Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/NKMZtXsB8bh1GeWM7pzZIQ8akBE.cer
File:                     NKMZtXsB8bh1GeWM7pzZIQ8akBE.cer (raw, json)
Hash identifier:          ywrR1z58EAl2k+zVNrpaP/wm+zDjcD40Vif1xH4BNEo=
Subject key identifier:   34:A3:19:B5:7B:01:F1:B8:75:19:E5:8C:EE:9C:D9:21:0F:1A:90:11
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       9761
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/NKMZtXsB8bh1GeWM7pzZIQ8akBE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 28 Mar 2023 01:16:48 +0000
Certificate not after:    Wed 27 Mar 2024 01:13:10 +0000
Subordinate resources:    AS: 58863
                          IP: 2400:8580::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38753 (0x9761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Mar 28 01:16:48 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=34A319B57B01F1B87519E58CEE9CD9210F1A9011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:86:9d:14:29:e4:2f:aa:bf:9e:00:b9:bd:
                    1d:7e:c9:db:cf:f8:b7:72:29:84:c3:42:59:0b:ef:
                    26:1a:e6:6c:5b:b8:a6:85:2c:34:ef:1b:c2:1e:f4:
                    8d:b9:76:59:52:bf:79:23:81:2d:c7:34:46:52:21:
                    9b:da:fe:98:f8:ec:23:1e:fd:ab:91:e4:8c:40:39:
                    5a:3c:3f:8f:ef:f1:bb:f0:ab:48:9e:9e:a4:9b:f0:
                    e1:cb:2d:14:ea:91:aa:da:a9:b7:30:3e:68:e2:2a:
                    df:1f:ef:0d:90:29:b2:13:a8:43:a6:78:35:02:e8:
                    72:71:c1:e2:13:9c:d1:14:ee:c3:98:a4:ae:83:30:
                    b3:c8:49:37:42:56:43:23:9e:38:93:6f:e7:cc:f7:
                    19:2e:f3:0b:54:a0:9c:c9:95:f6:0e:bb:72:6a:6a:
                    98:e4:5d:e2:70:10:03:28:bb:08:fb:80:f7:26:28:
                    f2:95:7a:d8:47:13:7a:ed:1b:0f:cf:18:d8:89:e2:
                    19:e2:b5:89:1a:4d:3a:4a:1f:d0:91:f0:79:90:62:
                    70:ee:a8:b9:4d:64:54:ff:0f:21:23:5e:8f:42:75:
                    ff:09:11:a9:de:04:66:d3:35:6a:3e:70:41:98:0c:
                    2a:ca:3f:5f:ff:c9:ff:fa:b9:77:e3:94:f1:1e:07:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A3:19:B5:7B:01:F1:B8:75:19:E5:8C:EE:9C:D9:21:0F:1A:90:11
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/NKMZtXsB8bh1GeWM7pzZIQ8akBE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58863

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8580::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:dd:54:b8:45:b4:c8:d1:ac:dc:34:2c:4a:9d:6f:c0:13:
         d3:09:05:e0:09:2b:a1:ec:dc:d9:c3:b0:18:6e:2e:e0:79:c6:
         2c:8b:63:2b:a0:8a:18:71:ad:1f:83:57:03:1c:2a:51:15:71:
         f2:17:b5:90:71:f7:54:a1:3d:78:3c:2f:37:ca:55:14:29:b8:
         f0:66:10:e6:29:52:06:f7:f5:53:90:a4:3a:20:78:36:53:70:
         59:82:ee:c9:32:30:0f:38:7c:af:47:f2:59:a2:8b:41:2e:c7:
         df:8b:b4:20:0c:8a:3d:6b:49:77:06:88:93:3f:30:2d:42:cb:
         3c:63:15:48:bc:c5:16:d5:14:4f:36:d6:2f:f4:f2:7e:f8:1f:
         d4:66:8b:73:99:39:fd:b7:c8:4a:78:de:f6:60:13:30:a0:59:
         2e:43:66:48:46:20:88:01:62:4e:53:9b:f7:d8:59:1a:d6:86:
         98:b1:d7:ff:9e:6e:2f:a5:84:a1:b0:5d:a0:d8:47:fc:8f:15:
         74:94:3f:7e:95:b1:41:a5:78:47:3b:fd:f1:b0:df:f1:fe:72:
         29:3a:f8:92:2f:fe:29:76:09:33:a5:5c:e5:6e:e5:f0:09:4e:
         bd:c6:1e:e5:a7:d4:b8:0c:f5:09:e9:a0:3e:5f:9a:ed:d6:cd:
         0e:cb:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----