Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
File:                     A_B12cbxjcCb2mK3CH6oDcW3EcU.cer (raw, json)
Hash identifier:          1hcXdALWLtvdo2ZQ+mkdTyM6RhcyCl8gs53rzvOthew=
Subject key identifier:   03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       CADF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 21 Mar 2025 03:10:38 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    AS: 131484
                          IP: 103.159.122.0/23
                          IP: 2406:d140::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51935 (0xcadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000
        Validity
            Not Before: Mar 21 03:10:38 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:d2:e0:a7:ea:9e:05:64:9b:97:ec:a3:20:
                    7e:67:c6:b1:ff:b7:97:f3:6b:9c:f2:0d:5f:11:29:
                    6d:47:a1:84:92:ee:e9:dc:cf:d5:bf:17:40:37:6f:
                    39:3f:bc:99:72:ae:7b:a9:d7:47:30:51:56:9c:00:
                    42:e5:b0:7f:9d:07:c6:da:75:04:11:b4:3f:7f:75:
                    92:92:fc:e3:1e:5a:ed:8c:51:77:75:7f:7e:89:0b:
                    01:36:89:16:7c:65:d8:43:a7:b6:bd:2a:48:3e:38:
                    c0:19:f2:83:57:02:9b:78:ed:ac:d6:ea:8b:9f:84:
                    0f:11:52:29:ed:21:8b:a9:49:a6:ad:16:a3:ed:54:
                    a3:33:08:20:a4:22:db:15:2a:e7:b1:e1:94:96:14:
                    53:13:9e:d7:e0:03:e6:b6:6f:f1:dc:22:b0:f0:8b:
                    e6:ce:64:c8:f0:7f:96:91:d8:38:20:05:c0:0d:cf:
                    86:ad:9e:f3:c0:5b:94:9a:d4:d8:6c:5d:31:1e:3d:
                    e0:46:2b:2d:c2:00:30:eb:f4:a0:3f:3b:5c:c4:cf:
                    4e:70:56:e4:b1:b9:81:5d:fe:b8:15:60:42:9e:43:
                    91:f5:f2:a6:bc:69:09:f3:28:2e:84:9a:7e:eb:dc:
                    46:f2:77:13:09:9d:a7:ad:3f:2c:d5:36:a4:8f:6b:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131484

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.122.0/23
                IPv6:
                  2406:d140::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:7a:99:cb:c5:24:7d:0a:41:06:af:cc:80:c0:41:e4:95:
         31:93:75:75:72:8e:27:9b:ce:59:1d:91:0a:8f:18:18:75:bb:
         d5:b5:db:1d:e1:6e:58:94:8e:be:80:fc:c5:63:39:81:ff:bf:
         bb:ba:96:64:10:c9:98:0f:95:56:cd:db:03:40:cb:24:ec:83:
         5d:ea:d3:93:a4:e0:4d:e2:2b:5d:9e:4a:73:23:62:28:bc:53:
         ac:cf:04:85:4b:16:fc:bf:31:b5:91:2c:37:fd:9f:a9:6e:a8:
         f8:36:cc:43:b0:98:e7:cd:5a:ed:46:17:0c:2a:0b:f2:45:04:
         6b:9e:14:bf:2e:67:b8:85:43:a3:98:7b:95:01:c2:f5:cf:5f:
         c1:a9:f5:ce:9c:32:d8:12:b9:e8:0d:3e:84:a4:e8:68:d5:d2:
         f7:22:9a:c0:48:41:97:db:6f:c6:01:93:eb:62:d6:fa:24:2b:
         4a:22:9d:c0:3c:dc:30:ee:55:f2:36:f4:09:ae:e6:1b:0d:e4:
         c4:2f:17:d0:b1:38:02:2d:c7:37:66:65:a9:42:0f:24:97:29:
         42:0d:19:32:e2:ff:d4:ad:3e:a9:82:1a:8f:b6:87:e5:7f:f9:
         9e:fd:5e:8d:e9:88:12:ba:eb:ee:88:a5:ff:5f:05:a1:4b:db:
         ea:2e:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:44 2025 by rpki-client