Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QFpvLcf1xn58Vsg13Zf7VPcgoSY.cer
File:                     QFpvLcf1xn58Vsg13Zf7VPcgoSY.cer (raw, json)
Hash identifier:          izhCKTG2R7lNHhf5FJ3hJXqGJUkrxCgsBlMFZumfuCM=
Subject key identifier:   40:5A:6F:2D:C7:F5:C6:7E:7C:56:C8:35:DD:97:FB:54:F7:20:A1:26
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/QFpvLcf1xn58Vsg13Zf7VPcgoSY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:13 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45112
                          IP: 103.108.164.0/22
                          IP: 2402:6bc0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30628 (0x77a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:13 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=405A6F2DC7F5C67E7C56C835DD97FB54F720A126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:81:22:6c:bb:e0:84:38:db:a3:66:00:dc:
                    4e:cd:84:05:cb:78:fa:2c:03:8d:8e:48:98:9e:08:
                    cc:2f:9f:f5:e3:f4:a2:d5:ec:04:8e:b1:ac:30:ec:
                    c0:27:6d:5d:e8:99:2b:b5:a2:b2:78:27:d9:7e:68:
                    56:64:6a:e3:a7:b0:b9:65:2b:01:8f:d0:e3:59:3b:
                    97:4d:58:34:de:80:35:f7:cb:fd:58:1e:0e:81:5b:
                    ce:8f:02:05:29:57:3a:34:9e:89:a8:56:d8:47:5f:
                    dc:75:9a:9f:10:4d:f8:b0:99:0c:fc:62:68:07:81:
                    9c:e8:5e:64:a8:55:87:d9:4f:8f:d4:c1:28:6c:40:
                    c2:4f:5f:20:19:53:27:37:ab:24:02:fc:65:45:1e:
                    75:7e:24:2a:89:83:fe:e5:72:8a:bf:64:cf:71:26:
                    5d:84:c1:55:1a:db:44:21:49:a6:95:8b:f9:b3:de:
                    a0:5c:e9:ea:46:a6:66:0e:2f:db:ed:6e:7e:ec:bb:
                    10:0f:d3:82:2f:75:b5:87:15:97:ca:de:26:32:72:
                    90:f6:ed:99:5d:8c:74:70:22:26:09:b8:fe:a1:67:
                    9e:9e:7e:3a:d3:a8:c6:f7:b3:69:94:b7:4f:d5:6b:
                    19:4d:a5:fb:36:b3:f0:26:17:12:19:71:42:a0:79:
                    4b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5A:6F:2D:C7:F5:C6:7E:7C:56:C8:35:DD:97:FB:54:F7:20:A1:26
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/QFpvLcf1xn58Vsg13Zf7VPcgoSY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45112

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.164.0/22
                IPv6:
                  2402:6bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:48:65:ac:06:66:75:77:5d:1e:9c:3f:06:00:dc:34:63:a7:
         97:bb:3a:d0:3a:3e:f5:1a:1a:60:f9:f8:f2:c5:c0:21:72:db:
         4a:21:5d:d4:7d:14:3e:11:a9:fe:58:3b:2d:94:08:f3:93:f8:
         b5:33:42:6d:79:19:62:af:93:af:91:c9:d5:37:4f:ee:0f:54:
         3e:f8:17:d8:b5:2c:d9:ba:c3:9c:1f:8a:75:d8:78:27:5d:62:
         f5:8e:c5:a4:2a:e0:11:36:23:6c:f6:c2:e5:8e:d2:e0:b0:89:
         32:3f:b3:fc:f7:7d:6e:aa:bc:f4:bb:ff:e6:96:da:33:2d:94:
         9c:9d:fa:b0:ef:d3:a3:6f:95:9d:34:75:8b:1c:17:56:0c:f0:
         b9:5a:31:ee:a3:63:c0:ce:c5:79:65:a3:07:3b:ea:6f:a0:2a:
         66:b2:85:c6:e5:2b:0f:9f:0b:13:e3:37:1c:7d:05:12:f1:75:
         c6:d5:c5:28:5d:09:df:8e:83:4f:56:2d:54:fd:c3:90:45:58:
         7d:6b:9e:79:7c:49:c3:e7:2a:79:9e:28:2d:db:c8:5f:0b:93:
         db:c8:cd:63:30:a9:03:17:97:f3:94:27:eb:f7:28:bc:b7:d1:
         7a:46:70:f4:f9:91:94:0e:26:66:11:a0:e2:f3:6a:42:d3:b3:
         d9:d9:d5:d3
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgICd6QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDUxM1oXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoNDA1QTZGMkRDN0Y1QzY3RTdDNTZDODM1REQ5N0ZCNTRGNzIwQTEy
NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKK5gSJsu+CEONujZgDc
Ts2EBct4+iwDjY5ImJ4IzC+f9eP0otXsBI6xrDDswCdtXeiZK7Wisngn2X5oVmRq
46ewuWUrAY/Q41k7l01YNN6ANffL/VgeDoFbzo8CBSlXOjSeiahW2Edf3HWanxBN
+LCZDPxiaAeBnOheZKhVh9lPj9TBKGxAwk9fIBlTJzerJAL8ZUUedX4kKomD/uVy
ir9kz3EmXYTBVRrbRCFJppWL+bPeoFzp6kamZg4v2+1ufuy7EA/Tgi91tYcVl8re
JjJykPbtmV2MdHAiJgm4/qFnnp5+OtOoxvezaZS3T9VrGU2l+zaz8CYXEhlxQqB5
S5UCAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBRAWm8tx/XGfnxWyDXdl/tU9yChJjAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3
MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yNjcxL1FGcHZMY2YxeG41OFZzZzEzWmY3VlBjZ29TWS5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALA4MC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2ykMA0EAgACMAcDBQAkAmvAMA0GCSqGSIb3DQEBCwUAA4IBAQAD
SGWsBmZ1d10enD8GANw0Y6eXuzrQOj71Ghpg+fjyxcAhcttKIV3UfRQ+Ean+WDst
lAjzk/i1M0JteRlir5OvkcnVN0/uD1Q++BfYtSzZusOcH4p12HgnXWL1jsWkKuAR
NiNs9sLljtLgsIkyP7P8931uqrz0u//mltozLZScnfqw79Ojb5WdNHWLHBdWDPC5
WjHuo2PAzsV5ZaMHO+pvoCpmsoXG5SsPnwsT4zccfQUS8XXG1cUoXQnfjoNPVi1U
/cOQRVh9a555fEnD5yp5nigt28hfC5PbyM1jMKkDF5fzlCfr9yi8t9F6RnD0+ZGU
DiZmEaDi82pC07PZ2dXT
-----END CERTIFICATE-----