Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/BYRMox14rr9SER3jee_xm5_UVss.cer
File:                     BYRMox14rr9SER3jee_xm5_UVss.cer (raw, json)
Hash identifier:          6EudAXxam49plbNgWAJdKd+cTKuLZEnjGDFMn/FoZ0A=
Subject key identifier:   05:84:4C:A3:1D:78:AE:BF:52:11:1D:E3:79:EF:F1:9B:9F:D4:56:CB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       9549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/223/BYRMox14rr9SER3jee_xm5_UVss.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/223/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 17 Feb 2023 03:19:02 +0000
Certificate not after:    Sat 17 Feb 2024 02:46:59 +0000
Subordinate resources:    IP: 60.206.0.0 -- 60.206.11.255
                          IP: 60.206.16.0 -- 60.207.255.255
                          IP: 115.183.0.0/16
                          IP: 118.144.0.0/18
                          IP: 118.144.96.0 -- 118.144.255.255
                          IP: 218.241.128.0 -- 218.241.151.255
                          IP: 218.241.160.0 -- 218.241.255.255

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38217 (0x9549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb 17 03:19:02 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=05844CA31D78AEBF52111DE379EFF19B9FD456CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:4a:88:9e:5c:44:4f:14:d7:8f:07:33:6f:
                    c7:7c:6e:37:36:49:bf:c1:14:96:4c:2b:42:c7:9d:
                    e8:80:c7:83:35:9b:be:52:a9:b7:a1:db:ec:9b:de:
                    6c:78:90:e6:ea:47:a1:b6:ca:d7:68:39:01:3b:f2:
                    cd:b2:cd:07:64:a9:ad:88:2b:52:76:0c:e9:45:c4:
                    72:9a:83:21:01:63:7c:df:e1:df:ed:37:4e:0e:4e:
                    8d:31:da:02:8a:9c:3f:7c:68:86:4a:20:d5:96:ee:
                    2e:46:12:ff:89:68:f7:45:bd:87:5a:15:76:e5:2f:
                    4d:95:1c:b8:84:43:83:e4:68:6e:01:f3:97:1e:77:
                    e5:a6:72:d2:9d:7b:f1:bf:05:e3:b0:f6:ed:b0:93:
                    ce:a6:ec:93:15:99:b4:b0:36:67:9a:a9:f7:8e:3f:
                    ec:53:e6:4a:82:b4:3c:35:d3:e2:a5:24:76:76:59:
                    d1:bc:1d:d3:37:e5:cf:88:7c:fa:b3:1e:e7:91:3a:
                    4c:ae:d4:57:09:a7:d1:10:c9:74:b3:35:84:47:a1:
                    ce:af:fc:e3:33:d5:31:34:f0:2c:ef:f4:e2:fd:82:
                    88:37:9d:a7:68:34:d5:2a:ba:4b:a4:33:aa:57:7c:
                    20:75:04:ef:34:92:4a:dd:57:5b:24:a8:89:2c:dc:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:84:4C:A3:1D:78:AE:BF:52:11:1D:E3:79:EF:F1:9B:9F:D4:56:CB
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/223/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/223/BYRMox14rr9SER3jee_xm5_UVss.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.206.0.0-60.206.11.255
                  60.206.16.0-60.207.255.255
                  115.183.0.0/16
                  118.144.0.0/18
                  118.144.96.0-118.144.255.255
                  218.241.128.0-218.241.151.255
                  218.241.160.0-218.241.255.255

    Signature Algorithm: sha256WithRSAEncryption
         79:46:56:40:41:f7:13:7e:35:29:8c:f0:c9:52:b1:8f:91:99:
         ea:57:90:74:cc:50:17:cf:7e:8a:d9:c4:dd:1a:36:db:de:63:
         73:8a:84:51:e5:15:a7:a8:d6:da:75:50:e8:f0:4a:de:1b:a5:
         9d:cb:a0:21:d6:3c:86:73:70:9f:52:20:7e:ac:f1:cd:72:de:
         d6:b2:81:18:77:bf:03:9a:0d:bc:0b:a4:92:98:9d:72:5e:4d:
         71:19:30:34:d3:7f:b5:81:f7:79:64:5a:98:af:64:57:88:b1:
         3b:68:77:93:6b:34:c1:05:61:a0:bd:70:7e:4c:c4:09:b7:c0:
         0c:c8:82:a7:e7:24:50:3a:ef:7d:a5:c7:b6:39:38:8c:79:c6:
         f5:e8:03:3d:d1:e5:9b:73:56:fb:3b:7b:e8:fb:2d:58:7e:33:
         ab:10:7c:8c:9d:bf:37:4c:3f:75:13:da:e8:59:39:52:03:50:
         69:02:d1:5e:11:00:2f:d7:fa:b0:c9:72:18:70:43:de:91:9a:
         6e:5b:34:0c:b6:53:32:6b:63:ec:00:84:ff:f8:ec:e6:ad:ea:
         75:56:14:03:b6:a1:e8:a3:b4:1f:ed:14:f2:07:39:89:d0:e4:
         7b:70:d5:20:7a:17:d6:e6:94:87:03:70:1d:53:39:40:35:a3:
         ce:2f:31:03
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAJVJMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzAyMTcwMzE5MDJaFw0yNDAyMTcwMjQ2NTlaMDMx
MTAvBgNVBAMTKDA1ODQ0Q0EzMUQ3OEFFQkY1MjExMURFMzc5RUZGMTlCOUZENDU2
Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7X0qInlxETxTXjwcz
b8d8bjc2Sb/BFJZMK0LHneiAx4M1m75Sqbeh2+yb3mx4kObqR6G2ytdoOQE78s2y
zQdkqa2IK1J2DOlFxHKagyEBY3zf4d/tN04OTo0x2gKKnD98aIZKINWW7i5GEv+J
aPdFvYdaFXblL02VHLiEQ4PkaG4B85ced+WmctKde/G/BeOw9u2wk86m7JMVmbSw
NmeaqfeOP+xT5kqCtDw10+KlJHZ2WdG8HdM35c+IfPqzHueROkyu1FcJp9EQyXSz
NYRHoc6v/OMz1TE08Czv9OL9gog3nadoNNUqukukM6pXfCB1BO80kkrdV1skqIks
3O1lAgMBAAGjggKaMIICljAdBgNVHQ4EFgQUBYRMox14rr9SER3jee/xm5/UVssw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIy
My8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yMjMvQllSTW94MTRycjlTRVIzamVlX3htNV9VVnNzLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDBm
BggrBgEFBQcBBwEB/wRXMFUwUwQCAAEwTTALAwMBPM4DBAI8zggwCwMEBDzOEAMD
BDzAAwMAc7cDBAZ2kAAwCwMEBXaQYAMDAHaQMAwDBAfa8YADBAPa8ZAwCwMEBdrx
oAMDAdrwMA0GCSqGSIb3DQEBCwUAA4IBAQB5RlZAQfcTfjUpjPDJUrGPkZnqV5B0
zFAXz36K2cTdGjbb3mNzioRR5RWnqNbadVDo8EreG6Wdy6Ah1jyGc3CfUiB+rPHN
ct7WsoEYd78Dmg28C6SSmJ1yXk1xGTA003+1gfd5ZFqYr2RXiLE7aHeTazTBBWGg
vXB+TMQJt8AMyIKn5yRQOu99pce2OTiMecb16AM90eWbc1b7O3vo+y1YfjOrEHyM
nb83TD91E9roWTlSA1BpAtFeEQAv1/qwyXIYcEPekZpuWzQMtlMya2PsAIT/+Ozm
rep1VhQDtqHoo7Qf7RTyBzmJ0OR7cNUgehfW5pSHA3AdUzlANaPOLzED
-----END CERTIFICATE-----