Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/J0T3oLGTK2desx_RTNpQJV0oilw.cer
File:                     J0T3oLGTK2desx_RTNpQJV0oilw.cer (raw, json)
Hash identifier:          gUTh6sLJ9VCC/KI79d7sd3WaIyJ05zuvIS2NcUMeT/s=
Subject key identifier:   27:44:F7:A0:B1:93:2B:67:5E:B3:1F:D1:4C:DA:50:25:5D:28:8A:5C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/J0T3oLGTK2desx_RTNpQJV0oilw.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:07:00 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 56002
                          IP: 103.12.232.0/22
                          IP: 2405:ad00::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30714 (0x77fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:07:00 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=2744F7A0B1932B675EB31FD14CDA50255D288A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:e9:7f:73:4a:0b:2b:21:46:4a:09:be:57:
                    73:9c:fa:55:18:a8:1b:84:e0:65:b2:a9:be:30:16:
                    b7:20:07:50:24:59:95:96:d6:4c:a7:2b:39:78:1f:
                    5d:23:ba:37:65:a4:0f:28:f5:b9:62:5c:c4:8d:82:
                    98:b6:fc:36:79:6a:49:6c:2b:5f:67:be:80:cb:53:
                    07:d9:9e:25:49:76:46:ff:2f:cb:4e:f7:f3:ab:3d:
                    4f:71:9c:f5:1a:3f:ad:24:64:f4:c0:44:c1:00:5d:
                    6a:17:20:5c:b9:1e:43:07:48:44:d2:67:49:73:d4:
                    d0:10:fb:44:82:92:a1:1f:8b:b1:38:c0:77:df:0c:
                    6c:34:46:11:db:76:ea:96:d3:1a:84:4f:28:29:4b:
                    a9:51:7c:c9:92:ea:81:75:e8:c4:e9:75:70:6e:62:
                    26:f0:8a:a5:41:7c:62:8d:2e:98:9c:01:32:16:46:
                    b0:07:67:59:3d:3e:00:83:f2:f1:ac:9b:8b:fa:ed:
                    cb:96:c0:98:73:95:1e:94:d6:e9:0b:07:78:cf:91:
                    5b:9f:a4:5e:b5:3a:80:58:87:4e:1a:e3:5c:17:a4:
                    85:88:7a:ef:d2:3d:50:34:ad:5c:68:4f:01:f3:a5:
                    38:8b:53:b2:e2:c4:c3:45:df:0b:3d:a1:da:d8:1a:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:F7:A0:B1:93:2B:67:5E:B3:1F:D1:4C:DA:50:25:5D:28:8A:5C
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/J0T3oLGTK2desx_RTNpQJV0oilw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56002

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.232.0/22
                IPv6:
                  2405:ad00::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:23:16:42:01:e0:3a:d1:4b:c5:17:a5:71:7b:ca:9b:15:
         45:92:24:2c:5d:e2:70:c5:65:1f:c7:7a:32:ec:8b:86:87:0f:
         d5:2f:6f:94:2d:9f:bb:5d:0a:c4:df:5b:46:66:98:c4:69:22:
         57:a3:71:30:7b:e1:d5:3f:e6:87:63:3a:b7:0c:24:a5:06:ce:
         f2:e3:f8:c4:7c:46:0c:42:02:4f:9a:e4:c7:71:72:41:f4:a6:
         88:99:82:d4:a6:73:b2:d8:ae:98:1f:e4:34:ea:be:57:34:ac:
         c2:f9:e3:cb:c8:f5:0d:a1:4e:e0:66:89:dd:25:ef:da:96:15:
         fc:2b:f3:fa:ed:91:51:d1:29:4a:89:1b:0c:db:42:fd:15:d3:
         2e:99:37:77:ec:d0:73:d4:15:e4:86:19:75:02:2d:2a:bc:26:
         df:8f:3b:b5:95:f6:30:5a:75:4e:63:0d:ee:f4:a8:9c:a1:8f:
         9a:1b:df:4b:2c:59:02:37:17:78:a0:8a:c0:04:32:3a:95:eb:
         0c:10:08:7c:80:56:61:b0:eb:88:55:c8:83:ac:99:d7:71:d1:
         02:f1:80:c0:42:4b:ff:aa:93:47:15:17:8e:87:99:38:a5:3e:
         ec:74:fa:4a:ff:9c:23:4e:fb:6d:09:31:06:6e:ce:4c:8f:54:
         0d:74:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----