Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/FeR-TdESXTuuB1F1S7fclS9n5IY.cer
File:                     FeR-TdESXTuuB1F1S7fclS9n5IY.cer (raw, json)
Hash identifier:          gOgejO+KSghqLrFjy5PBVoXQZchY+X2ObefeZFQgQi8=
Subject key identifier:   15:E4:7E:4D:D1:12:5D:3B:AE:07:51:75:4B:B7:DC:95:2F:67:E4:86
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7B88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/FeR-TdESXTuuB1F1S7fclS9n5IY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sat 09 Oct 2021 20:07:13 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 9392
                          IP: 103.122.240.0/22
                          IP: 2405:94c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31624 (0x7b88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct  9 20:07:13 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=15E47E4DD1125D3BAE0751754BB7DC952F67E486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:e4:6d:29:4f:38:00:02:74:cd:28:09:c3:
                    00:d7:3f:91:01:f5:b5:d3:02:d8:a7:0f:e2:1a:79:
                    ac:d3:c6:a7:ed:20:a3:3e:35:e8:24:40:e4:c4:95:
                    84:e3:db:7a:4d:b1:7f:7f:b1:95:b9:f9:ef:8e:cc:
                    c8:2e:a4:29:18:09:bb:7b:e3:33:d4:5a:d2:35:ef:
                    0e:c7:91:d9:83:5e:28:f2:0f:6a:1d:5f:e6:9a:8c:
                    01:15:c8:68:f4:5d:dd:5f:4e:96:ba:57:82:51:93:
                    8b:4f:a0:e4:19:10:46:e9:08:04:e5:ec:a1:cc:45:
                    85:88:2d:90:3f:57:81:92:7b:03:29:c4:39:9d:ea:
                    1a:ca:6a:8a:33:72:2c:20:75:c4:06:6a:30:f7:f5:
                    9f:0d:94:13:af:21:4d:51:4e:6a:26:d8:8f:57:3a:
                    41:5b:ed:41:5a:24:48:86:c8:31:d0:f9:b7:44:1f:
                    d4:a9:b2:d6:b0:07:d4:77:96:33:a1:2c:6d:4d:84:
                    aa:65:62:4f:07:0c:32:f7:0f:f0:17:6c:be:6a:5c:
                    3a:e8:cf:0e:0a:8e:d4:8e:8c:9c:e1:25:11:0b:53:
                    26:6c:a2:e1:b7:ec:d3:36:23:4f:59:35:0f:00:3c:
                    f6:8b:fb:3c:aa:1d:a5:c6:38:4a:1a:1f:4c:47:44:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:7E:4D:D1:12:5D:3B:AE:07:51:75:4B:B7:DC:95:2F:67:E4:86
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/FeR-TdESXTuuB1F1S7fclS9n5IY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9392

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.240.0/22
                IPv6:
                  2405:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:ea:1a:f4:b8:23:b7:85:d6:d6:20:69:4f:d9:f7:55:6a:
         f2:93:ee:58:18:01:05:63:18:c1:46:37:e6:16:8b:f4:f2:3f:
         2d:f6:ff:8d:58:e8:cb:95:00:48:3f:c7:9e:a6:3a:7a:92:54:
         ef:d4:5b:3c:ea:fc:3e:6f:43:14:3b:09:6c:66:ec:d7:d9:00:
         80:4d:ba:16:1d:5b:33:b4:8b:b8:90:23:a0:ef:8c:a9:29:67:
         d2:b4:e0:20:af:19:95:b6:63:a9:92:a5:b4:02:9e:bf:cf:77:
         51:a7:6f:a3:6e:a8:1d:cd:1f:98:43:93:2f:67:bf:cd:ea:80:
         4a:b0:d2:10:f8:19:a9:61:5e:1a:b0:77:2b:45:2b:74:ca:b9:
         54:9c:e6:aa:67:70:15:79:12:ea:e1:4b:e8:a8:bb:1f:c5:7e:
         3a:3e:7a:0d:67:74:69:d1:59:e6:b9:43:bb:ca:3b:78:7c:2b:
         b6:44:c3:cf:7a:57:fd:55:0f:a1:d8:78:a9:2e:dd:d9:aa:38:
         d1:44:67:4a:43:9b:b6:5e:ca:96:d3:e3:65:61:f2:fc:05:68:
         8f:67:cf:17:73:c7:b8:84:99:81:0d:c8:18:d2:b2:4d:a7:9f:
         31:aa:97:7e:34:9f:5f:84:88:f2:71:e7:50:e7:16:c2:95:56:
         86:5c:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----