Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/96wIUhgBk0Ir6e78yNyXN_7eQIc.cer
File:                     96wIUhgBk0Ir6e78yNyXN_7eQIc.cer (raw, json)
Hash identifier:          1mkHng9v73InJQTmyc3zbrxA84wAK6G2afRJZuNB97Q=
Subject key identifier:   F7:AC:08:52:18:01:93:42:2B:E9:EE:FC:C8:DC:97:37:FE:DE:40:87
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7B75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/96wIUhgBk0Ir6e78yNyXN_7eQIc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 07 Oct 2021 20:04:52 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45090
                          IP: 43.247.196.0/22
                          IP: 103.18.208.0/21
                          IP: 103.238.16.0/22
                          IP: 121.51.0.0/16
                          IP: 182.254.0.0/17
                          IP: 203.205.128.0/17
                          IP: 210.74.32.0/21
                          IP: 211.152.128.0/19
                          IP: 211.159.96.0/19
                          IP: 2402:4e00::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31605 (0x7b75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct  7 20:04:52 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F7AC0852180193422BE9EEFCC8DC9737FEDE4087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:46:0e:5f:77:2f:e3:96:ca:0a:a6:f5:d6:
                    ae:e2:ff:c6:f4:1c:cd:06:e4:83:ed:14:99:3c:7a:
                    d4:dc:21:35:08:12:86:cc:93:27:16:40:75:10:d9:
                    23:f6:a9:bf:67:3a:d9:e4:9b:42:1f:72:25:f3:8b:
                    4f:8b:03:98:e2:9d:a1:b4:48:ff:92:4e:13:ec:60:
                    ac:99:b1:f9:aa:36:09:3f:80:bb:5d:26:bb:65:69:
                    dc:09:39:f4:ec:c6:8c:67:78:87:9a:a1:d5:f3:aa:
                    f1:97:73:55:0a:c6:b2:c7:51:4c:ea:7d:9c:a0:08:
                    ec:ee:d5:fa:de:90:44:c7:b3:61:c8:bc:ce:ef:65:
                    54:96:c6:f9:15:c9:f3:e1:49:9f:c5:ca:9f:e1:d6:
                    6d:05:25:90:29:69:f2:9f:5d:17:0e:05:ff:87:3e:
                    ed:cb:74:83:d6:1e:cd:7b:90:2d:8e:fd:dc:04:ae:
                    11:09:69:14:4d:46:b1:d9:d3:3d:dc:0c:0f:f8:30:
                    5c:1c:9c:b6:55:87:f8:9c:d2:f8:20:92:bf:9e:d4:
                    37:40:ae:8c:2a:4a:8b:5b:c9:2e:fc:f6:27:82:fa:
                    31:d6:9a:03:46:9f:7c:f2:be:d3:14:8f:c2:6b:6b:
                    7f:c4:e1:8e:b6:85:83:ff:b9:f3:e2:04:88:84:97:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AC:08:52:18:01:93:42:2B:E9:EE:FC:C8:DC:97:37:FE:DE:40:87
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/96wIUhgBk0Ir6e78yNyXN_7eQIc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45090

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.196.0/22
                  103.18.208.0/21
                  103.238.16.0/22
                  121.51.0.0/16
                  182.254.0.0/17
                  203.205.128.0/17
                  210.74.32.0/21
                  211.152.128.0/19
                  211.159.96.0/19
                IPv6:
                  2402:4e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:61:a0:24:9e:3b:cc:ed:7c:c8:bc:72:85:e1:27:94:96:34:
         b7:2e:04:55:b2:5f:b1:aa:82:72:96:38:9d:47:ba:05:c8:13:
         fd:19:f3:d2:93:33:32:bc:29:9b:22:0d:6c:70:3c:96:82:dc:
         75:45:5d:c4:cd:83:9c:34:1e:03:a9:e5:89:55:e7:17:5f:ae:
         0a:b6:08:df:8e:bf:05:6b:1c:37:35:e7:f3:6e:bd:25:18:e5:
         55:42:2f:f0:20:50:ee:ed:bc:39:c5:7f:cb:69:b6:71:ac:72:
         ce:92:41:d1:3e:5e:59:e3:65:a1:e2:94:49:32:87:8f:6d:86:
         5c:22:85:45:84:dd:5f:73:5e:54:c9:d7:8a:83:f9:eb:d3:fb:
         91:51:56:f9:ca:8b:13:ec:e2:30:f9:e8:7d:1c:b5:01:06:ea:
         ac:e0:32:05:37:24:fb:19:38:15:92:20:1d:28:63:7b:40:c1:
         37:7b:ac:cd:5c:00:c6:88:df:28:89:e1:be:1d:02:59:1b:6f:
         0d:9e:c8:da:01:49:c8:49:bd:d0:2c:5c:f0:22:c8:7e:a0:72:
         b9:09:03:6b:47:d5:b6:a1:d3:69:1a:dd:79:fa:ad:89:ce:48:
         71:27:4c:64:d4:41:1f:72:16:6a:3b:f9:05:3e:30:2c:b7:5c:
         99:f1:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----