Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/YrJSpmN7hBfId9hMYPucR1Hmi_M.cer
File:                     YrJSpmN7hBfId9hMYPucR1Hmi_M.cer (raw, json)
Hash identifier:          wrxna3xg7Z1DyCNpwOFD7Mn4sfDxjhLRCoGmKuf8KX8=
Subject key identifier:   62:B2:52:A6:63:7B:84:17:C8:77:D8:4C:60:FB:9C:47:51:E6:8B:F3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/YrJSpmN7hBfId9hMYPucR1Hmi_M.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:06:33 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.152.208.0/23

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30694 (0x77e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:06:33 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=62B252A6637B8417C877D84C60FB9C4751E68BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:1f:96:c3:ac:0d:d3:41:c5:91:97:e7:a3:
                    7e:c5:89:82:67:12:05:d4:08:99:9d:ba:29:c6:d8:
                    5d:c7:0a:55:a3:e0:b4:2d:0e:e4:1c:5b:96:28:2e:
                    5c:13:d7:87:8e:e7:36:cd:bf:ba:1d:2d:fc:4c:f4:
                    18:11:36:14:be:62:1d:08:8e:50:01:a1:03:2d:1b:
                    ad:de:91:9d:94:29:79:62:9e:46:fa:d3:91:8b:43:
                    bb:54:c1:9b:f5:4a:15:13:81:90:c6:4e:13:54:73:
                    45:f3:01:98:75:d7:7c:a9:d3:90:06:4e:82:39:6f:
                    f9:d5:de:f7:5a:83:66:e4:9b:c0:12:ac:12:ad:30:
                    0b:d4:5d:dd:4b:ea:30:b4:f4:59:b8:cb:d1:8e:8f:
                    ce:48:23:2d:b8:6e:3b:5e:e2:44:e3:f8:89:e1:b3:
                    31:f0:98:e7:d4:9a:c9:79:5f:72:82:5b:65:6f:ab:
                    64:d1:ad:d5:8e:24:eb:70:63:19:73:53:82:49:1a:
                    08:78:0e:38:ba:5b:9b:4f:37:45:bf:01:28:00:6d:
                    ae:de:e9:e1:1a:a3:eb:4e:46:f3:12:d5:88:c4:05:
                    40:d7:63:d5:78:22:8d:9d:72:fb:c9:43:d6:63:d1:
                    a9:f7:77:b6:15:76:74:08:77:78:cc:23:50:34:06:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B2:52:A6:63:7B:84:17:C8:77:D8:4C:60:FB:9C:47:51:E6:8B:F3
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/YrJSpmN7hBfId9hMYPucR1Hmi_M.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:0c:91:bb:30:2b:b7:42:c2:d9:db:c7:4d:f7:e4:98:72:a5:
         d8:48:5b:78:e7:51:70:d0:bf:e9:04:e7:9d:3f:b2:48:04:73:
         6d:a2:47:c7:dc:8e:6d:f8:c2:37:f9:45:c4:1d:48:44:81:50:
         e3:35:d7:0b:dc:24:a2:82:10:fd:b5:f5:4d:8c:3a:80:38:4a:
         bd:50:87:c1:8d:e2:9f:b9:69:69:ef:3e:6e:64:93:97:bd:3d:
         85:df:43:95:26:0f:36:07:72:5d:8a:da:a8:86:69:95:25:47:
         1e:29:eb:dd:12:33:ac:f2:7f:fe:24:a3:e4:90:c8:85:96:4b:
         38:07:0f:c4:79:1e:3b:3a:71:e8:5a:b9:8c:92:22:73:b4:c0:
         77:7b:d2:0d:d6:f0:e8:0c:6c:e1:ff:57:2f:18:b0:84:af:d5:
         63:f4:b4:bd:fa:5e:25:73:77:66:d5:26:38:d2:4f:31:80:d8:
         f6:58:b5:4e:5e:0c:f0:b5:6b:a7:1d:c3:af:8e:02:33:ea:40:
         aa:bb:4b:15:85:05:d8:d1:92:d2:b0:d3:d0:e5:22:d5:bb:8c:
         02:1d:6b:c0:2d:cf:12:09:d7:cf:dc:69:14:76:1e:a9:78:ad:
         02:5c:bf:a5:66:52:1e:8a:cd:ae:00:87:49:ef:35:f6:f3:11:
         a5:f1:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----