Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/US2EFBC7rlHMv-gS2kHngUc5tSw.cer
File:                     US2EFBC7rlHMv-gS2kHngUc5tSw.cer (raw, json)
Hash identifier:          9XK8CjzM+Pw8p3MEneUPNDEbe6CkaMAMpT78RlcxSZQ=
Subject key identifier:   51:2D:84:14:10:BB:AE:51:CC:BF:E8:12:DA:41:E7:81:47:39:B5:2C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       8726
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/US2EFBC7rlHMv-gS2kHngUc5tSw.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 09 Jun 2022 07:04:24 +0000
Certificate not after:    Fri 09 Jun 2023 06:51:49 +0000
Subordinate resources:    AS: 131535
                          IP: 103.164.4.0/23
                          IP: 2407:31c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34598 (0x8726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  9 07:04:24 2022 GMT
            Not After : Jun  9 06:51:49 2023 GMT
        Subject: CN=512D841410BBAE51CCBFE812DA41E7814739B52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:1c:d5:24:70:d5:86:ff:51:d1:c7:fd:f1:
                    15:42:24:b8:1c:3c:22:18:93:4f:a5:47:f1:ec:49:
                    c5:f4:e3:65:cd:cc:30:81:4b:5d:51:3e:5e:dd:b5:
                    c2:5f:ce:cc:e5:3d:11:1d:f6:72:70:01:40:7d:9a:
                    3e:5f:da:f6:41:7a:6a:da:a8:9a:59:27:56:8c:4c:
                    19:ef:b0:98:df:ea:1a:fb:57:df:18:0c:d5:e6:0a:
                    00:87:2e:e0:e1:d2:36:49:5b:5b:16:6b:2f:d7:89:
                    70:fa:18:9d:eb:08:c1:2a:df:0c:07:36:f3:2f:17:
                    e9:c4:0b:97:8a:00:b1:55:aa:15:07:63:a3:e5:1b:
                    c5:2d:07:09:e6:cf:08:37:e7:63:7f:47:3d:98:cc:
                    66:18:18:43:78:dd:7b:d1:77:8e:a7:f1:15:0d:85:
                    ba:f3:df:16:b1:86:f8:da:a2:f4:c4:74:21:17:b8:
                    53:c3:3f:f7:51:2a:3f:09:0a:ea:d0:1c:a9:fc:75:
                    bf:6b:6d:b5:cd:01:58:3f:3e:17:7a:1b:88:43:aa:
                    db:75:27:31:d8:7a:aa:a5:82:e0:2b:2a:88:38:09:
                    ca:96:85:1f:d8:07:33:51:a5:1c:a8:32:ea:3a:65:
                    91:fc:95:b6:0b:48:9a:c8:7c:83:d7:86:4f:23:a7:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:84:14:10:BB:AE:51:CC:BF:E8:12:DA:41:E7:81:47:39:B5:2C
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/US2EFBC7rlHMv-gS2kHngUc5tSw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131535

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.4.0/23
                IPv6:
                  2407:31c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:e1:73:b7:c1:2e:97:65:19:eb:0d:81:86:27:d7:85:0f:
         0f:6d:e3:c0:55:cf:ae:ea:9e:34:4b:11:76:98:a3:f5:6c:f3:
         31:74:7e:8c:7b:ba:a5:78:5c:d5:93:5c:b7:69:cd:6c:c5:16:
         81:26:54:06:bb:16:90:f6:7a:74:3f:8d:e8:af:85:cd:31:71:
         f1:93:65:0d:eb:cf:ff:8b:04:08:18:03:9b:56:e0:e6:1c:37:
         83:a5:75:15:c6:87:af:a6:5b:71:bb:9c:ad:13:c4:17:a2:8d:
         22:5a:f1:ee:86:6c:e2:cf:2f:f7:46:71:a3:2b:27:c8:0d:a2:
         c8:9b:92:19:6a:f4:f4:14:83:4b:bb:5e:a5:e2:f1:db:2d:4d:
         93:c5:c0:12:dd:79:d7:b5:76:c4:8b:69:03:49:71:80:49:d1:
         4f:d1:a4:aa:9f:7b:d7:a4:13:2c:72:0b:d7:0a:e8:9f:b6:45:
         44:5d:ad:ff:6b:9b:48:bc:1a:f4:bf:bd:24:42:3e:35:78:cb:
         08:dc:eb:4e:f9:9d:64:f8:38:a4:ea:f5:40:2e:91:e6:32:3f:
         64:35:e1:29:59:60:9d:80:e8:ab:bb:6f:bf:eb:5f:e3:13:01:
         1a:35:07:45:f9:d3:95:4d:7c:73:77:8b:8a:64:41:58:70:1b:
         c2:2e:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----