Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/VKBWzagr3ob0npDI5natvjHOTuA.cer
File:                     VKBWzagr3ob0npDI5natvjHOTuA.cer (raw, json)
Hash identifier:          iLYFwXwotTfOMidaxM8VN9phgQa8Z8MmgLRubR58/7c=
Subject key identifier:   54:A0:56:CD:A8:2B:DE:86:F4:9E:90:C8:E6:76:AD:BE:31:CE:4E:E0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/VKBWzagr3ob0npDI5natvjHOTuA.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:06:22 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 137744
                          IP: 103.135.236.0/22
                          IP: 2404:b3c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30682 (0x77da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:06:22 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=54A056CDA82BDE86F49E90C8E676ADBE31CE4EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:e1:bb:ba:50:6d:cd:25:b9:35:64:25:2e:
                    9c:c8:1a:55:d6:8c:3e:1e:4f:86:07:94:66:0a:3e:
                    b9:8c:a7:f5:bf:fa:8b:4f:57:02:bc:ea:be:a6:57:
                    99:0b:45:e4:37:8a:b0:89:72:65:88:2a:d7:47:fa:
                    8e:ae:56:c8:d8:dd:ba:f9:2b:11:93:87:7e:6f:a7:
                    5d:57:fc:b5:e1:33:d5:84:18:6f:73:e4:ee:d5:bd:
                    c9:a2:ad:b3:87:b0:e1:3f:86:64:88:89:5d:e2:4b:
                    0f:8e:e1:d5:23:47:53:81:ba:0c:35:e8:a8:24:60:
                    c5:ba:1d:e0:ea:1c:50:db:50:6f:fe:c2:68:7e:fd:
                    15:31:2e:0f:67:bb:e8:6d:e8:66:61:22:b5:55:53:
                    f4:bd:0f:0a:d5:77:aa:11:5e:9a:4e:7d:e8:fd:b1:
                    8a:60:83:da:31:77:d4:d8:a0:5b:05:62:53:fc:98:
                    6e:de:80:b0:b9:54:f5:48:20:3f:a3:3f:09:13:29:
                    7b:20:4e:9c:c9:e6:d1:a8:0b:57:42:a5:2a:c4:a4:
                    c1:ae:a6:94:e5:88:c3:ae:17:29:26:2c:a0:72:82:
                    1b:8a:18:f0:a1:3f:18:ab:d5:9c:48:5d:ee:ab:31:
                    50:0f:49:f1:80:b2:4c:f2:fa:f1:03:4b:e8:25:f3:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A0:56:CD:A8:2B:DE:86:F4:9E:90:C8:E6:76:AD:BE:31:CE:4E:E0
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2873/VKBWzagr3ob0npDI5natvjHOTuA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137744

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.236.0/22
                IPv6:
                  2404:b3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:27:bc:19:e2:5b:8a:57:9c:06:0b:d5:54:28:33:40:98:
         66:b6:d2:a8:a5:1e:16:03:d7:c2:29:d6:b2:2b:ad:ac:9c:ab:
         77:aa:eb:02:25:fb:94:98:6e:c3:58:4d:96:6e:2b:e9:8f:2f:
         2f:a5:6e:09:89:55:f3:1b:54:69:bf:dc:49:88:6f:9e:d0:55:
         8e:37:13:78:76:38:98:18:d3:d4:17:26:64:96:42:71:e5:9d:
         e8:af:58:2e:b5:b8:44:99:b3:a4:5c:28:65:6a:c9:b4:c2:93:
         a2:19:49:6c:c7:12:06:83:03:6a:d2:a1:e6:68:a1:3f:97:4f:
         99:7a:b7:0c:47:4b:96:4a:16:29:13:fa:83:51:af:b6:13:ed:
         6e:a7:19:6b:f4:c0:e5:e9:74:98:3b:8a:50:49:9b:1c:94:65:
         d8:b2:53:30:23:b9:c0:54:66:75:e3:b3:c3:de:a2:9d:60:79:
         ae:74:ce:84:5a:4b:40:fb:47:b6:ad:98:27:8b:a3:e3:db:4a:
         7d:f8:37:9a:ae:40:d3:d9:ad:8d:0e:c5:0f:f5:f9:41:1a:3f:
         f7:d1:51:b0:66:41:de:76:eb:01:09:e7:49:86:94:a7:ca:41:
         52:ea:ad:98:5a:03:e4:53:fd:b3:82:9a:fd:e5:b4:9a:02:97:
         75:51:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----