Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer
File:                     Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer (raw, json)
Hash identifier:          vLHO30LSYr3YImIqv6oWrLn0JI5pR1PYRuG42mPIQX8=
Subject key identifier:   5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:06:38 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 38372
                          IP: 112.73.0.0/16
                          IP: 119.38.128.0/18
                          IP: 120.31.0.0/16
                          IP: 2402:3240::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30698 (0x77ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:06:38 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:f7:20:55:7a:5c:f7:43:3d:1f:88:2a:f8:
                    bd:3b:b4:86:3c:14:b9:dc:81:0e:87:04:3c:aa:43:
                    6a:9a:9a:ea:75:98:6d:6a:13:3b:99:a3:db:6f:7c:
                    36:33:be:01:b9:98:e1:d7:06:39:f2:fd:8d:52:b7:
                    d5:a7:db:24:c2:ad:3d:9d:82:56:41:8e:50:77:f7:
                    0a:bb:40:fd:00:06:29:5a:b1:eb:4e:3a:0a:de:37:
                    fd:e2:f0:73:80:83:2d:9d:3e:ee:ed:e2:dd:0a:c0:
                    de:a2:ab:c2:a8:47:a9:92:6d:67:7a:ed:9b:4d:3b:
                    74:b6:fc:74:22:d2:d8:53:96:6d:e5:f7:4e:12:ea:
                    d9:b9:25:46:62:d8:48:75:1d:77:cf:39:16:e3:3d:
                    6e:eb:2c:e0:71:c8:cf:bd:be:83:38:35:4e:fb:98:
                    d7:59:04:53:a0:1a:85:f4:f5:a5:04:69:8e:e5:6a:
                    5e:e3:4b:1e:8e:3c:26:dd:1e:9a:ec:55:c6:4c:9f:
                    79:93:3f:bc:8a:ee:bc:74:c2:2b:b9:c7:6a:4a:64:
                    e6:8a:0f:5e:f6:e8:ee:5a:36:e0:6c:a7:7e:07:29:
                    4e:8f:90:8d:dc:a8:23:87:cf:d5:da:9f:3d:f1:69:
                    63:2f:6c:ba:39:7f:49:2c:cb:44:21:60:39:dd:c3:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38372

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/16
                  119.38.128.0/18
                  120.31.0.0/16
                IPv6:
                  2402:3240::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:08:98:a3:e8:80:b2:68:b8:80:62:12:7f:a1:70:bc:57:e6:
         d6:fc:f9:65:d8:ed:0d:38:07:07:da:b9:05:5c:cd:80:d4:b2:
         5b:34:1c:8d:31:bf:47:ac:04:0b:3b:e6:54:3e:7c:42:fd:74:
         d7:82:5d:cb:0c:58:88:f0:0b:e4:31:94:c0:5e:55:32:32:67:
         26:95:ff:0b:19:f3:40:b2:cd:a1:e3:44:31:29:44:63:4f:a6:
         c7:1c:d0:a0:33:50:e3:63:c2:12:14:37:5e:66:0e:cb:fb:af:
         3c:2d:ee:e4:dc:bd:1e:a8:0f:b7:10:2e:48:b1:e4:bf:1e:bd:
         6f:f5:e7:29:16:2d:41:18:c3:93:50:ce:c1:c7:91:f4:ba:9f:
         14:3b:03:ef:a2:e8:bf:7a:b7:dd:4d:07:4d:08:f4:bf:31:93:
         3b:ea:9f:1e:c0:c3:7e:eb:ba:bd:6f:0c:2f:83:c4:e5:bb:cf:
         66:c8:9c:7f:44:2d:73:69:c3:fc:da:cf:9f:31:52:3c:a6:ec:
         7a:f1:01:40:0e:37:ea:7a:62:2f:39:ef:21:11:6c:e6:e2:2b:
         73:43:d8:d8:37:64:80:da:50:5a:d9:75:3c:5a:58:5b:7f:5b:
         7d:ec:33:d8:47:4b:9b:63:b8:5c:2e:c8:f2:25:81:1f:c2:8b:
         9c:59:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----