Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HTLPihWXquZ3p9exq2zGJCz1f-Y.cer
File:                     HTLPihWXquZ3p9exq2zGJCz1f-Y.cer (raw, json)
Hash identifier:          o792xNsOI1BXMiOTipZUfvRdyywAdM8XdrzELbQMKSM=
Subject key identifier:   1D:32:CF:8A:15:97:AA:E6:77:A7:D7:B1:AB:6C:C6:24:2C:F5:7F:E6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7CB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/HTLPihWXquZ3p9exq2zGJCz1f-Y.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Wed 24 Nov 2021 20:17:42 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 58860
                          IP: 103.46.168.0/22
                          IP: 103.85.164.0 -- 103.85.179.255
                          IP: 2406:40c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31921 (0x7cb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 24 20:17:42 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=1D32CF8A1597AAE677A7D7B1AB6CC6242CF57FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:18:57:51:65:11:58:74:2a:46:72:14:a4:
                    2e:e9:5c:b5:14:b0:6a:d2:a6:0a:91:15:17:ef:11:
                    09:3c:f1:fd:6d:64:59:93:3a:dc:65:a9:9e:2a:7c:
                    9d:0e:e8:36:d7:6c:75:fe:33:8e:14:6d:2d:19:6d:
                    de:52:8b:30:ba:83:41:4a:d3:42:9d:b6:96:c8:cf:
                    95:48:6f:74:7c:3b:b7:1a:7d:c9:0f:29:d2:e0:90:
                    6f:9b:cc:11:46:59:3e:00:41:f7:76:67:04:17:96:
                    c9:cb:38:1c:49:fb:6b:98:4a:ad:05:a9:2b:d2:02:
                    36:7d:8c:33:9e:d4:56:1b:d4:90:6f:cc:b3:56:9d:
                    6c:ab:6e:3d:92:32:b6:2d:e9:1a:2e:05:25:5b:0f:
                    3c:55:41:a5:fe:9f:43:ab:35:58:6f:a8:42:38:e8:
                    d7:46:90:b3:17:c9:7e:d4:20:d7:5c:e4:e8:60:14:
                    a2:43:99:b4:08:a1:9b:2d:23:b8:5e:1e:d2:6f:d3:
                    cc:2e:b8:1f:25:49:38:32:1b:8e:da:17:45:a9:d9:
                    27:9c:95:d5:a1:da:ea:7b:5d:af:f5:3f:79:1d:57:
                    b6:46:1a:03:a3:0f:8a:d3:51:cd:cb:eb:96:bf:bb:
                    3e:a3:78:2a:98:23:93:f4:c8:2c:fd:0a:d1:35:5e:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:CF:8A:15:97:AA:E6:77:A7:D7:B1:AB:6C:C6:24:2C:F5:7F:E6
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1382/HTLPihWXquZ3p9exq2zGJCz1f-Y.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58860

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.168.0/22
                  103.85.164.0-103.85.179.255
                IPv6:
                  2406:40c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:83:c3:59:72:ec:3d:11:f8:73:23:1c:13:e7:28:2f:44:
         16:d0:4a:e8:03:24:f3:cc:d2:4f:49:e1:46:00:6f:a4:27:59:
         8a:a1:7d:d8:35:0e:c5:a1:39:81:a5:df:5b:04:c2:fc:6f:25:
         43:da:4c:88:a6:b3:86:a7:26:c2:19:d6:26:6e:b4:6c:46:1f:
         b5:99:77:6e:3e:3c:38:a0:4a:13:e8:3e:26:b5:03:a1:6b:60:
         a7:f1:ca:61:d2:fa:5a:c0:e5:a6:4a:f0:e1:92:07:18:8d:06:
         40:a8:92:5a:b1:cb:c0:4c:90:1c:ad:6a:95:8e:d7:9f:c4:90:
         05:32:07:84:6d:f4:fc:6c:5b:7d:e8:29:be:74:41:8a:91:8c:
         45:be:d1:20:ab:50:01:67:41:db:69:04:89:af:05:4e:fe:27:
         dd:09:fb:05:9d:61:ba:d4:91:d0:a5:21:f0:17:4f:f9:cb:0e:
         0d:4a:fc:3d:e0:b9:1d:14:29:ff:57:98:b7:8e:eb:a7:0b:45:
         08:22:ad:d2:c7:66:bc:46:0f:e9:50:81:27:c3:4b:0f:c8:7f:
         21:e4:f9:21:b1:fe:70:ce:a4:12:e7:a0:6f:61:59:1f:b6:d8:
         f3:06:e1:dd:47:ab:98:86:10:bc:97:0a:32:a6:af:f5:08:84:
         53:ff:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----