Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/E_unznP6_RA8kCuUTiZZ7w5lzBM.cer
File:                     E_unznP6_RA8kCuUTiZZ7w5lzBM.cer (raw, json)
Hash identifier:          7QmYaDwqSsoCSEXBi8ZAdcYRQUol/SrwMqbIQePu7W0=
Subject key identifier:   13:FB:A7:CE:73:FA:FD:10:3C:90:2B:94:4E:26:59:EF:0E:65:CC:13
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       1E6F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/E_unznP6_RA8kCuUTiZZ7w5lzBM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 12 Aug 2021 02:16:36 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 139.220.0.0 -- 139.220.191.255
                          IP: 139.221.0.0/16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7791 (0x1e6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Aug 12 02:16:36 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=13FBA7CE73FAFD103C902B944E2659EF0E65CC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:6d:bf:53:97:b9:67:ae:7e:0f:8b:80:16:
                    75:f6:48:4c:0d:10:da:02:17:1e:05:7d:94:66:e6:
                    63:22:a6:6d:63:7c:ac:a4:83:a3:95:fe:b0:69:5a:
                    0b:81:f9:21:30:46:b7:e1:d9:0d:b3:a4:14:e4:80:
                    64:2a:61:24:38:7c:26:c1:f1:f5:08:53:08:d6:68:
                    f8:54:32:80:0c:ac:fc:b7:40:76:1c:fa:c6:50:d6:
                    8f:27:19:78:70:84:da:a7:18:aa:e8:e4:45:83:6b:
                    18:05:31:37:21:94:d8:4c:bc:5a:af:46:c5:b9:15:
                    d7:b1:f0:9d:b3:e5:45:95:96:9f:58:cc:2f:6d:27:
                    f1:5a:f1:76:2d:db:97:35:f0:0e:45:08:06:a9:11:
                    0e:cd:a2:90:74:4b:6d:85:22:91:a3:f8:c6:05:7e:
                    2b:85:31:a7:c9:31:09:ff:99:80:44:ba:89:97:87:
                    dc:0f:f2:e4:91:95:3d:48:6c:c0:fd:08:f5:52:ea:
                    18:f3:05:8a:14:0d:a5:4e:14:a6:16:60:d8:3d:60:
                    fa:a7:ae:1d:03:60:25:5d:d0:cd:e4:2b:0a:a7:13:
                    f0:99:9d:8a:55:14:11:d9:9d:02:42:cd:3b:f3:3a:
                    86:b8:ec:da:76:64:3b:2f:cc:83:bb:ea:26:15:7c:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FB:A7:CE:73:FA:FD:10:3C:90:2B:94:4E:26:59:EF:0E:65:CC:13
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/E_unznP6_RA8kCuUTiZZ7w5lzBM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.220.0.0-139.220.191.255
                  139.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:28:42:cd:ca:8d:39:61:db:b5:44:f7:b4:73:ab:3c:ef:94:
         8a:d7:32:e8:f6:d5:94:cb:50:ed:df:03:1c:65:a4:1f:04:c7:
         8b:3e:74:c4:35:4a:31:91:32:03:3b:7b:1c:89:45:8d:77:32:
         87:e5:bd:74:66:e5:89:87:cf:c7:0f:5c:60:5e:6f:da:e0:55:
         11:b0:30:20:ee:a9:56:82:89:20:78:9a:c7:21:50:2c:ad:f5:
         4c:e2:46:b5:d8:02:87:17:4e:02:9b:18:f9:d1:1f:84:aa:bf:
         d9:5f:44:b9:57:3f:ba:5e:c9:2b:23:eb:8a:4f:11:2a:73:7c:
         1a:be:f0:ea:2f:18:c5:77:bc:77:c3:0f:e6:09:12:e2:84:70:
         74:92:cb:8c:ce:29:dc:9f:93:1f:32:76:85:76:74:9d:53:86:
         a6:68:0f:fc:8d:69:dd:ee:37:15:c5:f2:43:17:6c:36:85:a6:
         fb:cc:73:13:49:83:89:ce:63:e3:dc:76:74:6b:8b:33:ce:56:
         9b:6e:19:23:90:19:9b:d7:f8:31:d2:8c:70:00:4c:ce:a5:39:
         eb:a8:d9:fb:f0:4d:63:44:17:04:5b:ea:71:35:06:ad:e8:2b:
         7f:26:7b:dc:d1:a9:6b:87:9f:2c:e2:27:c5:b6:46:69:1c:2a:
         e7:22:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org