Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/95JZxaQlhnHUx-2F2RruTVxFqlk.cer
File:                     95JZxaQlhnHUx-2F2RruTVxFqlk.cer (raw, json)
Hash identifier:          8d71xuGuw7hHYBLIgGTQ+5NpcK58tKPt0FAXjqRYRpU=
Subject key identifier:   F7:92:59:C5:A4:25:86:71:D4:C7:ED:85:D9:1A:EE:4D:5C:45:AA:59
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       945B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/95JZxaQlhnHUx-2F2RruTVxFqlk.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 17 Feb 2023 03:16:05 +0000
Certificate not after:    Sat 17 Feb 2024 02:46:59 +0000
Subordinate resources:    AS: 137744
                          IP: 103.135.236.0/22
                          IP: 2404:b3c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37979 (0x945b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb 17 03:16:05 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=F79259C5A4258671D4C7ED85D91AEE4D5C45AA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:77:6a:12:ea:0d:47:cb:bd:d3:23:69:15:
                    33:03:ef:33:cb:b6:d1:2e:de:a1:69:2c:0d:5b:f8:
                    14:86:dd:16:92:bc:db:47:88:ab:3d:33:1c:5e:73:
                    ac:f8:19:8a:d5:31:fb:c9:1d:d0:44:ed:c2:aa:df:
                    3b:da:0e:9a:59:70:14:c8:9b:a1:f2:70:15:4d:ab:
                    43:3f:b7:97:0d:a8:9b:ba:95:27:cf:c9:98:8e:70:
                    ff:50:71:df:f6:96:6b:f4:1c:6a:bd:18:29:27:20:
                    a8:2b:99:91:f1:b1:64:df:ca:21:f5:78:65:4c:f3:
                    c4:0b:eb:4e:c4:34:76:1b:5a:1c:7a:5c:b1:c7:3a:
                    1b:a1:3d:b1:ff:6a:11:3a:57:24:13:25:d5:e2:81:
                    23:48:87:ae:9a:24:db:a5:1b:94:3b:47:25:f1:6b:
                    34:43:4c:e0:e8:8a:d0:ee:c9:d8:ce:c0:43:13:bb:
                    a1:86:1b:e1:5e:eb:67:66:1e:e6:0d:d4:b3:60:f1:
                    58:e2:27:7b:f8:e4:ca:c9:b6:9b:84:6a:0a:88:3d:
                    eb:ce:03:15:fd:3e:23:c8:f9:1f:70:35:2c:b0:0d:
                    a8:ce:71:dc:91:d6:66:ad:0b:bb:be:df:53:fa:08:
                    1f:ff:66:87:2c:f5:33:d7:07:b7:51:7f:40:43:25:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:92:59:C5:A4:25:86:71:D4:C7:ED:85:D9:1A:EE:4D:5C:45:AA:59
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/95JZxaQlhnHUx-2F2RruTVxFqlk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137744

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.236.0/22
                IPv6:
                  2404:b3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:62:10:60:b2:a7:ba:01:11:42:af:63:6d:87:2f:c1:7a:18:
         d0:5e:59:a7:d5:6e:2f:c6:17:d1:a3:83:1f:e5:67:44:55:29:
         56:a5:d0:64:6f:89:a3:cf:8d:95:75:05:da:e3:6d:f8:12:bc:
         b8:16:c9:35:64:89:e1:7c:d6:1c:23:d6:ae:da:dc:2f:ca:2e:
         f7:b6:2e:34:12:88:5e:a6:6d:eb:98:c7:7d:23:1f:f2:98:21:
         2e:60:29:92:f5:f4:c6:b3:8e:57:7f:35:45:5d:15:f8:77:d6:
         8c:fd:c6:23:35:84:79:ca:9b:4a:ba:9f:17:2d:5b:9f:89:64:
         53:37:d8:2a:b2:07:ae:f5:df:1b:7d:64:eb:6c:d4:41:ba:b4:
         81:56:e2:a6:c8:ec:6e:ee:d3:33:f2:13:2f:c4:f6:88:27:b4:
         eb:5c:99:e5:5e:01:7f:97:02:5b:44:6f:99:38:e6:75:69:15:
         a3:2b:44:4d:be:20:7a:ba:a3:15:04:37:2e:7b:00:a0:f2:db:
         8c:0d:73:b8:53:dc:7b:dc:24:2a:ae:3b:cf:b2:8e:30:ed:b4:
         a3:e6:25:3d:bf:e7:cf:05:c2:8f:30:89:30:64:8c:15:f7:a5:
         8a:a7:81:e2:80:8d:05:85:a1:12:71:14:a0:f7:e7:6e:de:82:
         e9:9c:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----