Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/PKIXO81Ms3nc8VGItx0qkX1i_RA.cer
File:                     PKIXO81Ms3nc8VGItx0qkX1i_RA.cer (raw, json)
Hash identifier:          At0U/7ApcpeZD/+5UzxhNVMWpq1nxRgzkfSB9WB/Wo0=
Subject key identifier:   3C:A2:17:3B:CD:4C:B3:79:DC:F1:51:88:B7:1D:2A:91:7D:62:FD:10
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       789D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/PKIXO81Ms3nc8VGItx0qkX1i_RA.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Wed 09 Jun 2021 19:58:49 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131549
                          IP: 103.101.12.0/22
                          IP: 2401:c8c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30877 (0x789d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  9 19:58:49 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3CA2173BCD4CB379DCF15188B71D2A917D62FD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:c9:4e:4b:cf:a0:06:a4:35:1c:bc:8f:91:
                    ad:4c:87:09:b1:4b:d7:74:98:fd:6e:d2:27:ca:e0:
                    23:ca:3f:dd:ea:3a:26:e3:c4:d7:b4:f6:1d:24:89:
                    83:49:77:94:9c:db:f6:da:98:84:f7:e7:86:d3:d6:
                    53:b7:a4:f8:4c:d6:3f:eb:c1:32:60:cc:14:2a:5c:
                    fb:28:d1:42:f4:79:5b:79:f9:94:96:68:26:d2:f8:
                    25:35:c9:17:da:01:ef:0a:72:f3:2c:76:7f:9a:c2:
                    d3:2a:e1:38:05:89:04:fd:bb:f3:72:3a:de:4c:d0:
                    76:39:24:e6:31:85:30:05:1b:cc:b2:ca:fb:e4:83:
                    9d:ad:34:d7:95:d2:49:be:08:18:ff:16:2f:c3:87:
                    0c:7d:01:04:bf:84:32:58:d4:32:29:47:53:a8:4e:
                    86:50:cc:8d:0b:7f:7e:7a:ec:57:96:58:02:a8:69:
                    12:9e:6b:b3:4b:62:4e:e7:3f:53:29:f0:7f:bf:c7:
                    97:df:8c:8e:be:1d:d2:fe:07:d6:5a:16:54:08:b7:
                    6b:f8:58:a7:6a:53:9a:5f:c7:2f:9e:b7:7e:31:44:
                    b4:1d:93:8a:98:f8:f5:1c:5c:92:15:07:e7:1d:3e:
                    eb:60:c8:50:71:11:2e:42:eb:98:3d:ad:38:2d:08:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A2:17:3B:CD:4C:B3:79:DC:F1:51:88:B7:1D:2A:91:7D:62:FD:10
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2603/PKIXO81Ms3nc8VGItx0qkX1i_RA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131549

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.12.0/22
                IPv6:
                  2401:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:1f:60:3d:1f:e7:9b:ed:1c:b6:d5:9f:e1:23:ea:0a:d1:d1:
         ea:45:47:d1:64:fd:97:04:82:8e:dd:94:75:42:24:74:2b:52:
         48:fa:04:41:8b:5c:9f:8f:f6:7a:77:34:66:f9:a0:e6:3f:9d:
         61:14:7b:59:05:11:8f:3e:4d:8b:39:23:63:64:8e:24:1d:6f:
         8b:9a:93:6e:07:69:ce:97:35:f7:40:e5:9f:bf:24:71:72:01:
         19:a6:65:87:d4:59:72:32:24:e1:3c:a5:52:bb:bb:c6:a9:bd:
         e4:ce:85:0a:fe:50:22:52:e7:df:5b:64:31:d3:f8:d0:99:23:
         dd:ae:d3:c4:c9:7c:a0:bf:20:90:d8:f5:0b:86:bc:f7:94:03:
         cc:10:eb:3d:df:11:9c:9c:35:6c:41:b1:48:01:03:4f:dd:ea:
         cb:1b:49:b4:e4:1e:ed:e3:22:b0:50:e1:47:da:a1:62:39:8b:
         62:76:25:91:db:61:8c:c4:a8:07:9b:9b:3e:5d:50:24:42:11:
         82:cf:dc:97:2f:7c:7c:e1:f3:59:7d:cf:2d:c2:ea:08:9b:c6:
         8d:f7:64:39:57:aa:10:bd:43:8f:e0:50:62:26:67:cd:b8:20:
         19:e4:69:f0:28:de:c5:73:52:77:2b:03:5d:23:13:1f:b8:ba:
         66:8d:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----