Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
File:                     FP89ERRuUxbiP-f4VCysMT_W9RA.cer (raw, json)
Hash identifier:          SQJ1hkUdDwDAwYpirULG+teJrledtDG9LCjQhCN6AZk=
Subject key identifier:   14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7BF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 28 Oct 2021 06:29:40 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 49.128.4.0/22
                          IP: 103.31.236.0/22
                          IP: 103.244.116.0/22
                          IP: 223.29.252.0/22
                          IP: 2403:6380::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31734 (0x7bf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct 28 06:29:40 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:f8:e4:d9:74:b3:9d:6f:94:2a:84:0d:cf:
                    55:23:a9:95:f2:f4:1a:bb:7d:f3:d5:b4:36:7b:e4:
                    75:e2:e3:59:a7:02:34:5d:d3:ac:7b:ba:aa:3f:0b:
                    27:cc:68:d8:f1:32:88:79:2d:55:0d:ac:8d:72:77:
                    11:9f:76:72:b7:0e:59:f0:ec:e3:e0:28:15:fd:09:
                    ad:d1:de:e5:ff:ab:d5:5d:e5:71:82:34:01:1e:0b:
                    47:e1:4a:e0:47:11:51:a7:c2:e4:cd:5f:7e:12:80:
                    d1:37:66:97:99:e7:7f:ac:e5:0c:01:61:f0:30:c8:
                    31:b4:c2:b9:c1:30:c7:15:b8:68:bf:a5:2a:8b:5e:
                    7c:74:0c:af:73:6f:4c:6b:4b:46:1b:51:13:cf:c0:
                    ef:40:39:3f:4d:2f:ed:05:0a:34:a0:12:fd:0f:f3:
                    d2:79:23:a0:22:62:23:43:da:17:24:6b:4f:68:91:
                    74:af:ff:61:1f:76:ef:e6:19:e0:1c:43:d5:8d:4d:
                    9b:03:6f:8d:94:18:80:38:15:1a:ca:66:c2:55:fc:
                    bb:2f:77:40:e1:30:f6:89:c5:0d:25:b3:27:87:9d:
                    ae:aa:51:05:7d:d5:91:17:e9:e3:29:fe:83:aa:08:
                    08:1c:40:14:ea:86:92:bd:10:97:74:7e:10:e2:42:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.4.0/22
                  103.31.236.0/22
                  103.244.116.0/22
                  223.29.252.0/22
                IPv6:
                  2403:6380::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:5a:49:99:65:86:5f:a8:56:46:ee:13:4b:d7:49:16:0d:bf:
         aa:9f:0a:ef:01:c7:69:91:96:86:6c:b5:95:09:e8:2d:7a:4d:
         02:22:80:74:e4:25:00:9d:57:18:a0:5e:0d:05:8a:ef:af:be:
         f1:fb:ef:4e:f9:08:14:c4:22:13:de:91:86:cb:6c:42:23:b7:
         b6:4a:23:f7:a9:8d:1f:e5:38:cf:30:d3:37:9a:ff:df:28:38:
         5f:d4:59:9a:53:58:af:e5:d7:a7:35:39:f0:d1:5e:ea:54:f5:
         0d:0b:8e:0d:06:e8:ca:32:0b:b5:a5:c8:04:ab:f5:1f:78:c8:
         3a:37:5d:f8:e6:da:78:d0:b3:92:e2:ba:fa:74:96:a3:2d:ab:
         62:c5:b7:15:44:cf:3d:46:63:5b:e2:bc:5d:1d:cb:40:87:70:
         c2:72:87:6b:31:1b:58:0e:d0:89:0c:58:c7:4b:4f:8a:00:d5:
         de:4c:98:23:32:39:66:65:d9:fa:3f:2d:9c:4a:c2:e0:38:06:
         fd:22:08:5e:c7:1b:c3:31:7e:8c:f1:6a:11:9f:f6:c4:7e:df:
         81:ee:59:6e:63:cf:16:b5:2c:f7:73:1b:7d:43:c2:09:12:0d:
         8e:48:eb:d7:10:c4:78:67:cc:69:c9:2c:bd:97:51:0f:1c:b5:
         b9:45:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----