Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/D1N4Xi9nBUC2TtSutsL_eAOmbHE.cer
File:                     D1N4Xi9nBUC2TtSutsL_eAOmbHE.cer (raw, json)
Hash identifier:          pBON2Litgs06s18QhJUUvWPNlsQsb+QHfqpX1EHsWqE=
Subject key identifier:   0F:53:78:5E:2F:67:05:40:B6:4E:D4:AE:B6:C2:FF:78:03:A6:6C:71
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       788F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/D1N4Xi9nBUC2TtSutsL_eAOmbHE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 07 Jun 2021 20:30:17 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59050

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30863 (0x788f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  7 20:30:17 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0F53785E2F670540B64ED4AEB6C2FF7803A66C71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:b1:d1:ea:a7:6d:94:4c:1e:9d:86:22:21:
                    27:33:03:45:10:7a:65:aa:b6:96:ec:3f:80:a1:3e:
                    50:3e:9e:92:84:f8:26:6f:4a:6b:d3:bb:45:d7:9e:
                    09:bb:32:6c:9f:aa:d9:f7:59:f0:4a:08:f8:f1:3e:
                    30:69:39:af:49:ec:dc:57:2c:a9:9f:e5:66:ce:46:
                    28:9a:8e:1c:b3:26:7a:8c:5d:e5:17:ee:92:4c:64:
                    b2:29:9f:66:99:7c:31:2e:b8:ea:02:5b:8b:bf:2b:
                    88:84:95:02:a6:5e:20:09:ce:b8:30:51:4c:2c:87:
                    08:ae:b0:7b:cf:f9:8d:1c:e3:4b:92:8b:61:5f:be:
                    3a:42:f9:ee:a9:33:4b:4f:95:66:f7:28:87:30:aa:
                    15:c9:6d:bb:f4:b8:5e:98:fa:96:86:d4:c6:9e:66:
                    e2:e9:2e:f4:43:c7:32:a9:cc:a0:9a:e8:99:e0:e9:
                    91:5a:e7:5d:21:f5:46:ac:4d:36:62:d2:11:fd:f8:
                    3a:d0:21:b4:99:59:be:c4:e8:4b:68:59:f2:db:8b:
                    df:b8:d6:ee:a4:68:31:0c:67:15:19:0f:60:f6:d8:
                    43:0d:23:f3:9e:b7:f1:65:e5:1e:5e:40:68:23:93:
                    f6:60:42:2d:3b:fc:c3:1f:b0:64:b8:b8:93:d8:1c:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:53:78:5E:2F:67:05:40:B6:4E:D4:AE:B6:C2:FF:78:03:A6:6C:71
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/D1N4Xi9nBUC2TtSutsL_eAOmbHE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59050

    Signature Algorithm: sha256WithRSAEncryption
         54:22:c4:80:de:0e:2e:ec:b5:b2:b0:43:81:f9:3d:1d:5b:9d:
         af:e8:b3:0e:65:58:ce:06:81:06:38:0f:18:12:84:13:5e:41:
         73:0e:0c:62:50:f0:4b:70:97:17:87:33:9e:c4:e2:72:d0:1a:
         70:20:88:38:80:12:0e:2a:cc:02:40:21:36:23:96:bf:97:3a:
         76:8e:a2:4b:e2:5e:5a:dc:f5:15:53:2d:a3:2d:63:cc:ee:1f:
         7d:89:cc:54:46:a9:e9:6c:e4:61:ef:10:68:12:58:85:a6:f4:
         cf:26:3e:14:4b:b3:64:d3:57:d6:57:ce:96:80:d5:07:61:67:
         e2:2a:59:14:32:be:7a:e1:ba:3b:e1:5d:51:65:e9:7e:bd:66:
         f7:62:71:5a:f8:87:c9:27:ad:4f:67:d2:a6:7b:e3:ea:7c:76:
         34:10:84:a7:db:0d:47:ab:a4:3e:c0:45:94:14:ae:2e:88:21:
         87:d3:0b:b7:cb:90:b6:85:4a:2c:68:85:ac:44:5d:a8:0b:fe:
         2d:a9:3f:29:84:26:2b:d2:45:a4:fe:b0:b8:38:62:c5:89:f9:
         6d:b5:a8:d8:85:c2:31:ab:e2:a7:ca:f0:be:ef:72:fb:42:11:
         ed:2b:cc:ec:d2:a1:b3:ce:24:0c:77:0c:98:77:6a:62:c5:42:
         93:a1:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org