Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Xt3Tx9QoRUif18_-YwFZzSrcnKo.cer
File:                     Xt3Tx9QoRUif18_-YwFZzSrcnKo.cer (raw, json)
Hash identifier:          +IB7IwlT9hmfklBklQU2ui8F6yWCQ4+71qBs4wqWArM=
Subject key identifier:   5E:DD:D3:C7:D4:28:45:48:9F:D7:CF:FE:63:01:59:CD:2A:DC:9C:AA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/Xt3Tx9QoRUif18_-YwFZzSrcnKo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:06:45 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 56001
                          IP: 45.113.56.0/22
                          IP: 101.251.64.0/20
                          IP: 101.251.96.0/19
                          IP: 103.17.120.0/22
                          IP: 117.48.176.0/20
                          IP: 118.126.0.0/19
                          IP: 180.150.160.0/20
                          IP: 203.134.240.0/21
                          IP: 2401:8600::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30704 (0x77f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:06:45 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5EDDD3C7D42845489FD7CFFE630159CD2ADC9CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:29:4e:4c:03:2d:60:36:4d:11:24:a9:59:
                    d7:5d:aa:ea:58:28:47:78:36:f4:e8:3c:14:ac:18:
                    34:9e:57:b0:a7:1e:5d:00:58:e3:0a:b1:9b:4b:e8:
                    db:af:5c:c7:5b:cb:21:d9:3d:c7:69:e3:5b:93:7e:
                    2a:67:e0:65:df:9f:b8:95:6b:63:b6:49:69:7d:51:
                    b0:49:8c:80:aa:c9:ad:82:f6:43:1f:c7:64:31:71:
                    6a:3f:aa:fc:c1:7d:34:10:79:75:f4:44:a7:3b:af:
                    76:07:60:81:89:9b:6d:16:63:5b:25:ec:b1:20:6b:
                    65:b6:10:65:63:f5:f0:4e:f3:52:55:74:20:ae:a8:
                    68:32:3f:49:5b:7d:e7:1c:c6:31:dd:37:b3:d0:fe:
                    d8:e0:21:03:0b:33:0c:7e:d1:e3:ec:2a:ab:c2:b9:
                    5f:ec:bb:f9:7e:c4:cd:95:89:8b:29:d2:e9:ad:98:
                    ee:e2:6e:39:6c:80:cc:da:52:d6:f9:f0:a8:21:58:
                    5f:c7:5b:f5:8d:14:d4:08:73:65:58:2d:d4:d4:f9:
                    6a:ba:17:ed:65:ef:64:94:9e:1c:a2:76:6d:e7:45:
                    ef:26:44:63:75:3a:8b:ef:66:62:59:b4:4f:82:57:
                    09:ae:1b:cf:eb:9c:e0:68:54:a2:b8:d1:de:d7:34:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DD:D3:C7:D4:28:45:48:9F:D7:CF:FE:63:01:59:CD:2A:DC:9C:AA
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/Xt3Tx9QoRUif18_-YwFZzSrcnKo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56001

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.56.0/22
                  101.251.64.0/20
                  101.251.96.0/19
                  103.17.120.0/22
                  117.48.176.0/20
                  118.126.0.0/19
                  180.150.160.0/20
                  203.134.240.0/21
                IPv6:
                  2401:8600::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:d5:d2:37:d7:10:ef:c5:06:c7:6a:e9:4b:c7:06:52:10:71:
         bd:a6:7f:d4:b6:87:7e:a3:2f:0d:21:eb:4c:9d:5e:78:16:56:
         ee:dc:0a:03:63:30:88:e0:f5:f5:13:fe:4e:2b:41:e8:6a:43:
         46:6e:51:c3:ae:b6:75:74:bd:34:78:d5:d3:0b:6f:ab:2b:39:
         cb:da:a0:ec:db:90:fa:41:bd:72:3d:ad:ab:c2:61:f7:38:1e:
         40:91:75:01:d4:f5:ac:c7:4b:d6:91:de:58:19:7f:c4:ae:e5:
         51:7f:4b:d6:33:2c:f5:27:8e:fe:d1:40:96:43:7c:c4:42:8e:
         1f:0d:b5:16:a9:7d:e8:61:d8:fb:73:3c:f8:71:32:e4:c2:a3:
         fa:bd:3e:01:07:36:76:b3:5c:8f:28:17:2f:61:6b:6f:92:7d:
         13:3b:dc:d7:e9:d8:60:6f:c4:c9:10:3a:bb:58:a1:15:5f:1e:
         bd:c8:e2:d0:a1:46:b4:25:1a:ba:3f:af:b6:12:83:6c:81:ad:
         0a:0b:fe:26:10:ff:7c:ac:d4:a3:9b:5d:26:ab:1c:01:aa:81:
         8b:66:a7:62:ee:6a:b9:cd:4d:4d:c0:7c:96:40:a8:b2:1e:8b:
         80:84:49:c3:3f:30:1e:ec:1d:f3:71:22:3e:f8:48:1b:56:ae:
         1b:59:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----