Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/L3DHrwKXK_xwvP9ZUIQ-Qq3AUuw.cer
File:                     L3DHrwKXK_xwvP9ZUIQ-Qq3AUuw.cer (raw, json)
Hash identifier:          gz6Yv8aaRqI8KhYers5fQklnfstZf4wDzh5t3QvPzBY=
Subject key identifier:   2F:70:C7:AF:02:97:2B:FC:70:BC:FF:59:50:84:3E:42:AD:C0:52:EC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7BAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/L3DHrwKXK_xwvP9ZUIQ-Qq3AUuw.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 15 Oct 2021 20:06:38 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63603
                          IP: 103.102.196.0/22
                          IP: 163.53.44.0/22
                          IP: 2400:de80::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31661 (0x7bad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct 15 20:06:38 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=2F70C7AF02972BFC70BCFF5950843E42ADC052EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:cd:52:09:8c:9a:28:41:87:06:0c:2b:05:
                    d4:2a:af:cc:b4:db:7a:66:30:e7:ed:d3:52:ec:d2:
                    f9:d8:f6:b0:ab:f3:12:18:e5:c5:4d:63:24:30:56:
                    e8:64:30:61:9b:06:3b:72:a6:93:1a:17:4a:23:06:
                    19:ce:73:f5:c2:db:68:a9:ee:8c:23:43:7a:0a:3f:
                    f9:2d:00:d6:fa:9a:64:92:5e:c6:c0:e5:44:1e:3f:
                    df:66:83:9b:80:7a:3d:04:77:ef:d7:47:77:bb:8c:
                    54:df:c8:9b:c5:74:82:b0:fc:32:37:5f:34:8a:8a:
                    35:58:6d:de:97:55:77:69:22:40:b1:9d:4a:ff:ec:
                    ed:93:4f:5c:0a:7b:91:11:24:d1:10:a9:01:1c:a9:
                    a9:db:0d:39:da:d3:12:d4:42:7a:cb:10:20:8c:6e:
                    d1:7e:19:2e:d0:8e:9c:d9:27:4c:48:95:cf:90:84:
                    42:28:93:85:e0:42:08:fa:3b:c2:17:48:04:b2:09:
                    75:a4:fe:62:64:9a:bb:3f:ba:3a:5c:d3:9e:94:d7:
                    ab:19:5d:3e:f3:22:1e:ee:b5:9f:70:70:0d:ea:19:
                    fd:4e:a4:72:67:44:3c:6e:24:e1:3b:8d:eb:14:98:
                    7d:75:17:9d:f3:01:09:b8:4d:6f:62:7d:57:0a:2c:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:70:C7:AF:02:97:2B:FC:70:BC:FF:59:50:84:3E:42:AD:C0:52:EC
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/L3DHrwKXK_xwvP9ZUIQ-Qq3AUuw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63603

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.196.0/22
                  163.53.44.0/22
                IPv6:
                  2400:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:30:5a:51:b1:20:9d:e8:e6:fc:60:74:ab:23:61:af:59:
         c8:53:a5:52:b2:de:f4:b3:01:e6:2c:95:7c:55:9b:29:16:10:
         c5:9f:79:81:26:3f:18:81:f3:56:98:34:c8:e7:64:de:26:11:
         76:1b:d9:35:33:7c:52:ad:ba:4a:a4:68:67:a3:9e:c0:13:75:
         b6:dc:ae:f0:3c:1e:69:81:98:79:c5:7c:6a:98:25:00:d3:63:
         9b:73:25:06:80:2b:31:5e:ba:2a:b3:34:de:3c:49:e7:4b:e0:
         ab:0d:a5:9c:68:1f:f4:35:85:e7:47:6e:ca:19:34:3b:2a:fe:
         c9:07:c8:0d:5f:19:e3:b8:bb:e3:d1:fa:73:b0:58:98:ed:5d:
         7a:56:bd:a5:ba:11:d2:b3:25:02:ff:d8:52:2c:5b:3c:30:7e:
         72:ab:7b:a4:74:25:7b:d5:45:b4:68:5b:0c:af:61:73:0a:e0:
         0a:5d:09:d4:b8:c8:7d:be:53:0a:f0:cf:ab:4d:e2:d7:03:53:
         03:5a:e2:5c:a4:59:10:98:df:76:d5:ef:63:43:3f:4c:0d:e2:
         c4:fb:3f:3a:0a:22:d0:ef:ed:10:56:21:73:94:48:27:78:0e:
         c1:9a:d8:d5:58:dc:dd:38:78:af:02:8e:4e:5e:71:5a:75:af:
         e0:a6:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----