Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/878TaiVMVoD0R7jDQMizZT-Nf0M.cer
File:                     878TaiVMVoD0R7jDQMizZT-Nf0M.cer (raw, json)
Hash identifier:          NVcVFyOU+xShArL2/oXTzzUHrOrLIQceH98w+2NA0mk=
Subject key identifier:   F3:BF:13:6A:25:4C:56:80:F4:47:B8:C3:40:C8:B3:65:3F:8D:7F:43
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7949
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/878TaiVMVoD0R7jDQMizZT-Nf0M.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 05 Jul 2021 01:26:07 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 24415
                          IP: 60.200.0.0/16
                          IP: 2403:6880::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31049 (0x7949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jul  5 01:26:07 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F3BF136A254C5680F447B8C340C8B3653F8D7F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:d4:48:60:c7:cb:b1:9d:a9:2a:0b:36:f4:
                    7d:bf:9a:ff:ad:5e:00:2d:7f:b2:fc:13:39:3a:77:
                    90:f7:99:68:0a:e4:2d:fd:94:a6:3d:69:08:db:b1:
                    3d:b5:f7:9a:c5:18:95:54:d8:fb:e0:c2:9a:c9:0e:
                    dd:a1:c8:ee:4c:64:c4:02:27:bf:0a:a7:4d:26:28:
                    5a:38:71:eb:20:cc:62:e8:b5:97:63:76:f1:e3:97:
                    41:b4:97:64:1e:53:72:a5:41:01:8c:31:e5:9a:34:
                    22:c2:be:c9:17:b8:ab:a3:c9:b1:a8:f8:72:d1:d0:
                    09:b5:36:d6:09:45:50:0f:0d:85:69:7f:8b:1b:86:
                    f8:1b:13:2e:3d:43:bb:02:82:a2:fe:56:42:17:b9:
                    63:b1:3c:40:fd:d9:e2:36:4d:7a:22:3f:37:ba:9d:
                    e5:87:d0:09:e1:0e:e8:f7:68:e6:45:b7:9d:70:73:
                    c2:9d:12:e7:58:cb:2b:bd:e0:f2:6d:9f:3f:74:ec:
                    93:44:d0:0e:60:87:3b:75:f6:a5:34:e1:bc:d9:a2:
                    64:bb:2b:0a:d8:c6:23:91:df:34:4a:8f:43:82:1f:
                    03:62:6b:78:7c:59:99:9d:16:d5:c1:ae:be:77:0e:
                    bf:64:69:a8:c4:3d:e0:03:60:31:10:ce:26:d5:ed:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BF:13:6A:25:4C:56:80:F4:47:B8:C3:40:C8:B3:65:3F:8D:7F:43
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/878TaiVMVoD0R7jDQMizZT-Nf0M.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24415

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.200.0.0/16
                IPv6:
                  2403:6880::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:c8:b9:66:e4:29:66:65:82:c8:c8:27:4c:03:b8:f8:d4:58:
         96:2c:18:70:0c:f5:c5:a5:ca:af:cf:39:7f:44:23:7c:b4:aa:
         04:56:b6:f8:97:88:62:d5:3b:01:d6:4f:03:6d:91:02:a4:14:
         9f:0e:f9:de:18:aa:57:e2:ea:7b:35:46:e0:3c:2b:76:54:f7:
         2b:99:7f:f8:c8:d6:cb:df:7c:31:c6:82:d1:8e:9c:72:b5:1c:
         3d:84:b9:6c:8d:27:02:77:1f:a5:e9:9a:eb:38:af:c0:31:c7:
         73:ea:a4:be:8c:af:d9:9f:e3:cf:51:c3:10:8b:73:db:a0:64:
         0a:1c:69:10:35:43:81:92:ce:70:52:c4:68:36:4e:bb:12:7b:
         2d:02:df:ba:55:c9:47:76:30:02:f0:9a:36:a0:22:14:d2:bd:
         34:cb:38:17:2d:18:13:c5:5a:e8:f6:cd:7d:dd:6d:84:52:39:
         b6:0b:ab:5a:42:2e:d2:ac:7c:d2:e0:da:c9:b6:71:93:65:77:
         c3:fa:f3:83:32:7a:94:30:ad:73:e0:61:a6:17:37:5d:f9:00:
         b4:cb:67:e7:e7:1d:4d:40:26:9d:10:2d:0c:a2:f2:4b:bb:af:
         0f:ad:fa:b5:88:74:f5:d6:72:1f:42:50:b6:ba:a6:46:7b:57:
         34:1c:b1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----