Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DbfKUNn9xuNtN5o4OkjdYFv5D5c.cer
File:                     DbfKUNn9xuNtN5o4OkjdYFv5D5c.cer (raw, json)
Hash identifier:          uuQOGvdOJh0UOhkxnCnNCpn9NDCX2CJZ4h4XkkLwOa0=
Subject key identifier:   0D:B7:CA:50:D9:FD:C6:E3:6D:37:9A:38:3A:48:DD:60:5B:F9:0F:97
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/DbfKUNn9xuNtN5o4OkjdYFv5D5c.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 29 Oct 2021 19:42:41 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45106
                          AS: 137725
                          IP: 43.255.72.0/22
                          IP: 49.152.0.0/14
                          IP: 103.239.44.0/22
                          IP: 111.208.0.0/14
                          IP: 2404:eb80::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31746 (0x7c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct 29 19:42:41 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0DB7CA50D9FDC6E36D379A383A48DD605BF90F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:d3:be:b7:b0:59:44:3c:1b:ed:1b:a9:b8:
                    cd:86:b9:81:1c:0f:d8:72:04:54:de:23:6d:a7:81:
                    53:bd:b2:64:0d:93:53:4b:91:21:81:28:c3:58:69:
                    43:e5:72:f3:45:e6:f8:22:73:44:c7:bf:3d:5f:9e:
                    cb:29:b7:3f:2c:88:4f:2b:a7:d8:ad:aa:fe:20:22:
                    2c:bb:f8:24:dd:de:66:8e:c5:2d:94:f4:44:22:ba:
                    87:5b:0d:42:f3:dc:3f:7f:2c:7b:9c:6f:d3:ce:6b:
                    9f:a6:e5:41:38:11:e8:a6:eb:7e:7a:a6:dc:f2:fa:
                    dd:3e:4a:f7:fe:a7:09:b2:52:dc:d3:d9:4b:f9:2a:
                    9a:fc:08:a9:ff:00:a5:cb:e1:a3:ab:9e:70:f0:8c:
                    ad:24:e1:8b:49:0e:26:cf:54:e7:a3:8c:bf:f1:9e:
                    3c:7b:0d:2f:c7:f3:7e:2d:1f:25:b0:ce:64:98:47:
                    2d:20:ea:73:b1:ce:d0:09:80:38:ce:d6:54:4a:32:
                    cb:12:c7:f2:64:0a:27:a3:14:b4:bd:1a:fe:09:ff:
                    ba:1f:f0:50:be:42:06:44:07:18:10:1c:e8:16:78:
                    72:de:1a:86:a5:d7:ec:a1:10:d0:75:0e:7d:11:92:
                    bc:02:ab:49:44:2e:d7:7c:0b:6f:5b:e4:55:93:f5:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:CA:50:D9:FD:C6:E3:6D:37:9A:38:3A:48:DD:60:5B:F9:0F:97
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/547/DbfKUNn9xuNtN5o4OkjdYFv5D5c.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45106
                  137725

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.72.0/22
                  49.152.0.0/14
                  103.239.44.0/22
                  111.208.0.0/14
                IPv6:
                  2404:eb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:78:89:b1:31:3a:69:c6:5a:48:77:cd:c4:59:96:7c:f7:
         7d:51:c7:fa:e1:56:93:41:d9:0d:ff:16:88:e2:c7:b5:94:cc:
         02:85:22:31:08:92:21:0b:9c:83:52:bb:25:0f:98:e2:78:12:
         d9:e5:59:ef:cd:e7:d0:b3:7b:bc:d7:c5:09:42:9b:ef:55:f2:
         24:3d:bd:6f:4b:93:f9:bf:d2:e3:70:dc:70:49:88:a6:25:7a:
         e0:8c:aa:29:f3:5a:2d:a6:76:81:b2:4a:f4:a8:62:fa:e0:dc:
         62:1a:a3:ff:63:b5:e3:51:35:90:ba:cc:c1:22:40:91:fb:34:
         56:f8:7a:f3:0f:94:74:de:16:40:69:97:f0:10:65:22:d4:a0:
         ee:ba:19:0f:69:c3:70:eb:50:7d:93:64:c7:cf:3e:15:07:2f:
         75:5b:93:13:81:17:f3:b1:34:1d:5c:a2:70:e8:37:96:cb:ba:
         9e:35:1a:5d:99:fb:bc:91:10:37:fe:ed:88:f1:b7:bb:80:d8:
         90:db:67:c2:bd:10:ae:d5:1e:90:7a:f6:a7:7c:bf:73:de:28:
         17:41:9d:c7:7f:d5:b4:cc:5d:68:83:e3:30:c1:77:dd:3d:13:
         ff:9a:e8:22:a3:09:27:1c:8f:79:86:5d:3c:06:67:fd:15:3a:
         a8:59:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----