Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QH7nPCKBiO2ouKS4m0zVkgEUA4g.cer
File:                     QH7nPCKBiO2ouKS4m0zVkgEUA4g.cer (raw, json)
Hash identifier:          28crC9gdcvSAsEg6baNkBLQH5FcDipgGofoyz4SQ0DM=
Subject key identifier:   40:7E:E7:3C:22:81:88:ED:A8:B8:A4:B8:9B:4C:D5:92:01:14:03:88
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7782
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/QH7nPCKBiO2ouKS4m0zVkgEUA4g.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:04:37 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59024
                          IP: 103.111.172.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30594 (0x7782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:04:37 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=407EE73C228188EDA8B8A4B89B4CD59201140388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:60:c8:50:c0:1c:30:64:2f:91:79:87:c1:
                    95:49:89:07:8c:bb:5f:22:e6:ac:d9:27:a1:78:4e:
                    6a:cf:fe:9e:ff:0e:de:f9:c4:4d:10:41:98:ec:15:
                    3c:88:d5:e5:73:23:f3:ad:5a:1c:b2:15:3f:8e:84:
                    10:17:ba:ff:63:69:69:63:bd:cb:48:d0:78:21:c5:
                    87:17:72:f2:c5:fd:7c:a5:40:c7:54:70:2d:29:27:
                    07:dd:a3:50:0f:12:b5:a9:c2:7b:03:73:3b:ef:1e:
                    4a:85:ee:a4:e1:99:dd:62:10:4f:4d:74:d9:26:e9:
                    4f:a2:65:39:1e:e6:20:46:76:df:f3:21:94:ac:42:
                    92:ef:fe:d7:60:a2:4d:25:5d:48:04:d2:b1:74:8f:
                    46:f4:6e:fc:da:e8:fb:6c:85:8e:0a:13:da:d5:fa:
                    39:89:14:ca:64:a6:38:0b:b2:09:65:4d:41:f8:f1:
                    a1:73:67:10:5c:9a:a7:16:03:b2:e7:dc:87:19:3a:
                    c0:9c:d5:d3:22:fa:a5:37:24:c1:a1:74:d8:10:7c:
                    55:07:93:41:cf:15:c3:50:03:81:d3:09:3a:92:f6:
                    4a:b6:c5:42:d7:b4:01:0a:37:36:2a:75:ca:d2:ce:
                    e8:5d:3a:6b:5a:bd:c9:73:11:3c:e3:4a:29:0e:e4:
                    b9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7E:E7:3C:22:81:88:ED:A8:B8:A4:B8:9B:4C:D5:92:01:14:03:88
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/QH7nPCKBiO2ouKS4m0zVkgEUA4g.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59024

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:18:b5:ef:48:35:00:dd:0c:dd:32:68:3b:37:83:d0:f6:95:
         71:94:7d:08:53:83:67:96:6e:40:a3:67:f4:72:38:21:1e:3f:
         d0:ab:c3:01:b6:97:52:ee:68:ad:39:76:a5:25:f4:b7:80:1e:
         55:9e:1d:b7:c8:95:e1:9f:ec:9f:4a:a8:a7:91:17:b8:32:04:
         d8:51:82:42:6f:b8:f0:e1:6d:c5:d9:42:67:d6:01:ee:5b:79:
         d0:02:aa:3c:28:b5:a3:d0:f2:2a:fc:10:29:93:fc:4c:d9:86:
         9b:53:6d:c0:68:3d:85:cc:32:60:c3:65:f5:34:f0:ee:60:92:
         30:da:b3:4d:1d:7a:62:33:d3:5f:94:6c:aa:52:40:98:3a:25:
         b2:a1:a8:dc:78:3a:c9:83:60:23:14:eb:bf:9e:df:37:63:c5:
         71:ed:6e:58:28:9c:bd:fe:13:d5:2f:d0:5b:93:f4:e7:03:90:
         b2:9c:5c:b6:4a:f9:96:08:97:c7:3d:85:cb:bf:fa:f6:b5:64:
         a1:24:2d:74:b2:8c:bd:33:a8:e7:cc:5d:f8:7a:46:77:52:c2:
         5a:0b:06:2b:40:ce:09:87:de:8b:8b:f9:61:ef:a0:48:1e:11:
         2c:43:70:1c:39:45:61:61:9c:dd:b1:12:ec:7e:c7:31:85:49:
         82:07:d5:3d
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgICd4IwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDQzN1oXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoNDA3RUU3M0MyMjgxODhFREE4QjhBNEI4OUI0Q0Q1OTIwMTE0MDM4
ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALy2YMhQwBwwZC+ReYfB
lUmJB4y7XyLmrNknoXhOas/+nv8O3vnETRBBmOwVPIjV5XMj861aHLIVP46EEBe6
/2NpaWO9y0jQeCHFhxdy8sX9fKVAx1RwLSknB92jUA8StanCewNzO+8eSoXupOGZ
3WIQT0102SbpT6JlOR7mIEZ23/MhlKxCku/+12CiTSVdSATSsXSPRvRu/Nro+2yF
jgoT2tX6OYkUymSmOAuyCWVNQfjxoXNnEFyapxYDsufchxk6wJzV0yL6pTckwaF0
2BB8VQeTQc8Vw1ADgdMJOpL2SrbFQte0AQo3Nip1ytLO6F06a1q9yXMRPONKKQ7k
uYUCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRAfuc8IoGI7ai4pLibTNWSARQDiDAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY5
NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yNjk0L1FIN25QQ0tCaU8yb3VLUzRtMHpWa2dFVUE0Zy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOaQMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ2+sMA0GCSqGSIb3DQEBCwUAA4IBAQAGGLXvSDUA3QzdMmg7N4PQ
9pVxlH0IU4Nnlm5Ao2f0cjghHj/Qq8MBtpdS7mitOXalJfS3gB5Vnh23yJXhn+yf
SqinkRe4MgTYUYJCb7jw4W3F2UJn1gHuW3nQAqo8KLWj0PIq/BApk/xM2YabU23A
aD2FzDJgw2X1NPDuYJIw2rNNHXpiM9NflGyqUkCYOiWyoajceDrJg2AjFOu/nt83
Y8Vx7W5YKJy9/hPVL9Bbk/TnA5CynFy2SvmWCJfHPYXLv/r2tWShJC10soy9M6jn
zF34ekZ3UsJaCwYrQM4Jh96Li/lh76BIHhEsQ3AcOUVhYZzdsRLsfscxhUmCB9U9
-----END CERTIFICATE-----