Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer
File:                     Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer (raw, json)
Hash identifier:          tnhu7R/MpsZa4lCzlP0VhrV64sYC7w9kjX4+U0/e/0Q=
Subject key identifier:   63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       775A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:25 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 58593
                          IP: 42.159.0.0/16
                          IP: 103.9.8.0/22
                          IP: 163.228.0.0/16
                          IP: 2404:7940::/32
                          IP: 2406:e500::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30554 (0x775a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:25 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=63A0F163884E4E0EA98C0ED1ECFB6CBD41F66C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:a7:b0:84:69:4c:f6:eb:e8:d6:a1:5f:04:
                    00:6b:9c:22:ee:56:a2:fb:e6:6c:7c:77:f6:4d:b2:
                    1d:b5:25:5f:4b:08:4f:86:76:86:52:d6:1c:b0:07:
                    6b:3a:3e:59:8e:dd:b1:25:e4:58:d2:f1:af:b6:f7:
                    42:e2:6a:33:fb:d3:0b:d6:27:03:89:31:fb:ea:ad:
                    c1:7b:f2:93:0b:ac:23:ea:94:b4:b6:e3:0c:5c:dd:
                    b0:cf:b8:0a:a8:83:bd:4c:0c:87:ca:14:c7:1c:df:
                    ac:91:d8:ca:29:28:24:e8:8c:c3:7d:8c:ae:9c:88:
                    f0:90:8e:92:87:47:c1:2e:01:54:70:50:f7:85:5e:
                    09:d3:df:4b:db:53:92:97:9a:99:52:63:39:96:26:
                    eb:b8:c3:52:fd:40:14:d7:80:5a:4e:c6:a9:9c:1f:
                    34:d1:e8:2c:6c:ed:8e:e2:7f:81:a2:09:96:8a:9e:
                    5c:2d:f8:87:d4:5f:ef:e8:be:56:d2:82:86:f6:4a:
                    bc:f7:56:3c:21:98:f9:6d:43:3c:3a:77:cd:e6:66:
                    d7:9b:53:be:48:a2:35:f3:82:0d:de:81:c3:e1:6a:
                    f8:5d:af:b1:7a:fe:89:ae:89:b3:cb:54:91:5c:92:
                    39:88:71:af:2b:c8:3f:d7:b0:a9:d0:19:42:1a:87:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58593

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.159.0.0/16
                  103.9.8.0/22
                  163.228.0.0/16
                IPv6:
                  2404:7940::/32
                  2406:e500::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:97:53:2f:5f:96:73:a0:6f:75:45:36:1c:b4:95:c0:e9:23:
         ea:f3:c4:1d:57:d6:63:30:11:a2:71:85:0f:d6:e7:0c:94:4b:
         dc:4e:2e:11:e9:fb:15:a2:95:bb:29:a1:8b:f1:5b:b2:5e:47:
         4e:b9:47:05:1e:de:76:83:7c:73:74:ff:70:12:ec:bd:e3:9b:
         09:a5:43:e8:95:01:c0:38:5a:da:91:da:2d:48:ef:7b:30:a4:
         81:d6:04:c1:71:3f:c9:00:47:76:04:0c:b9:e7:0e:a5:46:49:
         3c:c0:6d:4c:b9:47:e1:ab:42:ae:f1:90:4b:01:d9:fb:06:86:
         a4:f5:12:08:39:ca:39:b8:71:3b:ca:40:ae:26:f4:03:f5:0c:
         b6:b8:5f:3f:75:59:c7:95:8f:f4:2f:71:13:57:40:01:ad:42:
         dc:2e:b6:72:62:b4:ef:2a:61:b9:5e:2a:d7:a4:61:af:2e:2e:
         27:e5:27:ff:1d:8d:24:1b:fe:63:6f:69:50:4b:34:08:a5:dc:
         ce:0c:5d:d4:63:d7:9b:de:80:7c:99:db:ae:37:0f:63:c5:2b:
         46:74:c9:9c:3c:96:58:26:72:f4:83:90:b1:62:9a:57:79:64:
         73:88:a1:ef:c3:a8:16:a3:85:aa:ba:31:d4:f5:d1:54:25:38:
         c4:3c:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----