Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/NhHx2U2JGSwdpfaXqpyT6YXlK2s.cer
File:                     NhHx2U2JGSwdpfaXqpyT6YXlK2s.cer (raw, json)
Hash identifier:          Aljof/NrmvRDGc0n97EQwqPE4bKhJtgOubqqGZuYrwc=
Subject key identifier:   36:11:F1:D9:4D:89:19:2C:1D:A5:F6:97:AA:9C:93:E9:85:E5:2B:6B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7B86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/NhHx2U2JGSwdpfaXqpyT6YXlK2s.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sat 09 Oct 2021 20:07:10 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 137774
                          IP: 103.123.208.0/22
                          IP: 2403:a9c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31622 (0x7b86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct  9 20:07:10 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3611F1D94D89192C1DA5F697AA9C93E985E52B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:96:95:f4:a1:f5:89:42:87:c3:31:c1:d1:
                    d4:ed:68:56:d4:5d:5f:54:a3:c8:4c:9e:24:16:bd:
                    e9:dd:c6:f1:dc:81:9f:50:c9:70:33:a3:63:43:7e:
                    72:f5:f0:e4:30:4c:39:66:41:50:76:8c:42:b6:f3:
                    a6:be:95:91:2d:95:39:e2:0c:6c:79:72:5d:d0:51:
                    48:9b:62:15:16:6a:40:ad:68:55:eb:59:a1:e5:82:
                    1e:14:43:81:29:d2:c5:dc:f0:36:d5:19:d0:d3:6c:
                    cb:c7:a1:64:8d:24:9d:9e:f7:bb:2e:4c:f7:71:e9:
                    c0:b9:de:52:94:28:7f:9b:56:4e:8d:60:79:ab:ca:
                    82:1e:06:85:26:81:68:91:42:a9:b2:67:ce:f1:5c:
                    28:83:cb:b8:23:ae:8a:fa:f0:3e:67:a9:80:38:39:
                    45:66:c1:72:5b:32:ea:56:ee:d3:13:7a:de:f3:b6:
                    06:d9:42:1c:23:3f:09:1b:f8:71:25:2b:99:43:0d:
                    0f:61:e4:cf:1b:7a:63:2a:17:c6:3a:f4:5c:a7:31:
                    5e:8d:56:22:cc:24:bb:b5:a8:79:3a:88:0c:fc:c0:
                    48:e4:e0:8d:fd:23:44:95:d0:92:98:b5:59:a7:ab:
                    60:a8:d6:5d:81:12:ec:f4:0f:f6:e3:bc:8c:fc:55:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:11:F1:D9:4D:89:19:2C:1D:A5:F6:97:AA:9C:93:E9:85:E5:2B:6B
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2810/NhHx2U2JGSwdpfaXqpyT6YXlK2s.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137774

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.208.0/22
                IPv6:
                  2403:a9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ed:4f:87:4d:18:7f:92:b1:29:20:da:c1:76:57:f7:e8:11:
         7c:6d:34:29:c6:96:7e:ba:90:d9:80:e9:ac:e3:78:aa:a5:11:
         7a:47:82:75:40:bd:4d:66:c1:15:84:a3:c2:51:85:04:58:fb:
         1d:77:53:a7:39:c1:af:e9:1d:be:fa:49:8c:26:c9:c8:0a:ba:
         7d:91:0a:b1:23:f7:d1:08:ce:14:2c:c1:90:5b:3e:69:fc:58:
         bd:9c:af:89:39:e5:08:60:8b:0c:4b:98:15:92:02:9d:1e:ba:
         e0:d5:10:52:5d:d9:c0:f3:02:d2:f7:cd:f0:90:6a:b2:58:b1:
         65:80:9a:20:2f:29:17:8f:7f:27:1f:db:57:f0:7a:24:c3:b5:
         59:db:4b:c0:30:7b:81:e0:b1:60:d3:11:2a:eb:a1:2c:fc:25:
         3b:9d:72:27:cb:7a:ad:fe:8a:be:35:c1:39:94:25:c3:e5:a8:
         17:9f:9e:9a:96:b6:85:8e:8a:5a:74:a7:d5:c9:20:ad:c1:84:
         14:28:d1:4c:da:4b:37:7b:5a:9a:d2:c0:80:f0:dc:f2:ff:94:
         f5:c5:a0:d5:6b:1e:65:de:55:34:aa:37:98:78:6b:67:d7:1e:
         37:95:ed:c7:f1:bc:58:43:67:57:c9:f8:4b:f6:3f:25:27:5e:
         29:5a:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----