Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Wn8ldZhwIYpbr4SPKncbkUo5UKI.cer
File:                     Wn8ldZhwIYpbr4SPKncbkUo5UKI.cer (raw, json)
Hash identifier:          2Q/lB733AvxPV8LD5d+LhlK3sasdy+WAQAIH5a+eJp0=
Subject key identifier:   5A:7F:25:75:98:70:21:8A:5B:AF:84:8F:2A:77:1B:91:4A:39:50:A2
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       779A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/Wn8ldZhwIYpbr4SPKncbkUo5UKI.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:04 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.98.44.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30618 (0x779a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:04 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5A7F25759870218A5BAF848F2A771B914A3950A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:c9:33:46:e8:bb:e4:6a:b2:4b:0e:ab:e9:
                    97:6f:9d:a7:36:69:77:4a:b6:ec:d8:64:a4:f9:f6:
                    53:ee:71:4a:fe:d8:60:3f:29:16:d7:45:47:e0:15:
                    e6:fd:90:ca:44:0b:9d:3e:44:c7:38:db:7e:89:07:
                    f0:1a:fa:92:ea:a8:91:ae:c1:c2:9d:76:5b:21:55:
                    3b:f1:42:3a:59:7a:2e:3c:3f:e3:0d:36:60:fa:d2:
                    ff:cc:50:37:8c:fd:15:bf:4f:93:ee:86:cd:05:5e:
                    af:4e:a5:59:eb:33:01:38:f8:a4:70:6c:0e:bf:64:
                    41:9c:99:d5:09:7c:d1:52:13:57:aa:c0:14:5e:2b:
                    ba:9d:8a:2d:01:ac:9b:aa:35:7c:c8:e7:36:a3:93:
                    f2:d0:a3:0f:44:30:8f:17:3f:b4:df:8f:e4:03:f5:
                    be:70:7d:bf:77:54:f4:cd:ac:80:18:9c:2f:10:c5:
                    f3:9e:ea:d8:af:38:9a:32:21:9a:52:d1:b4:68:a6:
                    b5:61:e4:f3:7f:b0:9f:9f:a2:64:8b:d7:12:54:af:
                    71:91:25:dd:c4:7b:da:7a:40:c9:6e:68:7f:cd:58:
                    46:70:64:c9:aa:83:d8:a7:05:15:eb:90:3b:47:8f:
                    ce:88:38:1f:ad:cf:d0:47:7f:44:20:9e:cf:b5:7e:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7F:25:75:98:70:21:8A:5B:AF:84:8F:2A:77:1B:91:4A:39:50:A2
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/Wn8ldZhwIYpbr4SPKncbkUo5UKI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:85:b5:e6:db:9a:84:f7:bd:54:75:23:ec:f2:55:32:d1:b5:
         12:6b:ca:0a:20:b9:6d:d6:e4:6b:9f:24:90:8c:5e:e8:ed:90:
         f0:d3:a8:99:c8:b9:20:b3:fa:26:08:48:a2:eb:03:a0:2a:3b:
         b9:bc:fe:f4:ab:51:f4:9c:57:3d:cf:c7:dd:6f:23:82:56:94:
         25:85:ef:9e:e1:b0:1f:99:6e:be:fd:3b:1d:8f:c9:af:c0:f0:
         74:a5:f5:ed:52:92:a5:a9:03:ea:69:75:32:91:ee:b7:c6:9e:
         82:9d:6b:08:13:3c:87:89:85:e3:8f:45:dc:93:ef:ff:c2:29:
         9d:e4:b2:06:f5:d8:42:b7:14:4d:6b:ec:f1:9c:8f:b1:3d:91:
         b8:fa:e2:e7:cd:a1:d6:93:26:f2:68:cd:83:08:55:e0:80:78:
         5b:87:a8:eb:44:a0:7c:96:2f:8e:a9:1a:a4:0d:e5:84:34:04:
         07:28:c1:8e:36:dc:58:c1:45:d1:fd:52:b8:68:5a:74:a2:4e:
         a1:47:3f:94:af:ef:59:08:46:74:38:d7:34:ec:07:1a:a8:d2:
         c4:43:a8:35:c0:e4:f0:75:7e:a8:3d:97:8a:dc:27:c7:a5:b8:
         79:72:8e:67:66:3f:19:03:98:5b:ff:e9:a0:75:09:ec:3c:aa:
         b1:05:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----