Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GLwyaMJtzEWpSxf1FQGHIqBkFt8.cer
File:                     GLwyaMJtzEWpSxf1FQGHIqBkFt8.cer (raw, json)
Hash identifier:          JjpSUdLHv8xjxFvVRt2nIvlw6/OI9Io5g+0GWKXByLE=
Subject key identifier:   18:BC:32:68:C2:6D:CC:45:A9:4B:17:F5:15:01:87:22:A0:64:16:DF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7754
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GLwyaMJtzEWpSxf1FQGHIqBkFt8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:20 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 137718
                          IP: 103.159.142.0/23
                          IP: 180.184.0.0/16
                          IP: 2406:d440::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30548 (0x7754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:20 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=18BC3268C26DCC45A94B17F515018722A06416DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:32:77:0d:a1:7e:d8:55:d1:b1:45:7c:64:
                    2e:cc:c8:ca:ed:72:e5:65:1d:9c:15:1c:6e:26:65:
                    3e:ec:1b:75:b9:e0:63:e3:ef:d0:c9:66:ba:a9:a3:
                    61:db:e3:06:11:af:1d:de:0d:96:4b:b5:c8:17:39:
                    c4:b1:2a:19:17:d1:5b:37:4d:39:69:a1:9a:b4:da:
                    1a:fb:88:9f:9e:f6:54:2d:38:af:39:77:17:4e:0e:
                    ca:9d:62:89:23:fe:8e:c6:35:e8:fa:d7:42:41:72:
                    40:84:14:db:db:a1:ad:f1:07:9e:a4:07:45:26:08:
                    41:48:20:11:ea:45:48:12:9b:ee:b6:b1:41:aa:58:
                    e1:96:19:c0:26:4f:85:41:38:7f:1d:e0:60:54:f9:
                    d3:fd:79:24:ad:bd:da:f3:40:14:d7:04:24:7b:f7:
                    40:7d:7f:ca:12:13:5a:6e:42:ad:54:d9:2c:b9:7a:
                    b1:dd:36:23:6f:a5:2f:98:fc:1b:d0:8e:79:cb:6d:
                    f9:f3:9c:07:43:f5:50:12:e6:bd:51:96:84:d1:04:
                    ef:25:b4:03:9f:c1:83:10:c0:87:d6:d3:8e:63:1a:
                    d2:b1:70:02:9e:67:96:ae:bf:c9:fd:f8:95:a0:7a:
                    40:e4:df:c0:b5:5b:66:7f:3a:fc:6e:30:72:9e:85:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:32:68:C2:6D:CC:45:A9:4B:17:F5:15:01:87:22:A0:64:16:DF
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GLwyaMJtzEWpSxf1FQGHIqBkFt8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137718

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.142.0/23
                  180.184.0.0/16
                IPv6:
                  2406:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:62:56:27:fe:72:da:2e:e2:41:cf:dd:27:92:df:18:48:
         37:43:ec:9b:6e:a2:7c:aa:54:9e:b1:9b:53:dd:8e:5f:71:77:
         4d:79:b3:77:7b:95:6a:1a:83:e3:52:d1:ae:d1:d9:f1:a9:df:
         6f:db:58:da:fa:e7:51:27:ed:b0:12:56:d7:52:46:32:24:74:
         c9:71:0a:8e:f3:d7:9e:23:e1:fb:2c:0a:59:f2:73:8c:b4:5e:
         79:46:85:2f:ab:4d:91:63:ae:63:1d:72:cd:28:3c:cf:b4:a8:
         cb:f7:14:8b:83:37:a0:24:0e:0b:33:93:c4:c6:21:09:0c:ea:
         68:34:94:5f:ed:49:c5:54:eb:af:c9:5f:b0:2c:81:a1:d1:c4:
         0b:de:2c:c7:35:bb:bc:12:43:37:9e:24:1a:22:8e:c6:c7:70:
         3a:26:9a:3a:b5:f8:69:83:4e:39:38:d9:37:91:e3:3a:e3:d9:
         05:c9:ac:25:ff:27:3c:7f:3c:9c:b0:96:4d:4a:85:98:5c:37:
         a0:ab:fd:ff:73:6f:30:57:c1:a6:15:fd:36:f8:30:46:09:92:
         f8:de:ce:0a:0d:b0:10:de:8c:46:14:f1:9b:fb:c3:70:44:f3:
         9d:e0:a2:7b:4d:d5:67:69:62:98:e1:16:c0:83:ac:54:14:d3:
         cb:a0:da:23
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICd1QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDMyMFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoMThCQzMyNjhDMjZEQ0M0NUE5NEIxN0Y1MTUwMTg3MjJBMDY0MTZE
RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMPnMncNoX7YVdGxRXxk
LszIyu1y5WUdnBUcbiZlPuwbdbngY+Pv0MlmuqmjYdvjBhGvHd4Nlku1yBc5xLEq
GRfRWzdNOWmhmrTaGvuIn572VC04rzl3F04Oyp1iiSP+jsY16PrXQkFyQIQU29uh
rfEHnqQHRSYIQUggEepFSBKb7raxQapY4ZYZwCZPhUE4fx3gYFT50/15JK292vNA
FNcEJHv3QH1/yhITWm5CrVTZLLl6sd02I2+lL5j8G9COectt+fOcB0P1UBLmvVGW
hNEE7yW0A5/BgxDAh9bTjmMa0rFwAp5nlq6/yf34laB6QOTfwLVbZn86/G4wcp6F
FN8CAwEAAaOCAoUwggKBMB0GA1UdDgQWBBQYvDJowm3MRalLF/UVAYcioGQW3zAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zMDQ0L0dMd3lhTUp0ekVXcFN4ZjFGUUdISXFCa0Z0OC5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAhn2MDMGCCsGAQUFBwEHAQH/BCQwIjAR
BAIAATALAwQBZ5+OAwMAtLgwDQQCAAIwBwMFACQG1EAwDQYJKoZIhvcNAQELBQAD
ggEBABm0YlYn/nLaLuJBz90nkt8YSDdD7JtuonyqVJ6xm1Pdjl9xd015s3d7lWoa
g+NS0a7R2fGp32/bWNr651En7bASVtdSRjIkdMlxCo7z154j4fssClnyc4y0XnlG
hS+rTZFjrmMdcs0oPM+0qMv3FIuDN6AkDgszk8TGIQkM6mg0lF/tScVU66/JX7As
gaHRxAveLMc1u7wSQzeeJBoijsbHcDommjq1+GmDTjk42TeR4zrj2QXJrCX/Jzx/
PJywlk1KhZhcN6Cr/f9zbzBXwaYV/Tb4MEYJkvjezgoNsBDejEYU8Zv7w3BE853g
ontN1WdpYpjhFsCDrFQU08ug2iM=
-----END CERTIFICATE-----