Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.cer
File:                     Tb5rvdp-71BiXr0Xi4JSsWrs1-A.cer (raw, json)
Hash identifier:          +LEyHucVjf2VOeZwEIP8gghJ8hM4B74sJejjx/nDalM=
Subject key identifier:   4D:BE:6B:BD:DA:7E:EF:50:62:5E:BD:17:8B:82:52:B1:6A:EC:D7:E0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       786F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sat 05 Jun 2021 20:28:38 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 58863
                          IP: 2400:8580::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30831 (0x786f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  5 20:28:38 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=4DBE6BBDDA7EEF50625EBD178B8252B16AECD7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b5:c5:20:f0:d8:3c:8a:cf:c8:f7:07:fa:d7:
                    a2:31:46:89:f6:e1:53:71:fa:9f:94:12:8d:d6:07:
                    5a:ab:28:05:79:ac:f4:99:f6:d0:a2:1c:29:b4:9d:
                    b4:4b:84:cf:d6:f1:ed:c9:c4:c7:95:fa:3e:4c:d9:
                    9c:13:7d:8a:1a:9a:80:b1:0b:08:8c:da:24:d4:9c:
                    3b:cf:47:d4:b7:ce:bb:80:d1:ab:b6:b4:bc:46:0c:
                    61:2b:f6:9d:5e:52:48:7d:d1:6a:0d:d5:7d:d6:38:
                    9a:ea:e0:00:38:a7:1f:84:5d:36:51:d4:86:52:6a:
                    d1:88:a9:b2:8e:67:8e:93:9e:58:6f:03:e5:2f:e0:
                    6f:33:ba:b5:d3:8a:ac:93:e5:6a:63:37:ef:d1:47:
                    34:03:70:98:ac:37:9c:8a:4a:bb:15:6c:ef:92:1f:
                    28:24:62:11:2f:36:f5:c1:ae:4b:92:7c:50:f5:a2:
                    49:24:d6:bb:79:e7:0f:08:72:83:0a:6f:7c:7a:d9:
                    ef:fa:59:d1:d3:63:7c:9e:02:10:e4:be:f7:91:8f:
                    6f:01:4e:32:2a:9d:a3:83:9b:8d:19:f9:c6:1b:5a:
                    db:38:35:8a:cc:5c:7b:15:49:23:5b:9d:62:8e:fa:
                    c6:90:d5:c7:d1:04:27:ee:cb:2e:68:77:4c:e6:cd:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BE:6B:BD:DA:7E:EF:50:62:5E:BD:17:8B:82:52:B1:6A:EC:D7:E0
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1229/Tb5rvdp-71BiXr0Xi4JSsWrs1-A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58863

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8580::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:43:5d:2d:fb:22:ac:ad:0b:8b:fc:c6:43:25:b7:86:28:
         03:63:2a:70:c5:51:d3:0b:39:ad:5a:77:93:0e:65:94:a6:73:
         57:f4:2f:cd:62:59:b8:de:b1:d0:97:81:f8:3f:bc:5a:d3:65:
         91:77:64:ab:67:46:a8:e6:22:1b:e8:0e:01:b9:3d:72:08:ff:
         c7:62:1a:1e:56:57:c2:3f:e3:4a:d1:6e:5a:fd:e6:4e:aa:ca:
         28:97:4c:0b:3e:ef:6b:3a:bb:03:9c:17:e2:63:6e:05:2d:31:
         b4:f8:1e:22:9b:4b:b8:87:16:a0:7c:b6:6c:73:89:2c:5c:1a:
         d2:16:68:07:5e:b0:24:30:23:3d:0f:f9:71:24:99:da:1d:c2:
         47:61:de:74:a1:e4:cc:3b:df:f5:0a:14:15:a5:fb:d4:cf:4c:
         90:b1:5c:8d:c1:4c:f6:46:0a:8d:94:bb:19:e5:f7:02:f1:27:
         87:ba:ca:2d:81:c6:35:66:55:3c:bd:b8:fa:0c:cf:2a:2f:19:
         98:ca:c9:ca:9d:8e:6f:29:18:24:c6:67:72:c5:ce:17:63:38:
         94:b5:fb:d4:78:b9:6d:3c:4e:04:a4:22:8a:a8:6e:16:e3:d4:
         42:f8:8e:64:aa:fb:e9:d1:fc:0a:c3:ad:ea:a7:51:7e:56:63:
         92:2b:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----