Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/9pYRvY5r7GrKGyodSvgKOTONaz0.cer
File:                     9pYRvY5r7GrKGyodSvgKOTONaz0.cer (raw, json)
Hash identifier:          JJmcTwBoaW/TomueU105Fvs62VSnkaJ46dpxWNNNAcg=
Subject key identifier:   F6:96:11:BD:8E:6B:EC:6A:CA:1B:2A:1D:4A:F8:0A:39:33:8D:6B:3D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7A2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2170/9pYRvY5r7GrKGyodSvgKOTONaz0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2170/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 12 Aug 2021 02:04:10 +0000
Certificate not after:    Fri 12 Aug 2022 02:01:50 +0000
Subordinate resources:    IP: 180.223.0.0/16

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31276 (0x7a2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Aug 12 02:04:10 2021 GMT
            Not After : Aug 12 02:01:50 2022 GMT
        Subject: CN=F69611BD8E6BEC6ACA1B2A1D4AF80A39338D6B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:3f:c7:c1:ce:96:46:aa:3e:93:15:14:e2:
                    3c:75:28:19:cc:a1:56:79:50:06:70:57:b0:8f:8a:
                    7a:8e:b0:70:f9:ee:89:1b:a3:28:e7:b2:87:29:7f:
                    fe:61:9c:60:4a:54:45:75:72:89:76:25:c1:23:a0:
                    75:dd:46:b8:16:c1:38:47:25:35:c5:bc:ff:4b:a5:
                    20:1f:a2:5a:70:45:98:e4:64:3f:52:4a:d0:5a:1b:
                    e7:fe:9d:42:ec:ee:89:20:b8:a0:50:5a:85:19:47:
                    d1:93:6b:9a:32:ee:61:3b:17:89:26:f5:87:90:b2:
                    ce:5d:a1:4d:07:9b:2a:5e:55:1e:57:fe:e9:30:7d:
                    a9:4e:a2:03:b7:3b:1c:94:15:d2:42:f4:97:80:c2:
                    63:81:4b:5a:39:be:b5:56:92:c0:6f:8a:98:1a:ea:
                    fa:01:a8:a5:9f:c0:2e:a8:ed:2b:cf:c0:e7:d5:88:
                    5d:7b:c3:73:66:dd:7a:55:6e:66:81:34:72:53:f4:
                    4c:cc:6f:4f:b1:7d:a9:19:6a:2e:5d:4e:b9:35:d8:
                    f1:42:e7:52:79:a7:da:40:22:63:5a:d4:de:7c:6c:
                    ed:1d:f1:05:90:e0:22:50:c4:ba:89:b8:82:b5:a4:
                    0a:8f:3b:74:08:3a:6b:73:db:06:80:12:03:06:0e:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:96:11:BD:8E:6B:EC:6A:CA:1B:2A:1D:4A:F8:0A:39:33:8D:6B:3D
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2170/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2170/9pYRvY5r7GrKGyodSvgKOTONaz0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:de:37:89:5a:06:c6:09:aa:b0:1b:60:e1:4c:bc:15:f7:
         27:d6:cb:ae:9c:39:b0:1c:bc:14:b3:7d:47:e8:9e:ba:96:68:
         5d:6d:a9:47:b0:56:ec:90:6b:35:fe:84:78:74:e4:18:da:83:
         b3:fb:b7:e1:2a:06:b0:80:03:fb:bc:a8:b0:5d:cd:86:fe:1e:
         9a:aa:ea:69:bd:73:3c:36:c9:11:58:67:3e:52:77:6f:c6:d9:
         30:19:d9:e1:4c:4b:e3:93:6f:f9:48:b1:e9:7c:ac:2f:13:3e:
         57:f5:bb:23:80:ac:fb:88:ee:b2:d9:d6:4d:d9:60:09:8c:61:
         89:8d:98:19:e2:63:21:01:4c:80:9d:2f:25:b7:19:57:62:75:
         63:eb:3d:f8:ec:bd:48:ff:51:ac:10:46:d3:8b:6a:24:f6:51:
         3f:cf:79:ca:c4:c0:5f:dd:d3:22:a3:3a:ed:56:dd:ad:a4:58:
         d5:45:b0:6a:a2:0c:9c:9d:df:7d:a1:7f:2f:db:89:02:c7:26:
         65:96:c6:49:10:81:29:c2:33:c7:9a:cb:0d:a5:9b:14:ba:c0:
         67:0b:28:8f:0a:f0:98:91:96:d9:c3:30:b8:ec:4a:cf:c9:0c:
         1a:1f:fd:92:70:75:40:4e:e0:98:90:9d:64:aa:b5:1e:fc:0d:
         78:fc:d9:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICeiwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDgxMjAyMDQxMFoXDTIyMDgxMjAyMDE1MFowMzEx
MC8GA1UEAxMoRjY5NjExQkQ4RTZCRUM2QUNBMUIyQTFENEFGODBBMzkzMzhENkIz
RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANujP8fBzpZGqj6TFRTi
PHUoGcyhVnlQBnBXsI+Keo6wcPnuiRujKOeyhyl//mGcYEpURXVyiXYlwSOgdd1G
uBbBOEclNcW8/0ulIB+iWnBFmORkP1JK0Fob5/6dQuzuiSC4oFBahRlH0ZNrmjLu
YTsXiSb1h5Cyzl2hTQebKl5VHlf+6TB9qU6iA7c7HJQV0kL0l4DCY4FLWjm+tVaS
wG+KmBrq+gGopZ/ALqjtK8/A59WIXXvDc2bdelVuZoE0clP0TMxvT7F9qRlqLl1O
uTXY8ULnUnmn2kAiY1rU3nxs7R3xBZDgIlDEuom4grWkCo87dAg6a3PbBoASAwYO
SVkCAwEAAaOCAlQwggJQMB0GA1UdDgQWBBT2lhG9jmvsasobKh1K+Ao5M41rPTAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE3
MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yMTcwLzlwWVJ2WTVyN0dyS0d5b2RTdmdLT1RPTmF6MC5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC03zANBgkqhkiG9w0BAQsFAAOC
AQEAY/DeN4laBsYJqrAbYOFMvBX3J9bLrpw5sBy8FLN9R+ieupZoXW2pR7BW7JBr
Nf6EeHTkGNqDs/u34SoGsIAD+7yosF3Nhv4emqrqab1zPDbJEVhnPlJ3b8bZMBnZ
4UxL45Nv+Uix6XysLxM+V/W7I4Cs+4justnWTdlgCYxhiY2YGeJjIQFMgJ0vJbcZ
V2J1Y+s9+Oy9SP9RrBBG04tqJPZRP895ysTAX93TIqM67VbdraRY1UWwaqIMnJ3f
faF/L9uJAscmZZbGSRCBKcIzx5rLDaWbFLrAZwsojwrwmJGW2cMwuOxKz8kMGh/9
knB1QE7gmJCdZKq1HvwNePzZ/g==
-----END CERTIFICATE-----