Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SFDHjSCnehV9Z182NimmX__OGOQ.cer
File:                     SFDHjSCnehV9Z182NimmX__OGOQ.cer (raw, json)
Hash identifier:          uH4Npk0L6XsP+1r2JPylAsn77ggP+3csXNJ40HTuIWg=
Subject key identifier:   48:50:C7:8D:20:A7:7A:15:7D:67:5F:36:36:29:A6:5F:FF:CE:18:E4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       775E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3035/SFDHjSCnehV9Z182NimmX__OGOQ.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3035/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:29 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 137779

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30558 (0x775e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:29 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=4850C78D20A77A157D675F363629A65FFFCE18E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:aa:50:6a:f9:a9:71:1c:4c:79:de:8d:26:
                    f3:50:f4:9c:17:0b:2a:c3:ef:b7:0e:52:04:11:e1:
                    de:49:9e:cd:4e:ef:42:a4:be:94:98:61:48:84:3f:
                    bf:fd:ad:d0:74:f6:a3:1e:f1:3f:59:b3:e2:db:30:
                    48:c9:02:ae:2b:25:2d:1b:88:b4:1e:1b:d8:7f:a7:
                    dd:28:3e:d9:df:68:ab:76:a1:b6:87:da:77:af:18:
                    5a:2b:87:18:55:7b:28:d0:31:d6:67:9b:8d:91:1c:
                    95:68:18:bc:b6:1a:1d:4c:da:ca:64:cb:ec:44:6b:
                    5e:41:48:ec:9f:75:bd:81:ca:56:03:af:d2:66:5e:
                    05:3b:11:6e:35:5a:91:dd:dc:ff:d3:0d:dd:81:f7:
                    40:87:f4:03:df:1e:d1:e4:ad:b9:8f:90:4e:f7:eb:
                    92:f9:d1:07:89:93:3a:73:61:d9:4e:b9:7f:b9:da:
                    84:11:9a:a0:92:1a:12:11:36:e3:42:1a:62:96:ed:
                    cb:c0:09:90:a1:f5:59:9a:28:50:64:69:53:a1:67:
                    f1:d2:ab:aa:9e:4b:91:a2:45:07:d4:1a:a5:6b:28:
                    72:f4:7c:71:00:28:67:47:23:a3:a6:73:94:4b:1a:
                    26:2a:5f:32:06:28:37:0c:1d:c5:5c:94:88:bf:01:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:50:C7:8D:20:A7:7A:15:7D:67:5F:36:36:29:A6:5F:FF:CE:18:E4
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3035/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3035/SFDHjSCnehV9Z182NimmX__OGOQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137779

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:2d:a3:b6:8c:43:f5:33:cb:ed:ed:b3:81:eb:f5:da:3d:
         4e:de:90:24:b9:fe:6b:bd:50:b6:97:e1:5c:aa:18:7f:d5:43:
         28:46:b8:c0:17:82:f4:3c:d2:b3:aa:54:93:2e:f7:e9:4c:d8:
         16:b4:cb:ed:cc:55:c7:c4:f3:80:75:e6:37:f1:66:8c:c5:d2:
         1c:cb:5f:79:5f:5a:2e:5b:a9:69:a0:b0:1b:8b:9a:95:33:52:
         4e:39:66:ba:81:4b:f4:4a:c0:0e:f3:93:2a:bb:ef:39:17:c9:
         6e:f5:a3:cb:d5:33:9d:c7:0f:87:45:4a:1e:f4:60:d4:e0:0c:
         97:06:66:a3:8f:46:b6:2b:89:bd:9f:4f:bf:9e:6f:5b:b7:3e:
         67:1b:00:55:ec:da:3b:1b:d0:ef:e5:4b:4f:95:1f:39:b2:0b:
         ae:3f:fe:59:9b:62:af:91:47:60:82:f7:3f:c0:2b:06:14:55:
         60:a8:c0:7b:bb:3a:d1:3f:11:2c:94:52:2d:1d:9d:3b:36:ee:
         e3:e3:f2:2e:be:1e:20:f7:06:04:f7:70:70:2d:aa:7b:8c:24:
         56:20:5c:55:04:4d:a9:af:2a:65:d9:72:da:45:bf:19:35:ce:
         a7:a8:d6:b7:49:f5:47:24:a0:ef:be:33:5e:e6:42:5c:24:49:
         fb:db:77:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----