Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QUCJUo8SGv3V0Cxc1NpzDnLregY.cer
File:                     QUCJUo8SGv3V0Cxc1NpzDnLregY.cer (raw, json)
Hash identifier:          +l6xSzLQGYcKZYlqQ6/47GAc30W1hqEiLJSZQphvW2U=
Subject key identifier:   41:40:89:52:8F:12:1A:FD:D5:D0:2C:5C:D4:DA:73:0E:72:EB:7A:06
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/QUCJUo8SGv3V0Cxc1NpzDnLregY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:46 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.118.212.0/22
                          IP: 2403:38c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30652 (0x77bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:46 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=414089528F121AFDD5D02C5CD4DA730E72EB7A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:80:a7:b2:ef:0c:85:4e:6a:34:d9:c7:ac:
                    6e:4d:cf:eb:f6:8a:1e:d9:6c:49:5c:44:1f:4b:a2:
                    62:43:6f:23:16:16:26:14:42:7b:2d:cb:44:11:ba:
                    5f:86:bc:a3:fb:ff:2a:34:3c:0c:2e:91:3c:9c:62:
                    81:7a:06:e1:f6:bf:2b:6e:38:83:41:a4:c2:de:59:
                    b9:f1:d8:18:7c:52:9f:37:1f:cb:89:87:f4:a5:e1:
                    ab:c1:47:e1:b2:a3:01:8f:ee:e1:3a:10:47:c7:84:
                    25:2e:e5:98:5c:89:99:17:9f:f9:1c:f6:83:51:47:
                    6a:f0:b5:db:da:dc:e7:49:b8:92:6f:a2:10:63:43:
                    07:f4:d2:db:28:0d:67:95:e0:d1:c1:93:78:71:f1:
                    12:23:4e:1b:81:70:a0:c3:c9:14:27:ec:84:8b:3a:
                    39:d4:87:fe:9a:a3:93:a7:15:df:bd:76:86:24:e6:
                    a5:b1:25:a2:4c:5f:f7:c2:a8:6d:7b:82:84:ba:f1:
                    a8:d0:37:52:d1:c1:6d:a4:54:65:36:00:8e:14:49:
                    53:49:33:c0:9f:f9:cf:e7:ff:34:f8:de:78:bc:c8:
                    00:cc:c7:fd:67:08:b3:3b:fa:7f:4c:bb:96:8f:0e:
                    0f:67:b8:e4:db:4e:36:8d:94:56:54:d9:2f:48:c0:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:40:89:52:8F:12:1A:FD:D5:D0:2C:5C:D4:DA:73:0E:72:EB:7A:06
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/QUCJUo8SGv3V0Cxc1NpzDnLregY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.212.0/22
                IPv6:
                  2403:38c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:70:0a:ec:42:ee:e0:d3:a8:23:00:20:0d:34:73:db:46:
         b9:30:ce:9e:24:89:de:ee:3b:bf:e9:ca:ed:cc:01:74:d7:a4:
         65:be:44:3d:c3:77:2d:d6:0d:dd:f6:7d:01:30:82:de:8f:f3:
         6c:5c:a1:f6:4c:c5:77:ea:0d:6e:5b:59:23:ed:7e:9b:a6:6c:
         cf:33:87:54:e1:68:03:c2:4f:fe:8d:5e:61:aa:08:80:a3:06:
         2e:cf:6a:ad:c3:aa:6c:74:37:e9:bf:42:31:55:8d:ac:78:c6:
         20:21:3a:be:78:46:ea:58:ae:b0:6d:32:13:0d:38:b0:ee:6e:
         b1:06:d6:74:47:9b:c6:f7:6b:fc:ae:01:7c:31:0f:6f:0a:a9:
         b9:fd:3a:4e:16:43:34:e5:2b:1e:db:4c:93:3c:31:89:ac:34:
         3d:31:ca:74:fb:bf:25:cf:bf:a3:d6:4f:5f:f9:27:cc:0c:f2:
         67:2a:24:e1:a6:54:04:44:82:22:65:1c:71:37:d5:98:17:98:
         54:36:ec:1c:6f:85:fe:f5:97:33:4f:ae:9c:d2:97:49:f5:e3:
         8e:dc:15:01:68:41:85:64:55:1d:64:6d:4a:64:a4:77:f4:91:
         91:3a:e0:54:a9:51:cf:4d:68:27:77:fb:37:35:00:d6:b6:ed:
         58:8b:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----