Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/P1YP6Ayh13_G-DmMiit5qCKXkQs.cer
File:                     P1YP6Ayh13_G-DmMiit5qCKXkQs.cer (raw, json)
Hash identifier:          xOc8Cobw//1LJAGIyjxTZZBYEPBQX2sF+JCyMUiyHlc=
Subject key identifier:   3F:56:0F:E8:0C:A1:D7:7F:C6:F8:39:8C:8A:2B:79:A8:22:97:91:0B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7722
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/P1YP6Ayh13_G-DmMiit5qCKXkQs.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:26 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 18245
                          AS: 24428
                          IP: 59.108.0.0/15
                          IP: 103.235.148.0/22
                          IP: 150.242.168.0/22
                          IP: 219.232.32.0/19
                          IP: 2400:5400::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30498 (0x7722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:26 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3F560FE80CA1D77FC6F8398C8A2B79A82297910B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4d:4e:1f:f7:35:4b:c9:37:08:02:89:57:b4:
                    ca:93:e7:c5:1a:2c:96:d2:2c:0d:ba:b9:de:d5:98:
                    b0:d2:a4:25:67:48:73:d0:6a:c3:7f:01:e7:64:c1:
                    f1:ce:6a:06:b2:c7:4e:ed:b4:e5:17:da:05:af:2b:
                    02:31:d4:97:2c:79:97:88:2c:0f:77:bd:96:8e:a2:
                    6b:89:c1:f2:18:56:d9:92:2b:bc:36:f9:40:f1:70:
                    76:2f:86:19:54:62:9b:98:65:83:25:ca:63:0f:8b:
                    c5:fc:f5:8c:92:52:93:a1:30:81:55:a7:3a:bf:c1:
                    ee:fe:2e:af:94:14:7d:f7:04:95:69:41:a3:cf:84:
                    65:4d:8b:b3:5f:c7:e6:ce:d0:6c:c3:57:eb:9f:b2:
                    5b:cb:86:d6:4c:e2:a2:62:c9:3f:c2:50:92:ce:32:
                    78:16:75:37:b8:ef:1e:20:84:0c:cc:cb:c8:b0:81:
                    64:f6:00:43:14:df:fb:42:70:34:03:6c:67:97:6c:
                    c7:62:78:e0:78:d3:c3:e2:73:6f:76:64:a5:2b:49:
                    c4:91:96:1f:57:aa:0c:01:82:ee:a3:a3:0c:b2:8b:
                    ab:eb:d4:2e:2e:1f:7f:4e:50:65:ff:4e:2e:6b:88:
                    4e:39:ae:bc:8a:07:4d:de:ff:f4:db:ae:cd:19:6a:
                    07:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:56:0F:E8:0C:A1:D7:7F:C6:F8:39:8C:8A:2B:79:A8:22:97:91:0B
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/P1YP6Ayh13_G-DmMiit5qCKXkQs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18245
                  24428

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.108.0.0/15
                  103.235.148.0/22
                  150.242.168.0/22
                  219.232.32.0/19
                IPv6:
                  2400:5400::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:34:a9:0b:5a:9a:03:49:53:25:9f:7f:6e:61:25:95:78:
         d4:ed:d9:2f:6b:18:8e:52:1a:c5:ef:09:27:94:55:1a:1e:06:
         84:4a:11:01:db:fa:e9:43:bf:4b:b7:98:52:96:ce:d1:9a:de:
         f2:9f:26:ac:e6:a3:f5:2a:46:bc:eb:a5:4a:f4:05:8a:4c:70:
         7f:23:c6:a0:50:23:e9:16:e3:42:29:b2:5e:a5:31:6e:28:23:
         b2:7b:b1:b6:68:d1:51:58:c1:aa:b3:d0:46:84:20:13:97:ae:
         0d:59:ae:5c:b5:20:87:bb:81:8a:c8:9d:63:c4:17:cc:7c:4b:
         a2:cf:25:c7:cd:4f:1b:23:1c:22:b0:c3:30:a6:c0:61:bb:dc:
         6e:f2:09:4a:a4:d4:d4:5a:5c:13:33:d7:78:a4:45:b2:27:9a:
         84:4c:a0:68:bc:e5:45:ad:dc:0f:1f:57:e4:e4:b7:5b:27:36:
         fe:f8:60:c2:5f:98:f9:69:86:7a:1e:e8:48:e7:9f:98:1a:dd:
         e2:e7:43:18:b3:68:5a:94:74:83:86:6f:26:78:70:63:89:7a:
         33:42:84:2b:61:3e:a8:4d:c7:ee:c7:02:cd:6f:eb:b5:d8:f4:
         0f:7f:13:80:e4:7a:de:2e:ae:d4:3e:c0:f5:33:3c:34:4c:00:
         61:fa:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----