Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SxRuQmJZSpipSv_geHQem3CHXew.cer
File:                     SxRuQmJZSpipSv_geHQem3CHXew.cer (raw, json)
Hash identifier:          UMfTFm9vtTwGt2+t6Tn7HT/6CGtBk8zsxYgHToQQ8qs=
Subject key identifier:   4B:14:6E:42:62:59:4A:98:A9:4A:FF:E0:78:74:1E:9B:70:87:5D:EC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       786D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/SxRuQmJZSpipSv_geHQem3CHXew.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sat 05 Jun 2021 19:59:40 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 9814
                          IP: 125.96.0.0 -- 125.98.255.255
                          IP: 180.202.0.0/15
                          IP: 210.72.224.0 -- 210.72.247.255
                          IP: 211.99.0.0/19
                          IP: 211.160.0.0/16
                          IP: 2402:3c00::/32
                          IP: 2408:6000::/24

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30829 (0x786d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  5 19:59:40 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=4B146E4262594A98A94AFFE078741E9B70875DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ad:e6:80:1d:b2:28:cd:af:65:c7:8d:1e:56:
                    b1:98:7d:44:43:7e:da:43:72:d8:9b:ed:76:29:19:
                    9c:2c:6a:25:2d:91:ed:1a:d0:9e:be:65:b7:ad:d9:
                    e1:d1:41:ed:aa:9a:5c:df:f3:cb:f5:17:01:69:52:
                    1f:25:05:e8:f9:14:ec:b5:36:a8:19:f7:1b:28:2f:
                    04:30:0d:32:04:4d:de:b8:01:4d:0d:55:0a:f6:8a:
                    47:30:f3:88:a3:ac:02:10:c9:66:e3:90:db:f6:01:
                    44:24:78:a3:4c:9f:2c:48:8a:59:f1:fc:43:30:6d:
                    cb:94:1e:22:31:5e:44:b9:17:ef:3e:6d:eb:89:a0:
                    0a:3a:fc:ad:f3:41:4e:d4:bf:ff:de:cf:3f:14:c1:
                    38:bd:a9:87:21:64:1f:6e:25:c8:cb:8c:78:53:4a:
                    ec:4f:42:ac:b5:8a:09:4f:22:99:b9:80:ec:d5:c5:
                    f6:24:be:4c:19:79:6f:a5:ee:9e:d1:16:df:6f:6d:
                    d8:e6:73:43:e2:d0:46:84:a8:04:f3:90:49:78:59:
                    07:bd:a3:de:33:41:51:ce:34:e4:46:dd:8d:51:85:
                    b7:4f:76:3e:d2:2f:71:86:9c:86:a9:c2:fa:2c:34:
                    b8:d7:5c:c9:71:d2:27:f7:a4:f4:25:9e:bd:be:46:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:14:6E:42:62:59:4A:98:A9:4A:FF:E0:78:74:1E:9B:70:87:5D:EC
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/SxRuQmJZSpipSv_geHQem3CHXew.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9814

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.96.0.0-125.98.255.255
                  180.202.0.0/15
                  210.72.224.0-210.72.247.255
                  211.99.0.0/19
                  211.160.0.0/16
                IPv6:
                  2402:3c00::/32
                  2408:6000::/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:79:3c:0d:58:e4:02:be:12:db:98:0d:63:34:53:88:35:
         84:cc:3b:77:ae:85:f8:8e:3f:f0:c6:53:98:89:89:14:8a:1f:
         52:55:55:d2:0c:2b:22:26:15:2d:55:3c:7b:b0:d1:19:f7:ec:
         13:ed:2a:27:f4:88:9f:cc:12:7a:13:9a:4c:ad:34:4c:cc:e6:
         93:78:a3:a0:a3:51:f7:d8:95:5c:e6:97:f6:f2:35:68:d6:c5:
         f8:95:b7:68:7c:eb:1e:d4:87:42:9e:d9:69:5c:ff:2a:6b:36:
         d9:89:f3:8e:da:c9:95:08:40:aa:b3:08:3a:e2:4e:17:23:fa:
         d7:33:ff:98:f9:58:34:87:1e:50:5b:5d:52:ab:b8:8d:9c:42:
         1d:3b:c7:50:67:7f:f8:a7:8b:19:38:e6:e6:72:95:86:ff:f7:
         ff:f4:9a:c7:7b:3e:da:63:6d:1d:11:d3:12:cc:bc:0f:2b:76:
         84:ea:32:5d:8e:59:87:7b:eb:6c:43:5c:58:a7:d2:42:58:f9:
         b6:8c:94:21:d1:10:85:de:d3:4e:01:5a:5a:fc:55:8d:e9:bb:
         7c:92:61:d1:ef:0e:80:b7:af:11:22:09:a1:fd:9f:b8:72:75:
         0b:a6:05:0b:8e:38:6d:f3:e7:35:b0:88:c7:4a:a2:74:3e:93:
         72:07:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org