Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ds0jjWJ37cLBkruBodOS-H7CIbU.cer
File:                     Ds0jjWJ37cLBkruBodOS-H7CIbU.cer (raw, json)
Hash identifier:          8yUT++iLYrwkZz2ua85NUUzKHUHfikqQ55RirwjRrRQ=
Subject key identifier:   0E:CD:23:8D:62:77:ED:C2:C1:92:BB:81:A1:D3:92:F8:7E:C2:21:B5
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       2025
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/Ds0jjWJ37cLBkruBodOS-H7CIbU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 04 Nov 2021 20:14:41 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 140.210.32.0/19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8229 (0x2025)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Nov  4 20:14:41 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0ECD238D6277EDC2C192BB81A1D392F87EC221B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:06:4d:95:09:23:c5:4e:97:14:20:ad:00:b2:
                    66:e4:c9:52:6c:d1:7a:3e:ec:93:4d:bb:4d:fd:9a:
                    27:52:4f:8c:78:78:1e:83:f3:3a:6b:ec:14:54:6b:
                    bd:34:7a:7e:f6:85:03:03:2f:d4:1c:ac:ac:03:80:
                    20:e7:d5:15:18:4a:97:61:68:3f:d2:d9:31:c4:bb:
                    d8:1d:c1:94:05:79:95:79:91:7e:14:ca:d3:82:c0:
                    b3:b7:70:ef:25:09:0b:3f:14:2c:aa:86:0d:13:fd:
                    28:e2:b5:78:4d:e3:82:cb:c6:86:04:77:a2:a1:f3:
                    13:55:05:ba:b4:f7:3b:4c:c3:5e:75:a7:fb:c2:b3:
                    bc:19:63:b5:37:85:d7:a0:5a:99:71:dd:03:4d:fd:
                    00:fd:77:e7:fa:15:9c:44:62:b3:50:69:37:7a:45:
                    1d:07:5b:1e:e2:75:4c:d6:cc:cd:89:e5:5d:71:d9:
                    59:46:df:f5:26:df:42:e0:dd:87:42:17:8b:18:af:
                    be:a2:ce:a5:d1:84:27:f5:13:f3:b4:18:33:16:c3:
                    56:15:04:36:e9:6f:d1:0d:5c:86:b8:8d:ef:9e:bb:
                    e6:71:2a:46:ed:2c:e2:84:0d:06:59:c4:93:08:fb:
                    d6:24:8f:ed:21:95:6b:9d:a5:d6:8f:67:f0:18:5a:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:23:8D:62:77:ED:C2:C1:92:BB:81:A1:D3:92:F8:7E:C2:21:B5
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/Ds0jjWJ37cLBkruBodOS-H7CIbU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:0b:06:3c:28:18:21:62:f2:cd:fd:10:c4:54:a6:6e:6a:
         7a:dd:fe:cc:bc:00:91:8c:5b:ee:ba:9b:6e:fc:d0:c8:1f:14:
         30:46:79:0e:e9:96:93:e5:1f:62:0f:9c:29:8c:c8:ea:33:65:
         c2:87:8c:b2:b1:88:50:a2:05:0f:e7:c3:d9:31:97:e6:56:59:
         fe:29:54:3f:c3:e8:42:cc:3f:9e:7f:80:41:3c:ce:aa:44:db:
         a2:c6:d2:cd:07:0f:7f:ef:2d:ef:24:0e:18:c5:20:b7:d4:91:
         1b:1a:fa:23:59:d7:f5:7d:7b:5c:f6:54:9a:fa:d9:c8:30:e3:
         38:73:9f:41:6f:df:3b:88:fe:3a:a0:25:5e:de:6f:41:98:89:
         be:f8:4e:94:c4:b5:04:18:49:98:c0:3a:86:c2:84:8e:ab:fc:
         6e:8e:24:d5:e1:29:c3:a0:e7:e0:90:fc:ab:88:be:a7:6a:32:
         52:92:1a:2b:e0:7b:2f:1c:51:d5:a3:a2:57:9b:56:93:0c:e9:
         f3:26:78:75:0c:b3:86:a0:3e:b0:9b:32:63:b0:47:b2:35:71:
         3f:50:ce:d2:ba:bc:27:df:6c:28:f8:b2:f0:60:80:8c:00:ca:
         3e:10:03:cf:ad:27:d6:27:7b:53:86:7c:e2:5e:15:c3:e9:66:
         56:83:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org