Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/PlNNS1HoxGaBieOhakThpJuzC6s.cer
File:                     PlNNS1HoxGaBieOhakThpJuzC6s.cer (raw, json)
Hash identifier:          PA9Ymhc5H3Tv9Ea1BeVOOBkKRvsyMBNEuit7Xl32fKM=
Subject key identifier:   3E:53:4D:4B:51:E8:C4:66:81:89:E3:A1:6A:44:E1:A4:9B:B3:0B:AB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/PlNNS1HoxGaBieOhakThpJuzC6s.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 18 Nov 2021 20:17:35 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 211.155.0.0/20
                          IP: 2402:2a00::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31880 (0x7c88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 18 20:17:35 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3E534D4B51E8C4668189E3A16A44E1A49BB30BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:4f:a5:0d:64:2f:1f:98:b4:66:b6:42:a1:
                    a3:3b:c0:fe:4e:b1:d1:4c:98:66:7e:22:19:27:32:
                    8d:69:18:12:82:27:6f:6d:33:e9:c3:b8:3a:2d:27:
                    66:f3:1b:7e:fe:99:3c:05:0e:61:44:7c:12:12:15:
                    31:3e:5a:92:b8:13:7d:8f:cb:88:77:5e:94:32:f7:
                    6a:3e:65:aa:80:72:8e:69:5b:e1:f4:f8:da:53:e0:
                    04:d1:e8:8f:f5:b7:26:39:97:27:77:60:8b:35:b3:
                    f8:22:cf:f4:9b:f4:d8:31:a7:bc:8f:ad:9b:21:66:
                    48:78:75:e5:ce:62:ad:be:2e:b5:f9:38:06:6f:39:
                    0f:f1:21:5e:dc:fa:24:c4:0c:79:b5:e6:bd:71:dc:
                    82:63:b7:7b:1c:eb:5b:0b:b6:ed:6a:2e:25:3a:82:
                    39:97:9d:19:dc:25:b7:f2:2c:ae:8f:db:71:22:cc:
                    70:86:61:25:a2:61:d3:96:14:ba:96:57:d2:fa:db:
                    de:79:18:d8:29:89:3b:41:54:ef:7e:3e:1b:03:ee:
                    00:13:1c:d4:8c:1d:82:51:92:10:0b:0b:36:73:4b:
                    0f:18:f9:30:69:bf:a2:b0:ae:55:2d:92:29:8d:b1:
                    b5:f5:d5:be:74:bb:c7:27:09:9c:83:df:fb:37:57:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:53:4D:4B:51:E8:C4:66:81:89:E3:A1:6A:44:E1:A4:9B:B3:0B:AB
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/PlNNS1HoxGaBieOhakThpJuzC6s.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.0.0/20
                IPv6:
                  2402:2a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:fb:39:46:26:d2:b6:32:cb:05:7a:c6:2a:6f:e2:db:9d:
         f7:b2:f7:f2:6a:66:08:68:39:55:24:b3:29:2d:0f:9e:cb:20:
         2e:71:bc:c0:16:b6:14:e5:1a:79:b0:24:47:21:fb:05:49:89:
         6e:4f:82:cb:a1:e4:a4:a2:0f:06:d8:ac:e9:00:76:31:ff:5b:
         c1:ab:d3:e4:9b:fb:44:33:47:d2:8d:81:28:8a:34:61:f9:55:
         b6:1f:e2:cd:4e:5c:e3:53:fd:ea:6f:0f:2b:eb:d3:64:41:3b:
         ac:a0:20:b8:7c:8f:ca:c2:0f:a9:5a:96:6b:91:5d:9f:3f:d3:
         8d:6d:78:f4:cd:8b:77:74:d0:4f:9a:06:98:48:8e:74:a8:94:
         ab:db:aa:2a:87:95:b5:84:55:52:54:df:9c:91:41:8a:f5:2d:
         da:00:b8:9b:6e:d2:d8:fe:85:11:8f:e5:ed:84:49:15:45:50:
         1f:6d:12:88:44:a7:d2:75:6e:91:bb:02:bb:1d:e6:df:56:c2:
         79:4c:f5:fe:3c:01:f7:ef:87:f9:a8:c6:35:b4:0b:61:14:b0:
         36:c9:44:f7:d8:12:f7:6e:0d:21:b3:ec:31:1a:e6:ba:52:57:
         d2:22:25:c3:52:a6:10:28:ab:aa:f3:de:ef:7a:41:4f:4a:6d:
         7f:bd:bc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----