Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JmPt2YRdiDlFAKLSmtMTk5ev84E.cer
File:                     JmPt2YRdiDlFAKLSmtMTk5ev84E.cer (raw, json)
Hash identifier:          4c2iSixyP7De0b5Z9Eowbq2AOZw9xLUiEyn+ls3kRHE=
Subject key identifier:   26:63:ED:D9:84:5D:88:39:45:00:A2:D2:9A:D3:13:93:97:AF:F3:81
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       776C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2645/JmPt2YRdiDlFAKLSmtMTk5ev84E.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2645/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:43 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59071
                          IP: 103.105.116.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30572 (0x776c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:43 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=2663EDD9845D88394500A2D29AD3139397AFF381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:c8:21:76:4d:de:f3:97:45:67:15:91:1c:
                    df:86:dd:0a:2e:f7:e1:82:2f:ae:d4:28:23:70:95:
                    a1:5d:64:98:00:ad:74:7b:04:6c:d1:00:06:42:07:
                    c5:12:9a:99:c6:e4:3b:fd:6f:4f:fd:e5:b9:dc:56:
                    02:fb:c5:49:cc:d6:0a:c8:fc:0f:31:9a:05:7b:2a:
                    73:0f:f9:40:d7:3a:4f:87:e6:b4:d2:ac:ff:25:fd:
                    05:a7:cc:f2:2c:ee:92:b9:84:0a:9a:01:94:3d:4c:
                    97:22:ef:91:7e:ce:b1:e7:e1:9d:37:23:f1:94:ad:
                    9f:de:ec:61:8f:f4:35:c4:c4:93:d0:f0:78:e4:ae:
                    06:35:9e:f5:81:0a:a2:c3:fb:05:55:2f:46:d9:42:
                    3e:95:ff:bd:de:0f:be:8b:4d:81:2f:41:4a:0b:bd:
                    2a:25:2a:4f:fd:71:03:72:59:7a:ba:fc:f7:f7:fd:
                    c9:a5:fe:f7:c0:f6:6c:38:95:45:9f:c1:29:a0:cd:
                    f7:a6:c6:3d:40:81:d4:29:0c:e7:22:83:67:38:ce:
                    d5:f2:c6:3a:46:ea:b9:16:a5:4c:21:44:14:f4:e8:
                    81:23:89:5c:76:61:26:b3:15:30:da:80:17:34:f7:
                    c3:65:7f:23:6b:b7:85:1d:86:e0:b0:bd:05:cd:5e:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:63:ED:D9:84:5D:88:39:45:00:A2:D2:9A:D3:13:93:97:AF:F3:81
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2645/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2645/JmPt2YRdiDlFAKLSmtMTk5ev84E.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59071

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:ec:d8:86:e4:d0:9d:cd:1f:f4:6d:83:f7:c0:94:2a:33:
         bf:e1:e4:c1:76:c3:bd:0c:cf:83:70:a1:21:bb:78:cb:1d:6d:
         32:90:ae:10:02:6f:e6:b9:f9:a6:38:69:5d:e5:3f:14:2e:2c:
         8d:aa:9c:34:19:77:86:96:1f:a4:a1:45:07:66:ed:bc:4c:43:
         dc:01:c5:ae:27:7a:fa:30:42:c6:41:9a:32:ca:61:ee:07:3c:
         95:a0:6b:96:ad:a4:ff:f2:ba:d0:37:5c:ff:24:ca:53:58:a0:
         e2:a1:51:36:61:28:cd:01:a8:5d:d8:bd:d6:86:e8:d7:3b:17:
         e1:88:1b:c3:58:60:93:e6:14:e0:f9:e4:ba:ce:57:5f:eb:f2:
         38:ae:fc:11:45:3a:ad:07:91:c2:4a:7e:7a:31:d1:a1:fd:dc:
         3b:09:82:ef:03:4c:b3:53:86:c7:07:d6:be:5e:09:33:93:ae:
         50:f1:39:0d:9f:93:74:58:1b:f7:29:0b:65:f0:24:35:4c:f9:
         bf:ce:5d:89:8e:d6:13:65:9a:04:1a:83:61:ec:16:3c:f5:37:
         c1:7d:6d:58:98:a9:0e:e3:1f:a6:48:b1:69:15:2e:48:9b:9b:
         6d:ee:58:1d:d5:b3:4f:5d:6c:d0:4c:82:75:e5:ee:d1:34:54:
         94:97:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----