Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/BJaLNC3wpHgK7et3RgTm-8jXJCo.cer
File:                     BJaLNC3wpHgK7et3RgTm-8jXJCo.cer (raw, json)
Hash identifier:          D6UbYcKHVbagueA254NURMSSm6Td3Cp+iSRSFiyKqkc=
Subject key identifier:   04:96:8B:34:2D:F0:A4:78:0A:ED:EB:77:46:04:E6:FB:C8:D7:24:2A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7D4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/BJaLNC3wpHgK7et3RgTm-8jXJCo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 21 Dec 2021 07:28:52 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131490
                          IP: 103.87.20.0/22
                          IP: 103.115.120.0/22
                          IP: 2400:d0c0::/32
                          IP: 2402:e740::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32079 (0x7d4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Dec 21 07:28:52 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=04968B342DF0A4780AEDEB774604E6FBC8D7242A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:69:f1:ac:50:f9:95:e4:ea:22:79:90:76:
                    d7:bf:05:d2:c4:94:4b:22:7b:85:c0:b4:71:78:46:
                    6a:6b:0a:a1:2f:89:f5:7a:ac:05:16:fe:8d:fb:d1:
                    c6:fc:9d:f2:13:78:65:2c:cb:53:3d:22:19:4f:ac:
                    c8:44:65:b1:02:d4:6b:22:cb:03:c9:51:d4:32:77:
                    bc:e9:ec:95:3b:15:2d:4a:a6:a2:9e:d7:fd:68:a0:
                    b7:73:e3:84:6a:bb:bc:28:7f:ab:75:82:10:fb:d3:
                    3b:a6:7f:70:8f:cc:6c:33:63:2b:2c:16:59:89:d1:
                    87:98:b5:5d:f6:9b:1b:9c:64:19:29:19:da:fd:ca:
                    dc:8c:54:36:70:c0:53:ef:c2:a0:49:a4:2a:73:f7:
                    21:8f:6f:12:5f:df:8d:21:6d:c7:67:5b:46:61:81:
                    f1:cb:c0:31:d6:0b:d2:df:78:b7:c7:11:85:ac:e9:
                    4c:c3:f1:4c:0f:21:bc:14:a1:85:02:53:b8:7e:0c:
                    34:f9:52:b9:3b:58:34:73:7f:20:61:a6:06:0e:a7:
                    ca:a5:54:ce:b8:07:30:87:f9:67:a0:2b:b9:5b:f0:
                    87:d6:8d:31:fc:25:1a:35:ba:ab:ff:1c:62:e7:b5:
                    03:5e:5a:d3:bb:23:52:ed:92:f8:1b:50:7a:c8:47:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:96:8B:34:2D:F0:A4:78:0A:ED:EB:77:46:04:E6:FB:C8:D7:24:2A
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/BJaLNC3wpHgK7et3RgTm-8jXJCo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131490

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.20.0/22
                  103.115.120.0/22
                IPv6:
                  2400:d0c0::/32
                  2402:e740::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:cb:cb:23:83:06:ec:ce:2a:4e:8a:ec:7b:1a:b6:e6:34:
         ef:94:f4:26:64:19:ad:5a:ab:ba:1b:3b:35:59:43:4b:09:00:
         b2:ac:33:2b:db:44:08:71:90:b4:16:8d:63:fc:5c:00:ec:4d:
         51:7b:49:e5:05:6b:27:35:b1:b7:41:a2:db:14:d2:50:03:37:
         55:e9:04:75:d0:ab:af:77:f3:33:ed:1f:1e:4f:98:82:0e:c2:
         93:7d:7d:25:80:f9:da:96:d8:0a:17:db:47:2f:d3:14:f3:a4:
         c5:2b:88:7c:83:39:d3:83:d6:d9:3e:ff:dc:d6:bb:8c:57:01:
         17:78:45:11:51:c4:cc:c6:fd:6b:ec:50:fa:bf:94:9e:d4:08:
         85:bd:3f:54:25:5d:f8:26:9d:7e:42:6b:56:9e:23:55:bc:5a:
         88:f0:da:ec:73:00:03:97:c8:1f:fc:ec:aa:0f:3a:4a:86:34:
         99:d5:fb:50:53:6d:c8:65:42:12:11:0a:23:52:7a:8e:82:f4:
         3a:52:81:4c:ed:40:25:ec:f1:77:8c:18:60:2d:5e:dc:8f:d5:
         ab:50:2f:10:92:6a:5a:d0:66:cd:eb:54:03:cc:b0:ee:d6:91:
         80:a8:5d:12:d7:ed:02:05:e6:b3:98:8b:16:e9:98:5a:ac:2a:
         37:c2:fb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----