Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Z4y3_30CtUgtP-4k1nj32tHFFZo.cer
File:                     Z4y3_30CtUgtP-4k1nj32tHFFZo.cer (raw, json)
Hash identifier:          j56e1RjWFXREuNTcfFkCHPMZ2LNxLoD09LW+ghfCKFY=
Subject key identifier:   67:8C:B7:FF:7D:02:B5:48:2D:3F:EE:24:D6:78:F7:DA:D1:C5:15:9A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7804
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Z4y3_30CtUgtP-4k1nj32tHFFZo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:07:14 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 58851
                          IP: 1.119.0.0/17
                          IP: 103.16.124.0/22
                          IP: 103.244.64.0/22
                          IP: 103.254.112.0/22
                          IP: 211.102.208.0/20
                          IP: 2400:a780::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30724 (0x7804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:07:14 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=678CB7FF7D02B5482D3FEE24D678F7DAD1C5159A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:82:d4:cd:86:32:9e:7f:a8:05:80:83:80:
                    18:18:e5:cb:c4:02:3d:aa:84:b6:02:0c:18:28:3c:
                    d9:9e:61:46:6c:87:4f:60:79:1e:72:fa:a8:19:9e:
                    9e:0b:fd:fc:ad:b1:e2:e3:e2:e0:8a:3c:b0:a1:6d:
                    91:6d:eb:49:9b:4e:e9:d9:d5:3b:8a:62:46:5b:14:
                    2d:9a:e7:fc:60:aa:2d:ef:53:09:70:a7:4d:d1:2a:
                    49:a5:81:98:b7:c7:6e:91:2b:41:21:bf:01:88:37:
                    3e:4f:cc:09:9e:49:7e:9a:8d:69:92:41:bd:89:77:
                    03:64:34:f5:41:7d:49:53:8a:0c:04:60:a2:aa:48:
                    c9:9e:8a:ad:1b:a6:0b:ce:4f:4e:bb:d7:38:47:90:
                    2d:4a:d1:32:d6:aa:ff:78:a8:19:00:e1:89:c2:40:
                    37:a1:78:10:b4:01:4f:d8:5d:52:7b:9c:70:0d:53:
                    b7:32:4f:fc:13:94:77:0c:b7:b6:32:44:25:36:fa:
                    33:99:69:46:2c:80:ce:4f:39:39:b1:11:10:b4:ec:
                    2d:93:69:36:43:2d:3d:64:28:5d:5b:5a:2e:9c:f6:
                    0a:ff:d8:9c:44:87:8d:68:cd:1a:6e:f7:12:7a:7d:
                    97:74:f8:5f:25:e5:26:4f:87:5d:1e:b3:d6:cb:4c:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8C:B7:FF:7D:02:B5:48:2D:3F:EE:24:D6:78:F7:DA:D1:C5:15:9A
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Z4y3_30CtUgtP-4k1nj32tHFFZo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58851

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.119.0.0/17
                  103.16.124.0/22
                  103.244.64.0/22
                  103.254.112.0/22
                  211.102.208.0/20
                IPv6:
                  2400:a780::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:b5:c6:84:f0:ac:97:45:d7:8b:e5:9e:11:9c:e9:8d:c6:66:
         d3:84:a2:ec:16:bb:74:a5:a7:5d:08:5c:ed:9e:a0:2e:c3:bb:
         cc:28:33:e1:2e:6a:1b:a4:38:1b:ec:b1:a0:30:75:9d:9e:14:
         13:52:fd:42:17:28:62:b6:cc:5a:35:23:8c:eb:6e:fa:e1:af:
         71:eb:94:bc:4d:68:02:30:04:a8:bc:3f:bb:cd:f9:3b:1e:8b:
         69:68:e4:6b:e9:df:a0:11:e4:11:73:e3:ea:ab:a3:4a:83:75:
         b1:91:b2:e8:ea:45:89:70:86:d1:4f:24:8b:9a:dc:c5:a3:8f:
         1a:48:e2:a1:7e:b8:d7:72:e8:19:ff:10:28:34:7c:32:32:2b:
         59:c1:91:68:1c:fe:22:85:e5:34:56:29:d7:cf:15:b5:6d:29:
         a4:f9:03:e9:d6:27:65:6b:fa:1a:b1:8f:0b:3f:ac:ee:5e:d8:
         34:14:cf:bf:b3:ae:23:d7:70:fc:3d:e7:f0:c6:c4:11:73:d8:
         62:b4:39:f9:ce:b8:80:24:9f:63:5f:ea:4e:6b:28:2a:db:d6:
         2e:e1:ef:39:0f:a5:99:5f:e8:94:df:28:d2:31:65:d4:d2:7a:
         e9:f3:b7:50:38:f1:c4:f5:f0:c7:8c:40:bb:b0:52:19:40:2e:
         ea:a5:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----