Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QLTus34ihRvRhQ16Yye1CsapaZQ.cer
File:                     QLTus34ihRvRhQ16Yye1CsapaZQ.cer (raw, json)
Hash identifier:          /HHi5/YyPYEyhpbGQzJnwxLmU6fXdhQC7vfsxAsDZnc=
Subject key identifier:   40:B4:EE:B3:7E:22:85:1B:D1:85:0D:7A:63:27:B5:0A:C6:A9:69:94
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       78D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QLTus34ihRvRhQ16Yye1CsapaZQ.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 15 Jun 2021 19:32:16 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 55995
                          IP: 112.75.0.0/16

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30933 (0x78d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun 15 19:32:16 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=40B4EEB37E22851BD1850D7A6327B50AC6A96994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:ad:7b:df:45:a8:5d:47:2d:3a:b7:c1:f3:
                    4a:9f:46:87:0c:ed:ab:94:e0:60:ac:f6:c7:8a:9c:
                    ba:ff:47:b7:2e:33:d0:42:94:05:a5:a2:be:4e:65:
                    e6:a0:08:0d:6c:9c:be:61:08:ac:fc:25:d2:d4:ab:
                    1d:5e:e8:0d:e3:d7:4b:1e:63:43:e4:b7:aa:06:99:
                    ec:92:52:c9:d6:d8:7d:8c:a7:bc:3f:39:5c:01:07:
                    85:2e:51:28:86:29:1a:61:c3:c2:c1:81:d2:6f:38:
                    65:e9:f3:24:96:2c:7b:66:d5:89:08:4d:dd:ed:22:
                    bb:13:27:d0:10:4c:a7:bf:3f:0e:35:89:35:67:91:
                    22:11:a8:3d:2e:49:e2:bf:20:08:6d:39:ea:47:c4:
                    6a:3b:56:b9:65:0e:08:f2:3f:48:3a:50:fc:d3:f3:
                    50:f0:3d:dc:36:d6:c5:04:0e:23:9e:8e:77:62:c6:
                    7f:8e:2c:a6:23:75:6b:ad:b2:9c:60:ab:22:2f:4d:
                    cd:a1:6a:35:24:13:9a:68:84:9b:1f:c6:15:bd:79:
                    42:a0:b8:71:8d:28:1e:c5:f1:a5:99:6b:65:f4:99:
                    c1:ac:89:ef:e5:1b:dd:9d:28:12:6e:87:ec:af:39:
                    cf:30:af:5a:ff:52:c4:17:4e:fe:96:1c:0c:3e:20:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:EE:B3:7E:22:85:1B:D1:85:0D:7A:63:27:B5:0A:C6:A9:69:94
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QLTus34ihRvRhQ16Yye1CsapaZQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55995

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:d7:65:82:df:cd:d5:4a:e3:d6:c0:92:2f:2e:da:c3:21:e7:
         e7:84:ae:99:a6:4d:89:d9:b9:2c:bd:3c:ff:2e:41:23:4a:c5:
         04:a1:98:4f:9e:d4:e2:4d:48:29:60:66:54:b7:79:cb:2c:14:
         c8:28:0e:96:9d:77:a6:56:32:4d:6e:d7:16:b1:fc:ee:af:d0:
         4e:9f:ed:ac:a8:a1:f1:12:0e:7d:00:7a:8d:a5:4c:f7:ec:dc:
         f5:f8:ac:5f:ad:c6:7b:4e:bb:21:9b:53:ea:84:b3:13:f9:33:
         f6:75:d6:39:19:88:72:7c:e4:43:84:3d:ee:84:76:23:c9:c3:
         b9:ca:85:b5:10:81:d7:c8:a9:9c:7b:0f:62:d4:91:c2:67:0d:
         10:d2:d8:35:40:61:5d:bb:82:46:90:14:7a:dc:5d:78:10:97:
         b3:f4:a6:43:2a:e3:16:7b:56:65:32:ba:88:fe:b2:2a:13:73:
         09:c1:a5:aa:8e:44:fd:43:93:1e:9b:f1:93:64:77:0d:17:c8:
         1b:c7:ff:13:3b:e6:e4:44:33:9d:bd:b6:ee:b8:37:c7:3e:91:
         7b:36:8d:d3:2b:cf:05:f7:7c:72:8c:af:26:e4:dc:28:41:c9:
         e4:46:86:8c:48:b4:94:dc:bf:5b:f2:e1:ce:77:6e:78:95:92:
         3a:e2:2b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----