Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/KiSxwsbp7xb8VsFkrK5n0kd_C-o.cer
File:                     KiSxwsbp7xb8VsFkrK5n0kd_C-o.cer (raw, json)
Hash identifier:          Lw2yFoayVwJ34H/FB9tVN84NqgJj7dWi4WK+RQpGSBU=
Subject key identifier:   2A:24:B1:C2:C6:E9:EF:16:FC:56:C1:64:AC:AE:67:D2:47:7F:0B:EA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7881
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/KiSxwsbp7xb8VsFkrK5n0kd_C-o.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 07 Jun 2021 19:59:05 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45114
                          IP: 103.108.160.0/22
                          IP: 2402:6b40::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30849 (0x7881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  7 19:59:05 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=2A24B1C2C6E9EF16FC56C164ACAE67D2477F0BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:21:f5:aa:80:ef:23:d5:66:31:6c:9d:c3:
                    4d:b4:98:0c:8d:95:74:0f:2f:fd:71:a2:b0:9c:57:
                    a0:c0:5d:b4:81:80:e3:da:5d:83:b1:73:30:98:cf:
                    25:80:62:85:3b:9d:57:5d:9d:07:47:ba:e9:4c:c3:
                    8c:39:3d:bc:09:ac:23:d1:b6:2c:3e:af:60:12:b0:
                    0a:cb:ed:3e:59:54:ba:28:d6:8d:85:29:6f:40:cf:
                    c1:03:42:52:09:87:3c:8c:14:26:bf:99:28:be:18:
                    64:3f:b7:33:a1:1b:f9:e1:63:c9:6d:ca:34:d1:6c:
                    df:24:28:d6:8c:5e:ce:3e:53:72:cd:f6:0e:3c:52:
                    9b:1c:e7:e3:5b:59:61:e7:3a:20:9e:b9:e6:c0:ec:
                    67:7a:b1:01:59:38:72:81:8c:98:c6:ac:c9:42:56:
                    13:bd:f5:7e:e0:0c:8b:16:45:6d:9a:07:4d:20:12:
                    9d:71:9d:be:4e:52:e2:59:2c:b2:64:e1:0b:63:86:
                    bf:c9:cb:ba:b3:4e:f2:e5:95:73:3f:95:fc:d2:ed:
                    df:14:84:af:e7:9a:3d:20:f8:ba:ee:a7:0c:2b:c1:
                    d5:9b:63:01:2c:d5:1b:5c:7d:c3:a7:3b:c6:a7:4f:
                    21:19:d8:91:98:55:00:68:1b:b1:0f:54:1a:4d:f1:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:24:B1:C2:C6:E9:EF:16:FC:56:C1:64:AC:AE:67:D2:47:7F:0B:EA
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/KiSxwsbp7xb8VsFkrK5n0kd_C-o.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45114

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.160.0/22
                IPv6:
                  2402:6b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:83:90:3e:0c:82:49:dc:09:b2:b9:20:f8:ba:ac:84:4f:b6:
         72:aa:cb:a6:79:1c:07:a0:b9:b0:25:55:f7:4d:76:02:d7:74:
         c6:83:fd:70:41:af:44:ab:13:f3:f5:9d:95:ed:b8:8d:27:eb:
         f9:b4:d8:ee:79:a3:4a:0f:a7:12:c9:4f:66:40:b7:fb:13:e3:
         97:30:57:e3:a1:94:b0:e9:1a:a7:24:42:2d:37:d0:c4:f7:03:
         7a:5f:e5:2d:4b:67:34:3d:b3:46:85:31:6f:c3:d9:d5:39:f9:
         e5:d1:92:30:0b:4a:9c:a4:e2:2d:7e:52:9d:d7:65:93:3c:ed:
         2a:ab:64:31:df:5b:85:11:2d:24:c8:83:85:51:e0:84:27:81:
         d1:60:33:d3:96:e6:73:f7:0f:09:36:9f:9d:cb:40:fc:98:ab:
         72:58:4b:46:b2:c5:99:f3:2f:4c:3f:5d:c2:5f:38:df:fd:75:
         40:7c:0f:88:be:e1:aa:7d:81:d4:06:f4:cd:ad:51:3d:f6:cf:
         2f:45:5b:ef:57:8b:3c:66:e2:97:b8:03:ee:12:b0:26:1c:e5:
         05:a9:12:fc:3d:c3:82:23:56:6d:10:93:c5:ce:a0:b9:ff:65:
         6b:7d:c6:78:64:8b:61:4f:33:4e:0a:31:ba:66:09:84:ca:fc:
         03:ec:16:32
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgICeIEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDYwNzE5NTkwNVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoMkEyNEIxQzJDNkU5RUYxNkZDNTZDMTY0QUNBRTY3RDI0NzdGMEJF
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3VIfWqgO8j1WYxbJ3D
TbSYDI2VdA8v/XGisJxXoMBdtIGA49pdg7FzMJjPJYBihTudV12dB0e66UzDjDk9
vAmsI9G2LD6vYBKwCsvtPllUuijWjYUpb0DPwQNCUgmHPIwUJr+ZKL4YZD+3M6Eb
+eFjyW3KNNFs3yQo1oxezj5Tcs32DjxSmxzn41tZYec6IJ655sDsZ3qxAVk4coGM
mMasyUJWE731fuAMixZFbZoHTSASnXGdvk5S4lkssmThC2OGv8nLurNO8uWVcz+V
/NLt3xSEr+eaPSD4uu6nDCvB1ZtjASzVG1x9w6c7xqdPIRnYkZhVAGgbsQ9UGk3x
cckCAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBQqJLHCxunvFvxWwWSsrmfSR38L6jAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjkw
My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yOTAzL0tpU3h3c2JwN3hiOFZzRmtySzVuMGtkX0Mtby5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALA6MC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2ygMA0EAgACMAcDBQAkAmtAMA0GCSqGSIb3DQEBCwUAA4IBAQBW
g5A+DIJJ3AmyuSD4uqyET7ZyqsumeRwHoLmwJVX3TXYC13TGg/1wQa9EqxPz9Z2V
7biNJ+v5tNjueaNKD6cSyU9mQLf7E+OXMFfjoZSw6RqnJEItN9DE9wN6X+UtS2c0
PbNGhTFvw9nVOfnl0ZIwC0qcpOItflKd12WTPO0qq2Qx31uFES0kyIOFUeCEJ4HR
YDPTluZz9w8JNp+dy0D8mKtyWEtGssWZ8y9MP13CXzjf/XVAfA+IvuGqfYHUBvTN
rVE99s8vRVvvV4s8ZuKXuAPuErAmHOUFqRL8PcOCI1ZtEJPFzqC5/2VrfcZ4ZIth
TzNOCjG6ZgmEyvwD7BYy
-----END CERTIFICATE-----