Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ixv8FEdmX95sHfobphZ606qEX1c.cer
File:                     Ixv8FEdmX95sHfobphZ606qEX1c.cer (raw, json)
Hash identifier:          iZweiIEKSZqkvm63hhTrMth+ZRNG76Tf17rEvaxMCJQ=
Subject key identifier:   23:1B:FC:14:47:66:5F:DE:6C:1D:FA:1B:A6:16:7A:D3:AA:84:5F:57
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7DE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2203/Ixv8FEdmX95sHfobphZ606qEX1c.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2203/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 13 Jan 2022 20:00:25 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59039
                          IP: 61.8.160.0/20
                          IP: 103.13.196.0/22
                          IP: 124.108.8.0/21
                          IP: 2405:7d40::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32227 (0x7de3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan 13 20:00:25 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=231BFC1447665FDE6C1DFA1BA6167AD3AA845F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:3d:a8:80:d4:f0:4e:65:23:95:9f:41:86:
                    c2:de:46:1d:c8:d1:d3:51:e4:77:38:bf:a7:96:6d:
                    97:f5:dc:69:95:4e:a4:23:6e:18:49:5a:cd:ad:79:
                    fd:d4:64:43:c6:a8:ca:b6:3b:06:9a:68:5b:27:47:
                    b7:b0:fc:7f:c7:92:57:c8:38:d2:d1:c1:a0:b0:48:
                    36:9a:ad:2f:5f:ad:c5:88:17:bc:b4:44:56:48:2b:
                    69:fd:ec:ae:aa:d5:93:d3:d0:82:d1:22:c0:ee:30:
                    8e:bf:b7:8a:64:c3:01:c6:20:f2:e5:d1:ee:f6:47:
                    bf:ae:48:07:08:bc:2c:ab:eb:67:df:ed:60:a2:fe:
                    d1:24:df:bd:15:a8:47:8f:e0:c9:32:e3:fd:57:45:
                    5b:71:58:8d:c5:15:2f:f0:97:9b:00:3d:fb:c8:30:
                    39:2a:ae:b9:88:c3:47:41:d7:1c:06:e7:5a:23:6c:
                    3e:8b:45:11:00:17:cf:86:af:35:44:c6:a4:15:a8:
                    95:b8:63:9a:c5:74:d8:98:c7:e1:76:64:65:89:ea:
                    cd:b5:06:ca:9e:e0:b0:b0:ad:6d:d0:9e:78:9b:74:
                    b3:3b:31:8d:dd:8f:49:b5:85:17:ec:ca:ab:cd:f7:
                    60:f1:85:30:c5:fa:41:de:0d:76:b4:21:92:b8:e0:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1B:FC:14:47:66:5F:DE:6C:1D:FA:1B:A6:16:7A:D3:AA:84:5F:57
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2203/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2203/Ixv8FEdmX95sHfobphZ606qEX1c.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59039

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.8.160.0/20
                  103.13.196.0/22
                  124.108.8.0/21
                IPv6:
                  2405:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:6a:e5:69:7f:02:f5:aa:13:a5:69:11:98:17:e4:21:bd:82:
         08:54:00:af:ef:1c:9a:2d:2d:a6:91:f6:ea:e0:58:c8:f9:64:
         a5:f3:a0:ba:2d:85:9f:40:52:5b:c4:70:49:b2:85:de:5b:47:
         d2:b3:84:c8:38:62:8d:95:62:15:e9:8c:88:6d:49:df:20:19:
         0b:74:53:94:3a:eb:fd:be:12:a6:6f:8a:87:8e:5e:9d:33:78:
         e8:24:fb:79:89:dd:f4:1b:d4:00:a2:71:7f:58:14:d8:77:8a:
         34:42:aa:83:5e:4d:1c:65:75:a4:bc:5f:cd:52:9c:35:74:4f:
         c4:bc:44:d1:87:e7:c1:c7:c0:2f:0f:4a:48:54:44:74:d3:c7:
         6d:d2:a2:92:a1:3a:44:e8:32:28:7b:ea:14:56:1a:8c:fb:29:
         42:f6:81:65:f6:2f:96:7a:73:94:23:19:7d:4c:6f:5b:5e:c4:
         ff:b4:61:68:e5:f9:dd:f4:f0:4b:e6:c3:66:33:5b:73:db:30:
         f2:fa:46:09:a5:fb:b8:ba:9f:cf:a1:3d:1d:0d:1f:cd:90:a6:
         db:c5:50:6f:6f:af:ff:ed:19:59:52:a3:ee:3e:97:6f:12:38:
         72:67:96:36:35:6e:c0:99:d8:3a:f5:47:65:a4:ba:dd:ac:11:
         72:05:04:12
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICfeMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIyMDExMzIwMDAyNVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoMjMxQkZDMTQ0NzY2NUZERTZDMURGQTFCQTYxNjdBRDNBQTg0NUY1
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALyfPaiA1PBOZSOVn0GG
wt5GHcjR01Hkdzi/p5Ztl/XcaZVOpCNuGElaza15/dRkQ8aoyrY7BppoWydHt7D8
f8eSV8g40tHBoLBINpqtL1+txYgXvLREVkgraf3srqrVk9PQgtEiwO4wjr+3imTD
AcYg8uXR7vZHv65IBwi8LKvrZ9/tYKL+0STfvRWoR4/gyTLj/VdFW3FYjcUVL/CX
mwA9+8gwOSquuYjDR0HXHAbnWiNsPotFEQAXz4avNUTGpBWolbhjmsV02JjH4XZk
ZYnqzbUGyp7gsLCtbdCeeJt0szsxjd2PSbWFF+zKq833YPGFMMX6Qd4NdrQhkrjg
3oUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQjG/wUR2Zf3mwd+humFnrTqoRfVzAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjIw
My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yMjAzL0l4djhGRWRtWDk1c0hmb2JwaFo2MDZxRVgxYy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOafMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQEPQigAwQCZw3EAwQDfGwIMA0EAgACMAcDBQAkBX1AMA0GCSqGSIb3
DQEBCwUAA4IBAQCLauVpfwL1qhOlaRGYF+QhvYIIVACv7xyaLS2mkfbq4FjI+WSl
86C6LYWfQFJbxHBJsoXeW0fSs4TIOGKNlWIV6YyIbUnfIBkLdFOUOuv9vhKmb4qH
jl6dM3joJPt5id30G9QAonF/WBTYd4o0QqqDXk0cZXWkvF/NUpw1dE/EvETRh+fB
x8AvD0pIVER008dt0qKSoTpE6DIoe+oUVhqM+ylC9oFl9i+WenOUIxl9TG9bXsT/
tGFo5fnd9PBL5sNmM1tz2zDy+kYJpfu4up/PoT0dDR/NkKbbxVBvb6//7RlZUqPu
PpdvEjhyZ5Y2NW7Amdg69UdlpLrdrBFyBQQS
-----END CERTIFICATE-----