Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.cer
File:                     XVJ1CH6B71ZJfWJBW3mYnJNjwg8.cer (raw, json)
Hash identifier:          /ep4U24wmXvT74oZc/sKbCizpcGfChelq2GPlzrXRVo=
Subject key identifier:   5D:52:75:08:7E:81:EF:56:49:7D:62:41:5B:79:98:9C:93:63:C2:0F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       776E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:44 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63719
                          IP: 45.255.152.0/22
                          IP: 103.232.144.0/22
                          IP: 2401:2780::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30574 (0x776e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:44 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5D5275087E81EF56497D62415B79989C9363C20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:04:bc:de:ca:b2:e0:e5:d3:7c:c7:70:31:
                    d6:d4:90:dd:79:f8:f8:7a:79:7d:26:21:aa:0f:ce:
                    66:08:a2:64:d3:54:af:45:10:01:c6:45:7a:b6:4a:
                    ef:b1:2e:99:3d:be:96:b6:2b:d1:c3:3c:47:16:ce:
                    59:93:f2:4a:83:d6:d6:37:c4:9a:85:90:bc:25:81:
                    83:84:41:24:a9:1d:a0:d5:ac:fe:90:a9:2c:1b:11:
                    6d:92:a5:ef:fd:a7:c7:20:94:e7:ef:7a:da:3f:3f:
                    bc:05:13:9b:20:20:4d:69:91:96:95:99:28:f5:85:
                    8f:2a:d1:31:1f:e9:4e:7c:c5:4d:0e:4b:70:8e:51:
                    15:40:76:85:58:98:97:53:5a:38:c4:35:fb:e2:55:
                    71:38:af:ca:64:b7:6c:70:3c:9a:bf:3e:d9:08:59:
                    6d:62:51:21:6e:f2:16:96:c1:1f:1d:68:47:05:63:
                    f0:f9:a8:06:9b:ed:cd:2b:52:5d:56:bb:83:b8:44:
                    77:5b:8b:07:6d:a1:02:b0:b8:55:83:90:1c:03:f1:
                    f0:47:ca:f6:f0:4a:7d:8b:d5:a3:d9:03:0d:25:d8:
                    3c:cd:14:e4:53:ba:e1:f0:22:c0:58:22:03:14:b8:
                    22:f2:9a:84:94:a9:ef:29:e7:f1:14:dc:ea:d8:89:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:52:75:08:7E:81:EF:56:49:7D:62:41:5B:79:98:9C:93:63:C2:0F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63719

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.255.152.0/22
                  103.232.144.0/22
                IPv6:
                  2401:2780::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:49:9f:b7:ac:06:76:90:9f:c9:6d:4c:12:f0:25:35:81:f4:
         b7:c7:62:b9:ba:93:60:d6:4a:6f:cc:9f:5d:ce:33:2f:a5:80:
         39:23:01:d8:80:6a:5e:45:ab:a7:4e:f8:30:2a:3b:cf:19:4f:
         ed:27:31:da:f0:64:0f:06:af:f9:63:6e:e9:88:60:ea:c8:30:
         03:84:0a:67:a1:5f:8e:53:66:8d:c4:b9:5c:05:18:3a:4d:09:
         4b:0f:78:c1:5e:a5:48:ff:5b:78:0d:9e:3a:f3:9d:b8:a7:63:
         c0:10:b2:b5:be:7e:5b:c2:24:2e:dd:8f:3d:2f:1e:22:e5:b1:
         9b:f8:f9:0d:95:ca:b0:8d:5f:b2:27:db:be:b1:f3:f9:d9:61:
         a9:86:2d:8d:54:c3:7f:d3:7a:3c:94:a8:31:64:0d:1c:71:5e:
         a3:d1:02:7b:25:39:3e:aa:4f:2e:f3:92:53:b4:6d:de:99:b2:
         6a:ce:bc:c0:6a:73:a2:9e:02:7f:f3:74:37:07:c2:eb:32:e2:
         7d:d4:6a:16:dd:d4:8a:65:d1:c8:3d:3c:ca:55:29:05:52:b1:
         95:56:85:2d:1c:d2:7c:01:3e:49:73:28:10:7f:6d:af:2c:aa:
         b2:62:de:e1:27:bd:7e:e9:55:ae:55:6e:ae:22:ab:ec:7f:31:
         45:5f:1e:83
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICd24wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDM0NFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoNUQ1Mjc1MDg3RTgxRUY1NjQ5N0Q2MjQxNUI3OTk4OUM5MzYzQzIw
RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgIBLzeyrLg5dN8x3Ax
1tSQ3Xn4+Hp5fSYhqg/OZgiiZNNUr0UQAcZFerZK77EumT2+lrYr0cM8RxbOWZPy
SoPW1jfEmoWQvCWBg4RBJKkdoNWs/pCpLBsRbZKl7/2nxyCU5+962j8/vAUTmyAg
TWmRlpWZKPWFjyrRMR/pTnzFTQ5LcI5RFUB2hViYl1NaOMQ1++JVcTivymS3bHA8
mr8+2QhZbWJRIW7yFpbBHx1oRwVj8PmoBpvtzStSXVa7g7hEd1uLB22hArC4VYOQ
HAPx8EfK9vBKfYvVo9kDDSXYPM0U5FO64fAiwFgiAxS4IvKahJSp7ynn8RTc6tiJ
pZUCAwEAAaOCAoQwggKAMB0GA1UdDgQWBBRdUnUIfoHvVkl9YkFbeZick2PCDzAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzc1Ni9YVkoxQ0g2QjcxWkpmV0pCVzNtWW5KTmp3ZzgubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD45zA0BggrBgEFBQcBBwEB/wQlMCMwEgQC
AAEwDAMEAi3/mAMEAmfokDANBAIAAjAHAwUAJAEngDANBgkqhkiG9w0BAQsFAAOC
AQEAmUmft6wGdpCfyW1MEvAlNYH0t8diubqTYNZKb8yfXc4zL6WAOSMB2IBqXkWr
p074MCo7zxlP7Scx2vBkDwav+WNu6Yhg6sgwA4QKZ6FfjlNmjcS5XAUYOk0JSw94
wV6lSP9beA2eOvOduKdjwBCytb5+W8IkLt2PPS8eIuWxm/j5DZXKsI1fsifbvrHz
+dlhqYYtjVTDf9N6PJSoMWQNHHFeo9ECeyU5PqpPLvOSU7Rt3pmyas68wGpzop4C
f/N0NwfC6zLifdRqFt3UimXRyD08ylUpBVKxlVaFLRzSfAE+SXMoEH9tryyqsmLe
4Se9fulVrlVuriKr7H8xRV8egw==
-----END CERTIFICATE-----