Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7Ep2VvcOFEa78JDwx6YystxMN3Y.cer
File:                     7Ep2VvcOFEa78JDwx6YystxMN3Y.cer (raw, json)
Hash identifier:          7H7KHq3j8KxYMS1lLJFr7Ssrf57zoG2SivGKzdR5qS4=
Subject key identifier:   EC:4A:76:56:F7:0E:14:46:BB:F0:90:F0:C7:A6:32:B2:DC:4C:37:76
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/7Ep2VvcOFEa78JDwx6YystxMN3Y.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 11 Nov 2021 20:15:45 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 38373
                          IP: 101.54.0.0/16
                          IP: 119.80.0.0/19
                          IP: 119.80.48.0 -- 119.80.191.255
                          IP: 119.80.204.0 -- 119.80.239.255
                          IP: 119.80.244.0 -- 119.80.255.255
                          IP: 2400:5580::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31829 (0x7c55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 11 20:15:45 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=EC4A7656F70E1446BBF090F0C7A632B2DC4C3776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9b:86:77:28:a3:3d:c6:0e:b9:c6:f2:83:91:
                    fb:30:fc:a2:78:0f:f0:a5:5a:d1:1a:08:79:ff:49:
                    a5:60:07:71:d1:d9:91:58:49:4c:26:d9:0c:ef:51:
                    61:48:93:f9:4f:5e:65:c9:db:31:3a:9b:33:db:18:
                    b8:e5:c7:bc:c9:15:6c:73:a8:08:84:54:1f:54:41:
                    ff:c2:31:97:7a:c1:c3:dd:c8:0a:12:cc:c7:33:09:
                    ae:78:f4:ab:08:48:32:fc:34:b0:61:7d:45:12:c7:
                    a4:d1:b4:1f:c7:ce:fc:76:bb:5b:4e:7a:be:29:5e:
                    9b:1a:a8:0e:9d:e6:da:8a:db:ad:c9:1a:c7:87:de:
                    22:e6:e9:66:b2:ef:2e:7a:cc:e7:74:2f:76:72:2a:
                    c1:dd:f8:ce:d8:44:6a:25:fa:c1:30:d5:32:fa:00:
                    f6:5c:b5:9a:d3:eb:06:4f:ad:ec:4d:08:cf:b7:06:
                    b7:57:9d:0f:1d:79:77:dc:fc:dc:d9:a4:25:d0:45:
                    02:18:54:bf:b7:43:7c:1e:51:e6:91:d4:fc:cc:5e:
                    f9:af:bf:7b:d7:d6:5c:c3:44:cf:9c:eb:a1:04:33:
                    e7:53:a6:c7:d4:f6:97:16:d7:3e:ab:a8:02:ec:a1:
                    7c:cc:77:de:88:61:a5:31:90:a0:b1:f4:b2:da:1c:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4A:76:56:F7:0E:14:46:BB:F0:90:F0:C7:A6:32:B2:DC:4C:37:76
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/7Ep2VvcOFEa78JDwx6YystxMN3Y.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38373

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.54.0.0/16
                  119.80.0.0/19
                  119.80.48.0-119.80.191.255
                  119.80.204.0-119.80.239.255
                  119.80.244.0-119.80.255.255
                IPv6:
                  2400:5580::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:f5:3f:35:3e:98:cb:b0:ea:e8:17:d2:a4:af:9c:e6:01:4a:
         4b:58:44:fa:df:e3:2a:37:2a:30:f7:92:58:79:6c:0b:b5:34:
         ea:1d:58:06:81:3a:53:13:fe:64:f2:1d:d9:ac:43:24:41:6c:
         63:55:ac:e1:2b:57:bc:9c:28:bd:2c:d8:e8:99:ef:25:ac:0e:
         17:4f:9b:90:65:d5:2c:df:8b:b3:84:85:e7:91:31:f0:fb:bd:
         fa:5d:fe:72:ec:dc:f1:1c:e5:8b:4d:56:df:95:8c:73:a6:87:
         bf:79:a7:db:f8:ad:d5:3d:c3:56:e1:08:62:df:da:97:cc:25:
         91:c6:c7:d0:c6:96:d7:73:31:e9:9d:ec:a7:23:29:f6:17:f8:
         0a:1f:ba:82:dd:b1:ff:a3:c2:08:76:72:45:0d:35:90:ad:b7:
         b4:b4:69:2e:e0:64:ff:92:c8:dc:99:71:d5:11:9c:17:e1:7d:
         ac:78:a7:73:b4:63:83:ad:2d:9d:5c:f9:3a:96:64:b9:be:71:
         23:11:b8:37:bc:41:70:20:5e:c2:70:19:af:66:62:83:dc:6b:
         c8:5d:ee:72:96:80:af:77:95:4f:bb:35:5d:41:5a:31:4c:0d:
         a1:91:4b:ca:c0:1a:f5:a0:3a:c2:a5:6e:9f:e3:f1:8f:2b:63:
         2c:2e:21:b1
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgICfFUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMTExMTIwMTU0NVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRUM0QTc2NTZGNzBFMTQ0NkJCRjA5MEYwQzdBNjMyQjJEQzRDMzc3
NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANabhncooz3GDrnG8oOR
+zD8ongP8KVa0RoIef9JpWAHcdHZkVhJTCbZDO9RYUiT+U9eZcnbMTqbM9sYuOXH
vMkVbHOoCIRUH1RB/8Ixl3rBw93IChLMxzMJrnj0qwhIMvw0sGF9RRLHpNG0H8fO
/Ha7W056vilemxqoDp3m2orbrckax4feIubpZrLvLnrM53QvdnIqwd34zthEaiX6
wTDVMvoA9ly1mtPrBk+t7E0Iz7cGt1edDx15d9z83NmkJdBFAhhUv7dDfB5R5pHU
/Mxe+a+/e9fWXMNEz5zroQQz51Omx9T2lxbXPquoAuyhfMx33ohhpTGQoLH0stoc
BlcCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBTsSnZW9w4URrvwkPDHpjKy3Ew3djAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzMyMi83RXAyVnZjT0ZFYTc4SkR3eDZZeXN0eE1OM1kubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCV5TBcBggrBgEFBQcBBwEB/wRNMEswOgQC
AAEwNAMDAGU2AwQFd1AAMAwDBAR3UDADBAZ3UIAwDAMEAndQzAMEBHdQ4DALAwQC
d1D0AwMAd1AwDQQCAAIwBwMFACQAVYAwDQYJKoZIhvcNAQELBQADggEBACH1PzU+
mMuw6ugX0qSvnOYBSktYRPrf4yo3KjD3klh5bAu1NOodWAaBOlMT/mTyHdmsQyRB
bGNVrOErV7ycKL0s2OiZ7yWsDhdPm5Bl1Szfi7OEheeRMfD7vfpd/nLs3PEc5YtN
Vt+VjHOmh795p9v4rdU9w1bhCGLf2pfMJZHGx9DGltdzMemd7KcjKfYX+AofuoLd
sf+jwgh2ckUNNZCtt7S0aS7gZP+SyNyZcdURnBfhfax4p3O0Y4OtLZ1c+TqWZLm+
cSMRuDe8QXAgXsJwGa9mYoPca8hd7nKWgK93lU+7NV1BWjFMDaGRS8rAGvWgOsKl
bp/j8Y8rYywuIbE=
-----END CERTIFICATE-----