Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/J0ng1HXbKBoVyXnh3yXXgVCc6Is.cer
File:                     J0ng1HXbKBoVyXnh3yXXgVCc6Is.cer (raw, json)
Hash identifier:          jO4wcertMOTBvVx3t3FLxoySASoyc8IqZJ9l3wax5fw=
Subject key identifier:   27:49:E0:D4:75:DB:28:1A:15:C9:79:E1:DF:25:D7:81:50:9C:E8:8B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       770E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/J0ng1HXbKBoVyXnh3yXXgVCc6Is.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:06 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45079
                          IP: 101.52.0.0/16
                          IP: 2402:6f40::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30478 (0x770e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:06 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=2749E0D475DB281A15C979E1DF25D781509CE88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:2a:a8:b8:09:61:a6:a7:cf:e4:a6:76:0c:
                    09:4c:fe:6f:24:36:d4:2e:13:e2:f5:86:ed:f2:a7:
                    a4:d7:2e:ef:50:36:35:e3:c2:4b:2a:4b:66:a5:60:
                    93:d3:46:49:47:95:3e:cb:8e:ce:37:14:7a:5b:76:
                    ea:31:ca:64:7d:6c:dd:7d:5a:3c:65:6d:b8:65:82:
                    9f:5f:37:30:c1:09:85:53:a7:ec:3c:5f:8f:d4:41:
                    6f:cc:ab:0a:f7:33:d8:d3:3e:ad:a1:47:5d:57:2c:
                    f8:1f:f8:e0:9c:6e:70:bc:5f:f2:a1:3c:cf:53:61:
                    77:32:b4:a9:45:39:32:84:55:c7:53:a8:34:d0:00:
                    cc:1f:4b:96:62:91:4f:b0:76:08:d4:5f:25:75:2c:
                    e1:19:07:2c:58:33:e7:96:0d:d7:5e:32:3e:e9:f5:
                    40:db:7d:19:88:d2:01:e5:a7:f6:6f:68:51:dd:49:
                    a5:eb:d1:6e:30:4b:6f:6b:91:8a:0a:27:50:8e:1d:
                    42:8b:1d:b2:89:5e:cc:16:db:be:4c:73:14:d7:91:
                    f9:2e:b1:8d:6b:a1:e2:3f:c0:25:8a:a5:29:c7:a2:
                    e3:32:5c:5b:01:8d:58:9a:c1:cb:62:f5:be:51:04:
                    ee:bb:3f:75:20:bd:cd:67:9f:27:6d:cc:5a:4e:3b:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:49:E0:D4:75:DB:28:1A:15:C9:79:E1:DF:25:D7:81:50:9C:E8:8B
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/J0ng1HXbKBoVyXnh3yXXgVCc6Is.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45079

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.0.0/16
                IPv6:
                  2402:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:91:1d:f3:89:37:03:95:34:fa:5a:95:bd:22:a4:03:2c:58:
         6d:af:c8:b9:01:26:9b:00:9e:bc:55:99:9c:24:57:a9:87:45:
         2c:2b:20:3d:9f:6c:73:12:ff:f8:a4:7b:8e:5b:69:27:f2:7f:
         f5:e4:64:78:15:ed:30:ba:88:b6:e0:d7:b8:3e:5a:02:86:39:
         64:b5:d1:65:2a:55:3d:f5:76:e1:66:58:f3:aa:d9:b3:74:64:
         50:ae:01:ef:e5:a0:84:a5:d6:34:21:d1:91:b2:b5:5d:da:13:
         54:c0:ff:7a:e8:8e:73:94:6a:41:08:b2:3a:2a:c8:c6:88:78:
         0b:a3:47:cb:ce:75:b2:75:49:1d:c2:d1:9c:fb:9e:b7:95:b1:
         f4:58:4b:5d:33:b6:ef:0f:c7:e9:96:ea:9b:83:6b:cf:51:45:
         f3:ae:37:5e:9a:f9:a8:31:d3:eb:45:89:e3:a5:72:6b:dd:31:
         9f:7c:8a:d3:38:d2:5c:30:12:cc:83:12:40:7e:a6:d5:55:20:
         9d:11:59:ce:c2:ca:aa:7a:86:63:83:23:e9:b2:58:b6:c1:75:
         b0:70:c4:b1:1b:65:c0:dc:56:ff:c0:88:5b:76:9d:0e:c2:ee:
         51:32:c0:54:c2:8c:1c:cf:95:30:43:f7:8c:a4:55:4f:ce:94:
         b8:5a:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----