Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/929wL77voMdpcDsOFuBPwdh_Ck4.cer
File:                     929wL77voMdpcDsOFuBPwdh_Ck4.cer (raw, json)
Hash identifier:          ZbGXyj5CNt6tG/as1o/JJS3QlkuMN6U0ZnuP7L5HELo=
Subject key identifier:   F7:6F:70:2F:BE:EF:A0:C7:69:70:3B:0E:16:E0:4F:C1:D8:7F:0A:4E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/929wL77voMdpcDsOFuBPwdh_Ck4.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:16 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.100.68.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30632 (0x77a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:16 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F76F702FBEEFA0C769703B0E16E04FC1D87F0A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:26:38:91:4d:03:a0:a0:b2:dc:d5:a6:9d:
                    19:5a:fb:ec:4a:3e:ce:df:9e:73:be:e3:dd:ff:c4:
                    49:2f:3f:61:69:aa:46:fc:6d:03:bd:59:84:ce:0d:
                    b4:02:d0:73:01:89:28:e8:cc:72:de:04:aa:6e:34:
                    2f:75:18:8b:fc:8c:a3:ff:24:6d:5a:c0:c0:4b:8c:
                    10:86:ca:93:60:58:c4:73:0e:2b:41:0a:e6:41:36:
                    02:2c:f9:b6:26:ec:83:3c:ab:5d:57:a4:0d:4e:e5:
                    58:99:9a:5d:83:15:43:62:77:65:ac:e3:3d:ec:0a:
                    e3:cb:ff:b8:03:43:cb:1d:63:52:f8:a3:68:27:ee:
                    40:be:cb:21:82:47:ad:b8:b2:7f:ec:ce:2c:9a:aa:
                    7b:7f:3d:c1:2a:da:b5:60:d9:41:26:81:a0:8c:6b:
                    b6:0d:1c:19:1f:ca:b0:cb:e1:c1:22:a9:38:78:ce:
                    d7:e3:ef:03:91:02:c8:ac:39:48:66:17:5f:0f:84:
                    c6:19:c4:bf:fe:65:8f:22:da:b0:1b:a1:58:47:6f:
                    75:a1:95:e6:bc:55:eb:d8:dd:91:61:cb:a4:3d:a8:
                    75:6c:d9:17:37:16:ba:e9:58:c1:b8:3d:fe:8d:ec:
                    c7:0b:38:76:35:f3:3e:62:b7:35:40:28:64:fe:dd:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:70:2F:BE:EF:A0:C7:69:70:3B:0E:16:E0:4F:C1:D8:7F:0A:4E
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/929wL77voMdpcDsOFuBPwdh_Ck4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:16:c2:84:eb:2d:d0:19:a6:78:a8:6b:5a:22:7a:22:08:
         7c:e8:6d:88:1d:ef:bb:b4:bb:ea:06:68:99:7f:1d:a3:71:a4:
         de:ce:da:c8:34:4b:2d:c5:a2:b1:85:ca:60:23:69:1a:75:ae:
         1e:1e:b5:cc:1b:9f:ca:20:11:92:66:58:c9:c7:5d:fc:49:92:
         d1:99:5e:ef:fb:74:3b:f6:86:2c:d8:09:b4:85:86:03:5e:bb:
         73:57:85:a8:c4:89:af:44:4f:75:13:06:a1:42:5f:fb:78:84:
         86:da:d2:ac:fe:d0:b2:0d:59:d3:41:2e:d9:ca:da:98:87:dd:
         1b:4c:20:7b:bd:1a:d9:12:e1:58:a5:0f:a0:19:c1:e6:83:52:
         da:4e:9a:ba:46:fc:6b:dc:a1:1c:73:63:ac:de:70:e7:52:58:
         99:a3:d4:ad:65:df:46:ba:71:6e:38:c9:dc:08:a4:93:f9:09:
         62:5f:18:d4:19:a9:d4:bc:ef:eb:04:96:9f:4e:c0:90:cf:39:
         ab:e9:d2:42:ff:7f:45:dd:6b:90:83:bf:49:a6:08:4d:6e:12:
         2e:c0:cd:ba:6a:bd:f1:97:90:d2:ce:3b:83:28:c3:5e:c8:b5:
         73:7f:df:04:6f:7c:59:9b:a0:31:69:bd:a5:c8:ba:d8:a1:a5:
         be:f2:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----