Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7Ckse1qEhL9DPHAQul-1dyqmI0g.cer
File:                     7Ckse1qEhL9DPHAQul-1dyqmI0g.cer (raw, json)
Hash identifier:          SH2ySmY1mgJv2REnsRosuD3dTqHuLIUeaOTSKLuPSuc=
Subject key identifier:   EC:29:2C:7B:5A:84:84:BF:43:3C:70:10:BA:5F:B5:77:2A:A6:23:48
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/538/7Ckse1qEhL9DPHAQul-1dyqmI0g.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/538/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 07 Jun 2021 20:27:56 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 37943
                          AS: 45092
                          IP: 103.31.160.0/22
                          IP: 122.114.0.0/16
                          IP: 182.236.128.0/17
                          IP: 2400:a480::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30853 (0x7885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  7 20:27:56 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=EC292C7B5A8484BF433C7010BA5FB5772AA62348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:27:3a:95:1b:22:d9:9d:72:d5:40:6f:c1:
                    58:b4:e6:c2:49:d5:46:a2:5b:76:df:98:1d:2f:ea:
                    7a:a0:7c:f6:9c:a1:32:f2:71:08:cf:fd:23:56:0f:
                    53:1c:b0:b8:a8:91:89:ea:12:7a:dc:75:60:62:64:
                    60:1f:a0:5d:ee:79:2c:dc:27:35:12:fe:5f:e8:a8:
                    31:31:1f:2f:77:34:54:2a:87:26:07:d9:43:c5:1e:
                    ef:e4:d9:44:47:21:ac:a3:d4:75:d6:ab:7d:71:dd:
                    5c:44:42:e4:f0:73:28:8b:2f:12:42:d1:fe:cd:16:
                    d4:f0:11:d3:f2:82:ef:ba:ab:65:58:70:54:68:c1:
                    eb:22:cf:d4:01:23:56:2c:fc:a4:73:c8:97:f8:c9:
                    e6:c4:76:86:02:a5:52:ed:a0:68:28:13:b4:1d:ca:
                    6d:68:ec:89:b1:16:aa:3d:7c:ec:58:6d:3d:ac:fb:
                    e2:26:f4:50:98:8a:de:49:d5:e3:2b:c0:fe:19:8b:
                    04:fb:6b:fe:e7:5a:32:0f:1e:1e:0c:22:54:59:a8:
                    c1:89:75:57:11:5c:72:3f:fa:fc:51:e7:46:91:63:
                    66:03:1b:86:0d:3d:a9:d4:24:d1:f6:67:75:24:fd:
                    51:35:f9:4b:2b:47:3b:e3:e4:ba:36:52:a3:92:07:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:29:2C:7B:5A:84:84:BF:43:3C:70:10:BA:5F:B5:77:2A:A6:23:48
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/538/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/538/7Ckse1qEhL9DPHAQul-1dyqmI0g.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37943
                  45092

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.160.0/22
                  122.114.0.0/16
                  182.236.128.0/17
                IPv6:
                  2400:a480::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:c8:e0:51:9e:3e:86:ec:00:f7:f4:7b:00:b5:e2:23:60:15:
         f9:a5:a5:83:d7:58:f2:8a:6c:3a:32:b6:c8:e1:8f:28:d5:0d:
         a2:7c:34:1b:0a:b5:58:5f:ed:46:96:30:06:9b:06:e3:61:d1:
         df:c9:53:4a:e1:d6:62:0a:e6:a8:0c:e7:64:f6:ad:aa:57:0b:
         ee:ac:0b:01:2f:37:01:0d:86:0f:8a:98:b0:85:1c:35:8b:f2:
         57:c7:d4:3a:47:20:e4:f1:de:ec:49:2b:1c:29:1f:af:6e:f1:
         a2:7e:73:9d:97:7e:ce:f1:47:e2:61:e4:75:a5:56:39:7b:36:
         df:5d:0d:e9:d3:28:ba:17:25:0e:0a:07:ef:61:9c:86:37:c4:
         99:51:5e:18:e3:6e:67:5e:cc:8f:e4:d4:08:3b:61:da:d8:f6:
         9e:52:c5:57:c3:c1:91:31:f0:1c:b8:fa:5a:4d:ef:95:45:0d:
         b6:ad:68:bf:41:47:e3:37:ad:6b:3c:c4:a8:81:f5:f6:b4:7f:
         9b:b4:64:96:c9:91:42:4e:a8:69:46:bd:ac:6f:82:30:35:61:
         c9:d3:ec:da:c2:79:3f:c4:45:ea:77:f4:f5:b8:eb:3f:3d:9f:
         a3:75:7a:af:c9:24:4b:2b:03:da:7e:1b:23:0c:bd:47:1d:66:
         26:b4:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----