Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/AtNO4cTWLz97Gk3dKM0z2bNhSMg.cer
File:                     AtNO4cTWLz97Gk3dKM0z2bNhSMg.cer (raw, json)
Hash identifier:          XyEcloew2yA1waxBlYU4WVX09mxCq1jTRAsnwq0Lw6w=
Subject key identifier:   02:D3:4E:E1:C4:D6:2F:3F:7B:1A:4D:DD:28:CD:33:D9:B3:61:48:C8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/580/AtNO4cTWLz97Gk3dKM0z2bNhSMg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/580/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:07:16 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59072
                          IP: 43.247.68.0/22
                          IP: 43.254.156.0/22
                          IP: 45.248.128.0/22
                          IP: 45.248.208.0 -- 45.248.235.255
                          IP: 45.248.240.0 -- 45.249.7.255
                          IP: 103.24.176.0/22
                          IP: 103.61.140.0/22
                          IP: 103.65.60.0 -- 103.65.75.255
                          IP: 103.198.156.0/22
                          IP: 103.207.188.0 -- 103.207.215.255
                          IP: 103.217.0.0/18
                          IP: 103.238.188.0/22
                          IP: 124.150.137.0/24
                          IP: 137.59.59.0/24
                          IP: 175.111.144.0 -- 175.111.175.255
                          IP: 202.153.7.0/24
                          IP: 202.158.242.0/24
                          IP: 202.171.232.0/24
                          IP: 202.172.7.0/24
                          IP: 202.173.6.0/24
                          IP: 203.16.63.0/24
                          IP: 203.17.249.0/24
                          IP: 203.19.1.0/24
                          IP: 203.100.60.0/24
                          IP: 203.142.219.0/24
                          IP: 203.174.6.0/24
                          IP: 203.191.2.0/24
                          IP: 203.191.7.0/24
                          IP: 203.201.181.0/24
                          IP: 2406:9380::/32
                          IP: 2406:9480::/32
                          IP: 2406:9d80::/32
                          IP: 2406:9e80::/32
                          IP: 2406:9f80::/32
                          IP: 2406:a080::/32
                          IP: 2406:a180::/32
                          IP: 2406:a280::/32
                          IP: 2406:a380::/32
                          IP: 2406:a480::/32
                          IP: 2406:a580::/32
                          IP: 2406:a680::/32
                          IP: 2406:a780::/32
                          IP: 2406:a880::/32
                          IP: 2406:a980::/32
                          IP: 2406:aa80::/32
                          IP: 2406:ab80::/32
                          IP: 2406:ac80::/32
                          IP: 2406:ad80::/32
                          IP: 2406:ae80::/32
                          IP: 2406:af80::/32
                          IP: 2406:b080::/32
                          IP: 2406:b880::/32
                          IP: 2406:b980::/32
                          IP: 2406:ba80::/32
                          IP: 2406:bb80::/32
                          IP: 2406:bc80::/32
                          IP: 2406:bd80::/32
                          IP: 2406:be80::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30726 (0x7806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:07:16 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=02D34EE1C4D62F3F7B1A4DDD28CD33D9B36148C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:94:50:25:02:6e:67:51:38:9d:a6:3a:be:
                    61:11:04:80:9b:bb:a5:35:55:cf:45:b0:cb:aa:04:
                    b7:45:4b:1d:2e:66:4e:d3:34:05:25:d8:31:b3:44:
                    18:1d:ed:53:c6:74:cc:a0:7f:3c:21:52:ad:1f:0f:
                    15:8f:89:8c:07:72:78:f4:a3:cd:43:d1:20:2a:0b:
                    2e:71:06:03:32:de:e2:76:19:91:34:44:c7:1a:81:
                    c0:fb:76:05:77:84:d9:e5:f2:c8:3d:3a:42:65:8b:
                    ea:c7:a7:2f:15:7a:3c:88:22:68:20:01:2d:60:37:
                    7f:ba:28:6a:24:09:bb:81:fa:62:53:f7:b6:fb:81:
                    7c:84:66:b1:32:a2:77:e4:5d:2d:76:3d:88:dd:35:
                    42:66:67:39:e2:4d:c1:0d:51:5a:d2:12:d9:52:c8:
                    8c:86:58:aa:ab:35:7c:df:c8:8a:76:6a:c4:0f:24:
                    9b:b8:8e:cf:3a:91:90:df:9b:19:4d:82:23:26:a3:
                    7f:0e:98:80:ae:f0:4c:95:7b:85:f1:ec:e9:9c:3e:
                    77:1c:59:07:0f:f4:d2:77:0a:55:3c:84:db:c9:e8:
                    18:ef:d9:52:d1:b7:eb:b5:05:60:83:2a:92:7d:97:
                    d4:57:cc:18:e6:b2:bc:15:b1:9c:b2:66:9e:6a:59:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D3:4E:E1:C4:D6:2F:3F:7B:1A:4D:DD:28:CD:33:D9:B3:61:48:C8
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/580/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/580/AtNO4cTWLz97Gk3dKM0z2bNhSMg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59072

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.68.0/22
                  43.254.156.0/22
                  45.248.128.0/22
                  45.248.208.0-45.248.235.255
                  45.248.240.0-45.249.7.255
                  103.24.176.0/22
                  103.61.140.0/22
                  103.65.60.0-103.65.75.255
                  103.198.156.0/22
                  103.207.188.0-103.207.215.255
                  103.217.0.0/18
                  103.238.188.0/22
                  124.150.137.0/24
                  137.59.59.0/24
                  175.111.144.0-175.111.175.255
                  202.153.7.0/24
                  202.158.242.0/24
                  202.171.232.0/24
                  202.172.7.0/24
                  202.173.6.0/24
                  203.16.63.0/24
                  203.17.249.0/24
                  203.19.1.0/24
                  203.100.60.0/24
                  203.142.219.0/24
                  203.174.6.0/24
                  203.191.2.0/24
                  203.191.7.0/24
                  203.201.181.0/24
                IPv6:
                  2406:9380::/32
                  2406:9480::/32
                  2406:9d80::/32
                  2406:9e80::/32
                  2406:9f80::/32
                  2406:a080::/32
                  2406:a180::/32
                  2406:a280::/32
                  2406:a380::/32
                  2406:a480::/32
                  2406:a580::/32
                  2406:a680::/32
                  2406:a780::/32
                  2406:a880::/32
                  2406:a980::/32
                  2406:aa80::/32
                  2406:ab80::/32
                  2406:ac80::/32
                  2406:ad80::/32
                  2406:ae80::/32
                  2406:af80::/32
                  2406:b080::/32
                  2406:b880::/32
                  2406:b980::/32
                  2406:ba80::/32
                  2406:bb80::/32
                  2406:bc80::/32
                  2406:bd80::/32
                  2406:be80::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:6b:e1:3e:b3:3d:11:e2:74:ce:7e:ea:8f:16:36:56:45:
         b6:a0:05:17:bd:e9:6b:ba:88:82:4a:23:ea:2d:e5:a6:22:7f:
         92:af:9b:26:7c:0a:5a:d7:ca:39:5c:1a:42:77:83:2b:0c:36:
         9a:25:87:ef:54:ae:87:ef:bb:71:fe:9b:f1:b8:25:13:8b:f0:
         77:98:34:cd:25:f3:6a:43:2f:c4:48:29:37:dc:22:8f:d5:d2:
         9c:69:33:f1:00:9a:c3:22:d7:e5:b8:7f:52:5f:b5:be:aa:11:
         13:0b:85:31:78:f3:b1:77:95:b5:b3:08:5d:c9:86:f2:d4:e4:
         ed:ad:d7:a0:4a:b0:17:54:2c:82:ae:71:60:09:d0:95:cf:75:
         f9:95:e3:9d:e2:18:34:55:3d:40:4c:2f:12:10:c2:80:c0:69:
         b8:97:d8:bc:87:04:c4:fc:94:97:0a:ff:1f:ed:40:78:87:fe:
         4e:6f:87:fb:31:b0:aa:66:b3:94:d9:60:ad:9f:fb:ba:83:72:
         09:63:17:5e:7d:ea:a6:56:39:e0:dc:bf:9d:a5:c5:b7:8b:e2:
         e5:0d:da:c3:4e:b5:d0:a2:66:98:21:bc:6c:ef:b2:09:95:ce:
         c1:78:26:97:f7:67:98:6f:5f:fa:7a:8c:c3:b0:b3:df:5c:e0:
         ad:3b:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org