM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:42 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.118.200.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30650 (0x77ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:42 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E98B5F1924264DB2A8776814F5F5CA91273C66F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:65:ba:f2:58:d2:31:4b:61:5d:b2:30:4a:4d:
                    9d:9e:b3:26:26:1c:5a:22:a7:cf:c3:8e:20:38:31:
                    3e:e8:d7:07:eb:f3:d9:d0:1a:b3:ca:de:b7:ce:98:
                    a4:5f:ad:1d:c9:27:86:85:fd:ae:3e:87:f0:7a:32:
                    6f:65:68:b0:75:8b:ea:a1:bd:25:ef:55:c4:7c:00:
                    5c:2b:21:f9:e4:ab:58:2d:2a:2d:93:3c:7a:aa:d9:
                    34:53:87:14:b2:76:07:bc:51:78:c0:99:9e:1e:f7:
                    41:52:dd:11:09:ca:17:b9:6a:e8:fb:9c:14:bb:a7:
                    f9:de:da:26:40:de:56:bf:3b:75:00:ff:61:5c:43:
                    73:a9:e0:db:72:35:23:f8:ee:fb:e1:f3:3c:f2:34:
                    97:fa:1a:43:d1:69:17:4d:06:1f:07:03:3a:b2:81:
                    df:db:80:20:b6:49:14:23:35:70:a6:58:fa:26:9e:
                    e3:da:12:6b:8a:51:81:26:31:c6:be:07:e2:4d:5b:
                    cf:92:a8:0d:6f:8e:fa:e3:10:50:45:24:5f:21:18:
                    da:ca:b4:6d:e6:a9:3b:f9:9e:62:83:d6:94:0a:fc:
                    17:0c:d4:1e:56:cc:25:9a:3d:5b:cf:18:ae:df:ad:
                    f8:cf:46:90:85:1f:ed:ef:15:d9:79:b9:29:3c:a5:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8B:5F:19:24:26:4D:B2:A8:77:68:14:F5:F5:CA:91:27:3C:66:F3
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/6YtfGSQmTbKod2gU9fXKkSc8ZvM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:26:44:85:cb:88:2d:bf:f4:2d:dd:6a:c0:27:b6:a8:76:6b:
         8b:34:3d:8f:b5:3b:c3:90:b4:b6:56:b6:44:ce:93:5c:ca:6e:
         1f:b9:fa:23:c5:d0:0f:5f:07:ae:00:be:8e:a3:06:c0:74:7c:
         24:ea:50:df:bb:21:41:4f:26:ce:e3:cb:c8:fd:10:9f:a2:19:
         96:54:7f:8e:b6:96:9b:e6:1f:65:85:66:52:76:13:a5:71:38:
         4b:d3:32:65:d9:f4:aa:33:d3:37:b7:6d:4b:c8:77:09:88:b1:
         ed:90:b0:fe:dd:4a:b5:7d:30:81:2d:39:1e:68:71:a0:a2:9c:
         f4:ad:20:9a:dd:d4:b2:eb:fb:5d:31:5e:0b:ff:d8:a3:14:06:
         8a:58:ee:87:bb:bb:22:de:03:90:f6:9f:6e:5f:b5:55:e3:6d:
         93:20:d4:97:38:65:73:e5:e5:69:01:eb:ad:00:09:27:f4:73:
         58:7c:6b:9d:cb:6e:41:7d:76:8b:04:00:fa:57:39:74:e2:75:
         69:33:30:ce:23:37:be:32:57:e9:80:b6:96:c0:4d:1b:37:e4:
         77:ac:de:f9:04:93:42:66:c5:63:e3:b3:53:c7:08:db:e2:b0:
         e1:b4:e7:08:49:69:70:5b:7d:6f:73:a0:dc:46:f3:bc:60:bf:
         95:3b:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----