Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MLjOl00GSqzQzqQUraucXMOUXeE.cer
File:                     MLjOl00GSqzQzqQUraucXMOUXeE.cer (raw, json)
Hash identifier:          tzAhXwnbKEyYHB975BEldcoFch+NwV4Ps6dW6gy2Swo=
Subject key identifier:   30:B8:CE:97:4D:06:4A:AC:D0:CE:A4:14:AD:AB:9C:5C:C3:94:5D:E1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7928
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/MLjOl00GSqzQzqQUraucXMOUXeE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 29 Jun 2021 19:35:48 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45080
                          IP: 49.239.0.0/18
                          IP: 2406:dd00::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31016 (0x7928)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun 29 19:35:48 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=30B8CE974D064AACD0CEA414ADAB9C5CC3945DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:9b:13:b7:fd:5b:70:dd:27:8e:46:e7:1b:
                    e9:8c:cd:ff:41:d9:f4:40:97:f5:28:dd:c5:da:af:
                    29:68:18:bf:d1:6a:ab:d0:cd:cb:18:ba:f0:17:d8:
                    62:c7:5c:c2:95:a5:80:7f:f5:dd:b2:1d:32:a6:6e:
                    6a:78:f9:14:60:54:c2:4a:5e:72:8f:2b:d7:c4:27:
                    13:6c:ba:cb:df:d3:b8:72:d2:02:b8:35:c0:99:69:
                    28:9e:82:c6:d8:d7:08:38:75:a2:4e:08:1c:6f:98:
                    da:91:76:eb:c5:aa:50:0a:ec:49:bb:7c:51:96:d2:
                    b3:c2:2f:67:f3:45:1d:15:c8:71:10:40:e9:bc:58:
                    c4:79:3f:d8:de:1b:52:c9:10:55:60:e5:d7:d3:7b:
                    09:6f:53:33:33:d7:5f:6d:55:ba:49:84:9f:46:a7:
                    6d:47:c2:57:ad:bd:ab:2c:30:a0:a6:ea:27:ac:6e:
                    e4:eb:cb:9c:ac:8d:3b:e4:1d:b7:22:d5:d5:63:af:
                    73:28:2d:e4:a8:20:c8:69:c1:40:c9:dd:20:1e:99:
                    36:b5:35:a1:b5:19:71:98:80:e1:ae:4c:05:7c:da:
                    65:bb:c3:41:a8:60:73:6f:be:db:ab:08:91:63:bd:
                    7a:43:8e:12:ef:0a:7e:ed:d9:27:97:a6:c5:a3:15:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B8:CE:97:4D:06:4A:AC:D0:CE:A4:14:AD:AB:9C:5C:C3:94:5D:E1
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/MLjOl00GSqzQzqQUraucXMOUXeE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45080

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.239.0.0/18
                IPv6:
                  2406:dd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:10:41:c4:23:60:a2:00:6b:13:61:d2:8d:f6:71:70:0c:f2:
         4a:76:d8:5c:49:98:d8:d2:9f:24:0f:46:ac:61:ef:c2:e7:6e:
         1b:3c:0b:06:90:31:2f:b8:dc:3f:d3:c2:25:4a:32:a3:c6:ac:
         1e:cf:33:3d:7a:b9:a7:1f:c3:03:bd:ca:62:a9:80:7d:a7:f7:
         93:51:fa:0b:40:7c:72:43:fd:45:84:7c:01:cb:85:dc:2a:e7:
         62:a7:81:7b:cb:b9:2a:df:7e:35:bd:20:e9:5b:1c:97:b5:fa:
         5d:66:35:aa:22:2e:c2:05:a6:24:a9:33:00:ee:5c:c0:a2:4c:
         86:9b:2c:94:67:0a:75:63:03:19:63:ea:bf:97:97:ab:cc:63:
         90:6e:8a:c6:53:2a:18:be:68:11:8b:ab:7f:6e:c2:e4:b1:5f:
         be:7a:25:c5:ea:a9:8e:e8:9c:79:d1:b6:5f:b2:52:08:2b:27:
         3a:72:39:f5:35:53:f1:2e:4a:72:ef:86:5f:b9:f0:cb:dc:43:
         79:84:a9:bd:24:e8:1d:02:e4:d7:69:85:be:64:d8:92:d0:da:
         92:c6:79:29:10:97:93:79:2c:bd:35:69:74:10:15:7f:03:ff:
         2f:ff:f1:46:b1:35:67:0d:f8:93:ef:66:59:2e:72:5e:2b:bf:
         46:af:3e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----