Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/9jfHzSxBQkVqu8J2rY8A7GFQBCM.cer
File:                     9jfHzSxBQkVqu8J2rY8A7GFQBCM.cer (raw, json)
Hash identifier:          7yiAjWMgbDiaeSE2XDoP+Kz9ypBk+hP1Bherz+hCIH8=
Subject key identifier:   F6:37:C7:CD:2C:41:42:45:6A:BB:C2:76:AD:8F:00:EC:61:50:04:23
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       1CE3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/9jfHzSxBQkVqu8J2rY8A7GFQBCM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:07:42 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 139.159.96.0 -- 139.159.115.255

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7395 (0x1ce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: May 27 05:07:42 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F637C7CD2C4142456ABBC276AD8F00EC61500423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:61:8c:57:4e:5c:63:9e:53:3a:31:ec:70:
                    fd:02:ef:81:d6:a6:97:82:21:04:d6:8e:f0:de:5a:
                    02:d3:da:bf:c0:fa:6a:09:54:e4:4d:0b:ee:b3:0b:
                    e4:67:8a:5f:17:c4:e1:49:be:f0:4c:a6:54:d0:53:
                    c6:7f:64:ca:cc:8e:7a:65:8b:e1:82:59:16:81:c4:
                    5c:2e:63:79:7a:45:1e:a2:56:41:22:f5:d6:c0:65:
                    6a:04:9f:9e:79:46:38:0d:03:34:ae:8c:fa:dc:19:
                    7e:46:55:1d:7b:94:59:1c:b4:35:6c:24:34:1e:ab:
                    2e:0f:d4:6b:0e:de:df:3f:47:bf:4f:1a:3d:0d:13:
                    3a:1a:12:3b:23:7b:be:42:97:5f:47:cb:a1:43:06:
                    e0:df:6d:94:bd:e6:10:82:5e:c7:24:2e:9c:dd:4f:
                    a8:f7:ab:af:ae:d5:07:87:b2:3b:4e:0f:9c:20:65:
                    60:dc:57:14:ff:d2:19:19:2f:b8:36:da:e9:74:11:
                    33:63:49:50:ac:2c:9f:38:6a:57:1e:1c:b4:46:aa:
                    9b:11:58:98:af:9a:8c:92:f1:f1:00:d8:72:44:b2:
                    d2:b2:8d:c0:72:78:32:e1:0f:99:32:f3:06:ee:ab:
                    50:fe:11:37:54:9f:7a:af:9c:38:11:51:c1:9e:5f:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:37:C7:CD:2C:41:42:45:6A:BB:C2:76:AD:8F:00:EC:61:50:04:23
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/9jfHzSxBQkVqu8J2rY8A7GFQBCM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.96.0-139.159.115.255

    Signature Algorithm: sha256WithRSAEncryption
         33:ab:9b:18:da:40:5b:54:f3:d5:61:8a:b6:9d:6d:53:d4:f4:
         15:68:52:4e:10:e1:52:2b:68:73:b3:17:4c:23:7e:a8:dc:2e:
         7a:66:9c:f3:72:df:81:81:43:df:75:fd:b0:48:17:f3:b7:2b:
         19:b9:87:15:23:00:e8:f3:f0:f3:9f:f5:93:e1:79:2b:13:24:
         08:75:f8:52:d6:80:86:d4:83:e5:d9:66:ac:b2:72:5d:66:9d:
         67:14:b8:d2:f7:56:45:ab:5f:48:ef:6a:28:45:48:19:94:80:
         1d:1a:26:b0:58:92:db:a8:a0:b4:ba:31:28:14:29:e5:c4:b7:
         e6:65:8e:91:f7:f2:f4:b3:6b:d1:cc:92:6d:fa:57:0f:ca:e0:
         53:88:b7:f8:6a:b3:4a:1f:57:9d:8d:bb:14:ef:16:82:be:be:
         21:c2:ea:20:dc:11:59:d2:60:28:79:43:ac:6c:f2:af:64:62:
         71:5e:2d:19:de:6b:9b:2c:4e:67:5d:fc:97:a6:90:7e:ef:53:
         bb:a0:cc:32:8f:ff:d4:5e:62:ec:8a:c5:35:bd:5a:60:f2:8c:
         3d:83:dd:b6:1a:a8:7f:88:f9:db:2e:45:88:39:94:fd:56:07:
         68:8d:c5:3f:e4:06:56:54:42:a1:ca:06:17:57:8b:da:24:cf:
         9a:fe:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org