Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ldu8dES9_nBiVsH20C7jIRD144c.cer
File:                     Ldu8dES9_nBiVsH20C7jIRD144c.cer (raw, json)
Hash identifier:          9Otd+DV3R9hR7UMZ/wDcu0JANlqmywwgNRyZfgqs6ns=
Subject key identifier:   2D:DB:BC:74:44:BD:FE:70:62:56:C1:F6:D0:2E:E3:21:10:F5:E3:87
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/Ldu8dES9_nBiVsH20C7jIRD144c.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:11 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59037
                          AS: 137803
                          IP: 43.225.180.0/22
                          IP: 43.227.152.0 -- 43.227.183.255
                          IP: 43.227.192.0/19
                          IP: 43.228.0.0/19
                          IP: 43.228.40.0 -- 43.228.71.255
                          IP: 43.230.72.0/22
                          IP: 103.46.12.0 -- 103.46.139.255
                          IP: 103.49.108.0/22
                          IP: 2403:1f80::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30626 (0x77a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:11 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=2DDBBC7444BDFE706256C1F6D02EE32110F5E387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:66:3f:2c:2d:3f:50:ab:96:15:b6:1a:46:
                    61:ca:aa:35:7b:3e:0e:c4:be:fb:0e:b3:78:6c:c9:
                    29:39:2e:96:cf:f0:f4:3e:6f:cb:64:d6:09:1f:76:
                    75:c8:9b:b0:eb:14:c9:cd:0b:74:d9:a0:05:48:32:
                    80:81:17:c4:b2:f0:d4:d1:07:86:ee:90:2c:8e:55:
                    d8:4e:fb:b1:e9:e6:0a:a7:66:ac:9b:67:fc:58:de:
                    d4:33:75:75:f5:b0:c4:e7:8f:19:c2:90:56:63:76:
                    a2:51:7c:e0:09:26:9c:fd:10:63:38:de:02:6e:4d:
                    0e:d4:bd:41:ff:88:d6:cb:78:de:33:81:fd:38:26:
                    bc:6d:0d:2b:98:4b:26:c8:fd:4c:2e:3e:5f:7d:29:
                    6e:6f:01:b9:45:70:2f:7e:2f:5c:bd:fa:56:c1:2c:
                    db:eb:8a:ab:8d:ae:30:19:06:f5:ea:b6:98:7a:46:
                    c4:d4:ac:b5:28:1f:1d:1f:a5:7b:ad:cd:11:be:5f:
                    12:c3:35:c0:bc:2a:00:7d:66:9d:ea:c1:c4:9d:c0:
                    a9:ca:ea:28:5d:23:a8:6a:b5:a1:3a:df:c2:0a:b2:
                    5c:13:fc:1e:20:a0:55:c3:f1:69:43:9c:0f:50:12:
                    35:99:a8:a4:67:ce:d1:6c:06:87:ac:e4:0f:b1:3e:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:BC:74:44:BD:FE:70:62:56:C1:F6:D0:2E:E3:21:10:F5:E3:87
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/Ldu8dES9_nBiVsH20C7jIRD144c.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59037
                  137803

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.180.0/22
                  43.227.152.0-43.227.183.255
                  43.227.192.0/19
                  43.228.0.0/19
                  43.228.40.0-43.228.71.255
                  43.230.72.0/22
                  103.46.12.0-103.46.139.255
                  103.49.108.0/22
                IPv6:
                  2403:1f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:57:e7:9f:eb:6a:6e:d7:81:a8:db:f4:eb:54:cd:b3:ff:
         f4:75:bd:0b:6f:79:0a:a2:d7:fa:5b:18:8e:e7:5a:69:1f:6c:
         5e:92:b9:0f:74:36:fc:92:d5:7e:eb:25:bd:46:9b:c1:05:ac:
         fc:d8:03:81:fb:f1:bc:06:73:dc:64:c7:44:8b:64:ee:02:78:
         7f:52:a3:84:84:ca:ba:fc:6f:8f:3b:bf:79:36:d7:a7:e5:09:
         7b:0f:cc:33:d9:84:49:5d:3d:d7:89:90:49:67:25:6d:f8:1a:
         78:58:c3:11:82:c5:ea:06:a1:c2:24:9d:d7:90:e9:58:0f:2c:
         1b:e3:3b:57:05:50:52:18:01:53:e1:2c:84:8b:f5:97:ac:6a:
         d8:f3:99:e2:f2:c5:95:8b:10:25:d8:41:85:1a:4d:18:bc:c0:
         13:ca:a7:10:ba:55:68:e7:b9:01:a1:c8:b7:dc:bf:c5:ae:33:
         91:06:e2:a3:b8:55:85:bf:c2:83:63:75:d6:e9:ad:b4:ea:85:
         95:19:aa:ce:e2:15:e4:f3:52:74:5c:7e:10:2d:33:34:e4:58:
         0e:a9:49:9a:bd:46:84:c5:db:e8:3b:db:4e:a7:c4:23:8e:a1:
         e2:77:fe:f8:31:b5:2a:08:9b:84:5a:53:f4:c2:28:23:55:cf:
         40:6c:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----