Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.cer
File:                     8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.cer (raw, json)
Hash identifier:          3H9agf9DbW3pBKarjkApbF9VupiTw4sjmKkqFv/IscI=
Subject key identifier:   F2:F3:39:C0:B1:DF:91:1D:22:4E:2D:5E:4A:42:F6:2A:EE:0A:74:9F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:06:02 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 38344
                          IP: 103.9.152.0/22
                          IP: 2403:9e40::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30666 (0x77ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:06:02 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F2F339C0B1DF911D224E2D5E4A42F62AEE0A749F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:e4:3a:5a:5c:76:64:f3:eb:98:d2:ac:d6:
                    15:1d:6e:89:c9:0d:ca:73:f1:36:73:7e:be:f5:65:
                    39:6c:46:05:14:72:ed:61:bc:c4:a6:c9:b5:7e:e1:
                    60:ae:5a:8d:27:5a:9c:57:18:bd:65:b0:1b:b0:50:
                    ca:4b:c7:1b:e8:e7:38:2f:34:fa:fc:e8:5b:23:ff:
                    e7:80:30:8a:dd:e7:c5:cb:59:d4:b9:96:33:b8:04:
                    7b:6d:e0:2d:93:39:a4:96:b6:78:e1:af:18:74:f2:
                    72:b5:4b:91:61:9a:47:94:45:bc:66:5f:91:d6:ad:
                    c5:fb:d0:85:fe:af:89:8f:8a:4d:d5:1f:88:a1:d3:
                    88:1e:86:55:58:1b:7f:79:5f:5b:46:01:13:cc:08:
                    77:36:94:16:96:69:e8:8b:e6:8e:25:17:4a:a8:b4:
                    db:1c:0b:48:6a:42:90:68:cb:3f:81:2a:09:2f:9e:
                    62:56:94:c8:28:3a:0b:95:94:94:bf:1a:5d:1f:e3:
                    c9:a0:ed:07:3b:c0:57:21:91:7e:0a:1e:03:e8:99:
                    34:1f:9c:be:70:0b:63:e0:2d:19:b1:23:69:a5:9d:
                    f0:67:5e:81:03:c8:96:7b:86:e0:6f:9c:b1:f2:00:
                    c0:95:7b:72:a8:ab:82:39:c9:11:ff:4c:a8:29:e0:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F3:39:C0:B1:DF:91:1D:22:4E:2D:5E:4A:42:F6:2A:EE:0A:74:9F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38344

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.152.0/22
                IPv6:
                  2403:9e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:27:66:d3:49:79:1f:46:53:d6:fb:d4:5b:f9:80:5f:ae:
         eb:6b:80:26:cc:85:17:c5:37:7f:97:44:47:9a:d6:2c:2a:41:
         3f:59:dc:45:ae:ea:4e:4a:60:60:4f:36:a3:d5:59:e8:a0:16:
         37:4f:e9:01:de:ac:2b:7e:13:6c:a8:aa:ad:d3:79:9e:cc:77:
         53:9d:a5:c5:d6:ae:da:64:88:ac:c6:4c:12:78:64:18:4c:27:
         a9:cd:7f:bf:e9:f9:46:8d:8a:61:48:7e:73:9a:93:79:43:d0:
         9b:92:7e:63:9f:d5:6a:57:f4:b9:39:8a:80:45:34:35:06:88:
         73:0b:4e:7c:e6:c8:68:54:25:6f:4a:6c:ae:b6:3c:8f:fc:03:
         ed:92:da:9d:ac:d1:61:3f:b4:86:79:f6:38:58:33:95:a0:26:
         33:9f:71:1c:25:da:ea:d8:4b:db:91:4c:c5:9e:3a:1e:cd:b0:
         db:ed:f8:4e:4e:28:be:68:6c:a7:27:b7:1d:db:3c:7b:84:10:
         35:b3:0e:24:14:ad:e8:a2:bd:fe:38:6d:d1:e4:e9:2c:b2:84:
         24:9c:67:75:b5:4f:7c:49:ef:c9:49:86:b0:d0:20:7f:10:a7:
         5a:d3:ae:e2:51:4b:b0:66:ef:ba:81:9d:55:74:ef:0a:9f:ff:
         62:64:dd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----