Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MjXPJI_9B2GcyFGrXmtJ3dnF6rU.cer
File:                     MjXPJI_9B2GcyFGrXmtJ3dnF6rU.cer (raw, json)
Hash identifier:          WMy2bbZrjWYBpLu5JecagAclIdCbeSxW5eoo8Hi+lCA=
Subject key identifier:   32:35:CF:24:8F:FD:07:61:9C:C8:51:AB:5E:6B:49:DD:D9:C5:EA:B5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7786
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/MjXPJI_9B2GcyFGrXmtJ3dnF6rU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:04:41 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.67.172.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30598 (0x7786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:04:41 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3235CF248FFD07619CC851AB5E6B49DDD9C5EAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:96:95:41:10:bd:8a:e0:7c:73:11:48:ff:22:
                    fa:52:e9:5e:68:e6:17:ac:9a:17:d4:81:50:f4:00:
                    7c:a3:3e:77:6a:4a:9f:7d:11:cb:c4:0d:58:2d:a3:
                    dc:29:0d:fb:e7:da:66:c0:1c:47:67:a5:85:13:94:
                    27:81:8a:ca:6c:98:d5:1f:88:b4:de:9c:61:f9:cb:
                    40:81:70:e5:36:e1:09:2d:93:a7:c8:44:f9:1d:dd:
                    64:4d:68:eb:b1:5b:78:cf:07:03:de:ae:51:6c:9e:
                    14:c1:6c:5a:36:cc:1c:f6:d0:46:be:ea:91:d9:15:
                    f8:94:00:72:b3:53:cc:3e:1a:64:81:8f:af:77:24:
                    ee:a5:0c:43:94:c0:d6:93:42:df:ef:99:f5:46:8e:
                    26:11:c6:e7:bb:b3:e6:4f:31:35:1f:c4:bd:3d:c9:
                    17:79:38:33:b0:7b:0c:bd:d4:31:96:7a:dd:e5:39:
                    35:55:fb:78:52:45:42:a5:8b:c6:72:4c:b1:4f:53:
                    ee:23:d8:1d:98:a7:a4:3d:a0:9b:fb:86:f3:e0:c8:
                    26:af:6c:89:bf:f4:c1:73:b4:5b:92:25:d2:0f:1c:
                    b3:56:95:d8:14:29:59:6c:b1:6b:91:49:96:2e:b5:
                    f5:1f:0c:25:70:e8:e7:e2:96:00:5f:3e:55:a5:2f:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:35:CF:24:8F:FD:07:61:9C:C8:51:AB:5E:6B:49:DD:D9:C5:EA:B5
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/MjXPJI_9B2GcyFGrXmtJ3dnF6rU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:41:2b:69:12:e9:f3:7d:ba:27:f1:82:6d:a5:e4:66:b1:
         22:c9:84:85:a6:e2:e9:8b:36:5b:62:7b:d6:97:cb:34:cc:bc:
         c9:3b:6f:2a:4d:f7:20:db:88:04:3d:01:c8:65:97:ca:f5:35:
         c0:82:8d:67:85:d4:6e:d6:65:ee:a9:74:2d:c2:9b:37:13:7d:
         f0:3f:b2:12:96:93:58:8a:bd:c0:71:b8:45:c1:16:13:18:41:
         39:e8:4f:d4:f2:41:e5:67:d1:75:44:1d:49:f7:22:ca:73:f0:
         13:00:b6:3d:47:04:da:3a:89:b4:b0:e7:f0:44:c4:dd:81:c2:
         8c:c4:c9:9d:87:e7:b0:bc:10:64:07:2b:e3:8e:fc:00:a5:ba:
         e4:cd:2f:a5:5e:8f:2d:9d:3a:05:fd:07:e1:85:27:c4:24:77:
         64:6e:6f:0e:98:e0:0b:47:e4:34:22:02:4d:d0:ba:48:34:8b:
         84:b6:49:65:e8:f1:2f:60:ba:05:f1:99:b6:73:8f:7c:46:11:
         d2:2a:3c:a0:1d:dc:82:7f:7f:ca:9b:66:dd:b9:da:1b:38:b3:
         77:17:4e:62:ea:68:3b:97:32:55:0c:50:1f:c8:b8:ea:82:54:
         03:6a:5a:6e:32:c7:9f:c1:86:b1:04:60:be:ce:a7:f1:44:37:
         7f:ed:c3:7c
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICd4YwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDQ0MVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoMzIzNUNGMjQ4RkZEMDc2MTlDQzg1MUFCNUU2QjQ5REREOUM1RUFC
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOuWlUEQvYrgfHMRSP8i
+lLpXmjmF6yaF9SBUPQAfKM+d2pKn30Ry8QNWC2j3CkN++faZsAcR2elhROUJ4GK
ymyY1R+ItN6cYfnLQIFw5TbhCS2Tp8hE+R3dZE1o67FbeM8HA96uUWyeFMFsWjbM
HPbQRr7qkdkV+JQAcrNTzD4aZIGPr3ck7qUMQ5TA1pNC3++Z9UaOJhHG57uz5k8x
NR/EvT3JF3k4M7B7DL3UMZZ63eU5NVX7eFJFQqWLxnJMsU9T7iPYHZinpD2gm/uG
8+DIJq9sib/0wXO0W5Il0g8cs1aV2BQpWWyxa5FJli619R8MJXDo5+KWAF8+VaUv
dIUCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQyNc8kj/0HYZzIUatea0nd2cXqtTAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3
Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yMDcyL01qWFBKSV85QjJHY3lGR3JYbXRKM2RuRjZyVS5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnQ6wwDQYJKoZIhvcNAQELBQAD
ggEBAHtPQStpEunzfbon8YJtpeRmsSLJhIWm4umLNltie9aXyzTMvMk7bypN9yDb
iAQ9Achll8r1NcCCjWeF1G7WZe6pdC3CmzcTffA/shKWk1iKvcBxuEXBFhMYQTno
T9TyQeVn0XVEHUn3Ispz8BMAtj1HBNo6ibSw5/BExN2BwozEyZ2H57C8EGQHK+OO
/ACluuTNL6Vejy2dOgX9B+GFJ8Qkd2Rubw6Y4AtH5DQiAk3Qukg0i4S2SWXo8S9g
ugXxmbZzj3xGEdIqPKAd3IJ/f8qbZt252hs4s3cXTmLqaDuXMlUMUB/IuOqCVANq
Wm4yx5/BhrEEYL7Op/FEN3/tw3w=
-----END CERTIFICATE-----