Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer
File:                     MokcWC43Z0eV6WkKukB_xnbsoeE.cer (raw, json)
Hash identifier:          +1iI0HfsvabezenQBJzHMFOVcG1i+4HXC1PvUN2abQk=
Subject key identifier:   32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       774C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:13 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45081
                          IP: 121.255.0.0/16
                          IP: 202.141.160.0/19
                          IP: 2400:b600::/32
                          IP: 2401:1e00::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30540 (0x774c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:13 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=32891C582E37674795E9690ABA407FC676ECA1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:5c:1e:dd:06:61:23:1d:c5:86:39:d0:5f:
                    90:9c:0a:53:5a:aa:d0:09:ac:63:10:3f:3f:48:3e:
                    63:ee:2d:ca:a7:99:ec:e3:46:6c:8d:19:8e:03:73:
                    d1:c3:40:1c:4d:a8:09:98:d9:73:c0:3d:ad:08:4f:
                    2d:60:5e:a1:39:58:b3:24:f0:4e:30:e9:51:5c:56:
                    92:20:47:01:f1:75:dc:6d:8e:da:8c:f7:67:9b:78:
                    83:0c:d0:29:20:f2:97:7c:32:7b:50:76:51:cf:ea:
                    8d:15:f6:39:1b:5d:13:a4:aa:8f:0d:68:f9:39:c6:
                    4e:13:04:37:81:b4:22:84:4b:6d:ae:5f:be:2e:0e:
                    b0:1f:1d:b0:b9:cf:ee:48:4b:eb:3c:05:21:aa:39:
                    4c:3f:ac:47:af:6f:53:39:37:0b:27:2e:7a:da:10:
                    f4:94:09:8c:49:d8:33:fe:90:6e:85:64:c4:e1:32:
                    70:d8:5f:12:89:5d:ad:30:9c:15:84:89:52:c2:e2:
                    7b:5d:cf:c6:29:40:b4:9f:f1:17:b6:c3:23:48:b6:
                    f7:17:88:1a:23:61:59:9f:65:c1:b5:c7:db:0a:39:
                    76:c6:22:cb:76:d0:ec:3f:5d:7d:d8:95:29:54:4a:
                    4b:ad:7d:62:27:5d:79:3d:3c:d0:d8:83:8e:0f:b8:
                    d3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45081

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.255.0.0/16
                  202.141.160.0/19
                IPv6:
                  2400:b600::/32
                  2401:1e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:47:67:b9:c1:f1:03:30:df:aa:8b:41:96:56:7a:91:4d:04:
         9f:35:d8:76:0e:9f:e4:63:51:4a:02:81:c0:b4:20:eb:65:66:
         8c:0b:12:33:23:9b:f1:d5:0f:e7:78:87:63:65:28:62:6c:a9:
         0d:d4:e7:e6:85:c9:bb:a9:7d:f9:e3:c4:43:cc:62:f1:5e:3f:
         cf:82:03:5a:c2:4d:70:10:96:ea:0e:67:ea:4f:65:38:a8:4d:
         6b:a0:f2:3e:38:59:a4:44:ee:88:bb:a3:21:ab:e9:ff:72:dc:
         94:8f:90:b1:9a:29:dd:32:27:5e:e3:38:6b:b5:38:8d:45:d9:
         9f:1a:a1:c7:15:4b:2e:1e:de:ce:53:12:17:b2:2b:36:16:6b:
         ee:9b:ca:2e:d7:14:66:32:86:38:fe:b7:2c:17:fe:14:05:38:
         74:49:31:7b:ad:f0:89:f3:84:6b:df:af:2d:88:41:38:1c:c3:
         a5:c1:7d:d5:29:df:69:41:96:30:b9:53:25:21:23:d6:32:54:
         89:35:ea:bf:36:0d:7d:32:f1:5e:f3:37:0a:76:9b:d1:71:7e:
         9c:a9:00:7c:6a:38:49:34:b7:0c:5e:47:b4:33:0b:da:45:fe:
         c8:2f:48:c9:66:ab:c9:5c:12:3e:ec:76:59:89:3d:bf:b5:f9:
         1e:71:ea:cc
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICd0wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDMxM1oXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoMzI4OTFDNTgyRTM3Njc0Nzk1RTk2OTBBQkE0MDdGQzY3NkVDQTFF
MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0bXB7dBmEjHcWGOdBf
kJwKU1qq0AmsYxA/P0g+Y+4tyqeZ7ONGbI0ZjgNz0cNAHE2oCZjZc8A9rQhPLWBe
oTlYsyTwTjDpUVxWkiBHAfF13G2O2oz3Z5t4gwzQKSDyl3wye1B2Uc/qjRX2ORtd
E6Sqjw1o+TnGThMEN4G0IoRLba5fvi4OsB8dsLnP7khL6zwFIao5TD+sR69vUzk3
CycuetoQ9JQJjEnYM/6QboVkxOEycNhfEoldrTCcFYSJUsLie13PxilAtJ/xF7bD
I0i29xeIGiNhWZ9lwbXH2wo5dsYiy3bQ7D9dfdiVKVRKS619YiddeT080NiDjg+4
0xcCAwEAAaOCAoowggKGMB0GA1UdDgQWBBQyiRxYLjdnR5XpaQq6QH/Gduyh4TAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzE5Mi9Nb2tjV0M0M1owZVY2V2tLdWtCX3huYnNvZUUubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCwGTA6BggrBgEFBQcBBwEB/wQrMCkwEQQC
AAEwCwMDAHn/AwQFyo2gMBQEAgACMA4DBQAkALYAAwUAJAEeADANBgkqhkiG9w0B
AQsFAAOCAQEAcEdnucHxAzDfqotBllZ6kU0EnzXYdg6f5GNRSgKBwLQg62VmjAsS
MyOb8dUP53iHY2UoYmypDdTn5oXJu6l9+ePEQ8xi8V4/z4IDWsJNcBCW6g5n6k9l
OKhNa6DyPjhZpETuiLujIavp/3LclI+QsZop3TInXuM4a7U4jUXZnxqhxxVLLh7e
zlMSF7IrNhZr7pvKLtcUZjKGOP63LBf+FAU4dEkxe63wifOEa9+vLYhBOBzDpcF9
1SnfaUGWMLlTJSEj1jJUiTXqvzYNfTLxXvM3Cnab0XF+nKkAfGo4STS3DF5HtDML
2kX+yC9IyWaryVwSPux2WYk9v7X5HnHqzA==
-----END CERTIFICATE-----