Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.cer
File:                     N-5b7zMzFzIVa-CyMcfQ0psA5Tc.cer (raw, json)
Hash identifier:          UjQB5TpoG8LY9OIRGGv/4+NsFGKJcTkaML4wgB2EMKc=
Subject key identifier:   37:EE:5B:EF:33:33:17:32:15:6B:E0:B2:31:C7:D0:D2:9B:00:E5:37
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7758
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:23 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 17442
                          IP: 43.243.232.0/22
                          IP: 45.250.12.0 -- 45.250.19.255
                          IP: 45.250.76.0 -- 45.250.99.255
                          IP: 45.250.104.0 -- 45.250.151.255
                          IP: 61.29.128.0/18
                          IP: 103.75.144.0/22
                          IP: 103.218.8.0 -- 103.218.23.255
                          IP: 103.218.28.0 -- 103.218.91.255
                          IP: 103.254.188.0/22
                          IP: 121.201.128.0/17
                          IP: 123.103.0.0/17
                          IP: 125.171.0.0/16
                          IP: 203.130.32.0/19
                          IP: 203.212.0.0/20
                          IP: 210.185.192.0/18
                          IP: 210.192.96.0/19
                          IP: 211.156.176.0/20
                          IP: 220.242.0.0/15
                          IP: 2400:7680::/32
                          IP: 2406:cd80::/32
                          IP: 2406:ce80::/32
                          IP: 2406:cf80::/32
                          IP: 2406:d080::/32
                          IP: 2406:d180::/32
                          IP: 2406:d280::/32
                          IP: 2406:d380::/32
                          IP: 2406:d480::/32
                          IP: 2406:d580::/32
                          IP: 2406:d680::/32
                          IP: 2406:d780::/32
                          IP: 2406:d880::/32
                          IP: 2406:d980::/32
                          IP: 2406:db80::/32
                          IP: 2406:dc80::/32
                          IP: 2406:de80::/32
                          IP: 2406:df80::/32
                          IP: 2406:e080::/32
                          IP: 2406:e180::/32
                          IP: 2406:e380::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30552 (0x7758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:23 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=37EE5BEF33331732156BE0B231C7D0D29B00E537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:a5:41:e1:6a:47:b5:4e:5a:62:39:62:a8:
                    5f:b7:92:f4:60:cb:53:8c:e2:ff:33:aa:75:22:ad:
                    bf:3a:2e:ac:7b:06:52:0b:6e:ea:be:b0:9a:1e:7c:
                    28:2d:f5:f8:f1:74:f0:21:0b:68:76:9d:b3:71:3d:
                    25:2f:63:03:77:38:5d:c1:0d:85:f3:c7:32:6b:dd:
                    74:53:e3:d5:7b:96:c4:f7:e9:b7:1f:87:89:d6:f2:
                    b7:84:9f:c9:9e:a1:55:00:39:43:42:ea:ef:e5:d7:
                    85:91:f1:39:fd:1c:23:b3:cb:56:62:ae:57:ff:fb:
                    4d:95:e3:f9:13:a0:db:53:e1:8a:4c:ad:c3:cd:ea:
                    dc:de:c0:2e:89:d7:75:6e:34:46:cd:62:0b:23:86:
                    15:49:c6:ec:c3:61:d0:c0:7a:b8:62:0a:87:af:c8:
                    08:52:e8:eb:bf:7b:8e:56:f2:4a:21:f3:08:60:5f:
                    31:17:f5:18:bc:d3:85:0d:89:b2:60:2d:62:ca:4b:
                    f5:b9:a3:7d:f0:ba:12:70:36:51:44:62:7c:59:0b:
                    fc:5d:ea:1c:4d:38:e1:91:d9:e5:4b:4b:1a:4f:a6:
                    1c:c1:1b:22:c5:23:dc:4c:03:4e:a3:81:92:cc:aa:
                    16:07:4b:16:2d:8f:3a:a8:16:84:65:21:68:58:34:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EE:5B:EF:33:33:17:32:15:6B:E0:B2:31:C7:D0:D2:9B:00:E5:37
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17442

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.232.0/22
                  45.250.12.0-45.250.19.255
                  45.250.76.0-45.250.99.255
                  45.250.104.0-45.250.151.255
                  61.29.128.0/18
                  103.75.144.0/22
                  103.218.8.0-103.218.23.255
                  103.218.28.0-103.218.91.255
                  103.254.188.0/22
                  121.201.128.0/17
                  123.103.0.0/17
                  125.171.0.0/16
                  203.130.32.0/19
                  203.212.0.0/20
                  210.185.192.0/18
                  210.192.96.0/19
                  211.156.176.0/20
                  220.242.0.0/15
                IPv6:
                  2400:7680::/32
                  2406:cd80::/32
                  2406:ce80::/32
                  2406:cf80::/32
                  2406:d080::/32
                  2406:d180::/32
                  2406:d280::/32
                  2406:d380::/32
                  2406:d480::/32
                  2406:d580::/32
                  2406:d680::/32
                  2406:d780::/32
                  2406:d880::/32
                  2406:d980::/32
                  2406:db80::/32
                  2406:dc80::/32
                  2406:de80::/32
                  2406:df80::/32
                  2406:e080::/32
                  2406:e180::/32
                  2406:e380::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:3f:ff:ca:91:6d:da:3c:88:60:d7:3f:10:7e:6f:5a:8a:
         32:23:66:49:b4:28:b1:c2:04:eb:75:80:16:1d:99:e4:6b:8b:
         cd:d9:b2:03:6e:83:2b:16:89:bd:dd:94:df:b7:67:b0:0b:50:
         21:75:f9:99:21:f6:f0:52:0f:38:57:74:cf:4b:48:4a:cf:e0:
         c5:f8:81:ff:41:f5:2e:30:13:13:4b:bb:c6:f3:f0:d5:44:0d:
         81:cf:53:8d:fe:3e:75:72:d1:68:e0:48:80:97:d8:d1:a1:ca:
         c2:fb:26:6e:2e:b8:3f:7d:c2:0b:4c:5f:b8:a5:b1:3f:c1:5c:
         9e:0b:14:d8:1d:29:a7:eb:cc:d7:da:67:b1:51:31:2c:85:b5:
         2d:3e:f0:e7:ff:fc:b8:72:9e:32:28:c7:12:44:d2:77:64:70:
         eb:2c:80:bf:59:68:76:a1:e9:c6:35:86:c2:a8:af:c5:ed:0b:
         f6:42:a2:db:dd:f8:a4:4f:f1:a2:98:bd:17:f3:83:bb:c1:53:
         38:b3:8f:45:f2:59:48:a3:2b:72:72:3d:3a:41:bd:24:56:0f:
         57:f3:32:b0:79:c6:3a:79:7f:39:11:3c:24:75:b5:a3:71:92:
         0c:f3:f8:1a:e4:b5:3f:2d:70:ef:c3:13:28:c7:f7:32:6f:7a:
         b1:fe:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org