Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/AYx7wH9-wYE_7KgubuZOzrGXTcw.cer
File:                     AYx7wH9-wYE_7KgubuZOzrGXTcw.cer (raw, json)
Hash identifier:          U0LBkRyLGrRPKE0UF/ssictr4Gbq5ZLhpNgtSTs2xu0=
Subject key identifier:   01:8C:7B:C0:7F:7E:C1:81:3F:EC:A8:2E:6E:E6:4E:CE:B1:97:4D:CC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7768
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/AYx7wH9-wYE_7KgubuZOzrGXTcw.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:37 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 101.251.192.0/18
                          IP: 103.244.232.0/22
                          IP: 103.252.36.0/22
                          IP: 106.2.128.0/19
                          IP: 106.3.128.0/19
                          IP: 119.61.160.0 -- 119.61.255.255
                          IP: 210.73.208.0/20
                          IP: 218.244.96.0/20
                          IP: 2400:5280::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30568 (0x7768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:37 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=018C7BC07F7EC1813FECA82E6EE64ECEB1974DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:b6:0e:9f:aa:04:47:31:9e:48:88:a9:de:
                    50:f3:af:0c:c0:23:cf:bc:b6:6c:f2:7a:7d:82:78:
                    85:7e:df:df:98:36:6c:be:55:d9:25:07:d9:f1:46:
                    64:50:d5:bc:ea:e6:a2:ab:9a:cd:ec:00:7c:71:a1:
                    3c:b8:dd:ba:b6:03:da:66:c5:5c:b5:50:9a:2f:88:
                    d7:f0:0c:2e:d4:d7:f8:9d:70:d5:56:4e:76:50:4d:
                    dc:fa:6f:d7:d9:b5:ea:08:fa:70:ea:08:47:8d:52:
                    dc:a0:68:f0:e5:95:39:8d:62:b5:e2:cf:2b:ba:3d:
                    df:7e:be:28:14:b0:03:19:79:ff:b3:30:9d:1f:21:
                    0b:b8:08:b6:6c:40:14:4d:52:07:f5:92:a0:17:52:
                    6d:91:d2:e7:cb:6f:e8:dc:0e:ff:5f:e9:93:9e:c0:
                    88:ba:e0:f9:50:b6:d7:fc:05:d2:95:ab:4d:6a:db:
                    3e:64:ec:57:65:42:93:ca:23:28:7b:2a:b7:73:34:
                    f3:8e:2b:fd:99:c7:26:d2:4f:6c:50:2d:0c:8e:7c:
                    0d:a6:8a:25:e3:b7:2e:03:a8:a6:5a:17:85:ad:15:
                    88:c3:14:ef:ea:61:49:e1:7e:94:6d:cc:31:3f:f5:
                    6a:7b:50:36:f6:37:42:c8:52:bb:f9:dc:dc:f3:a9:
                    93:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8C:7B:C0:7F:7E:C1:81:3F:EC:A8:2E:6E:E6:4E:CE:B1:97:4D:CC
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/AYx7wH9-wYE_7KgubuZOzrGXTcw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.251.192.0/18
                  103.244.232.0/22
                  103.252.36.0/22
                  106.2.128.0/19
                  106.3.128.0/19
                  119.61.160.0-119.61.255.255
                  210.73.208.0/20
                  218.244.96.0/20
                IPv6:
                  2400:5280::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:3a:f9:1f:00:6b:b8:08:d6:67:94:e3:53:23:89:52:6e:6f:
         c7:c8:6a:30:d7:87:a4:11:f2:5c:3c:cb:82:3b:7f:7b:5c:8a:
         c9:b8:5e:ab:da:09:2f:3f:38:5f:19:9f:dd:d7:ef:0e:e8:69:
         82:ee:d3:16:5d:75:3d:59:62:c8:6d:b8:8b:d3:23:05:93:f5:
         2c:c4:f7:ba:5a:8b:88:e0:47:ae:87:35:97:c8:f0:14:25:92:
         be:e4:63:2b:5c:00:99:a6:2e:96:24:8b:ce:dc:8f:88:ca:d1:
         dc:dc:a1:56:5a:c3:30:e7:25:8b:f3:52:db:29:a1:13:3f:cd:
         53:24:1a:cc:e4:7e:64:6f:c6:26:4a:ed:47:49:67:75:b0:68:
         b1:eb:d2:ee:20:f0:65:7a:41:6a:69:52:a4:43:ef:9c:89:9c:
         2a:07:10:5a:58:17:37:11:ea:d2:98:5d:27:d8:56:29:50:46:
         f2:94:c4:91:c4:44:7c:41:cc:fe:2b:aa:40:23:32:15:66:01:
         0e:dd:0e:32:8b:ba:c2:d8:84:e4:30:5c:52:93:48:1b:e2:d6:
         3e:3d:9f:cb:aa:49:ed:72:13:bd:23:48:0e:db:bb:99:13:d8:
         fd:2d:95:da:20:14:a0:d3:dd:a2:df:ee:61:e2:cb:0d:1f:80:
         50:f1:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----