Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_DKHRIarAtwNKRhm5HWa4mxgZ6o.cer
File:                     _DKHRIarAtwNKRhm5HWa4mxgZ6o.cer (raw, json)
Hash identifier:          diBsJK9UDVhVX5jm2eOuxwjRYAxUEEUOaKc4Jyn1r88=
Subject key identifier:   FC:32:87:44:86:AB:02:DC:0D:29:18:66:E4:75:9A:E2:6C:60:67:AA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       774E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_DKHRIarAtwNKRhm5HWa4mxgZ6o.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:16 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 45.254.24.0/22
                          IP: 103.223.120.0/22
                          IP: 2405:a680::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30542 (0x774e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:16 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=FC32874486AB02DC0D291866E4759AE26C6067AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:6f:cc:15:63:d1:c2:8a:b3:bf:9a:4c:22:
                    a8:dd:f0:f1:03:b3:67:70:b6:d8:74:5a:2d:55:a6:
                    42:da:49:63:64:e8:47:d6:f4:ab:40:52:c1:d5:10:
                    4d:e5:39:49:18:77:63:f7:f8:57:3c:8d:65:53:c4:
                    dd:3f:9e:8e:6b:20:91:1f:92:56:76:9d:97:b3:b9:
                    c4:e0:eb:34:c6:54:c3:36:0c:24:69:6f:75:03:f8:
                    68:08:c3:16:22:39:32:8a:f1:79:13:85:9c:f7:bb:
                    32:69:ab:05:a5:92:d0:cd:b0:fd:46:20:85:c3:91:
                    7c:e1:ae:c8:d6:ff:9a:53:09:e3:52:d3:ae:22:c2:
                    ac:80:42:f6:79:5b:5f:fe:3c:51:57:8b:d2:af:de:
                    1c:5c:71:03:08:ea:26:da:94:7a:e8:2b:04:45:6d:
                    cc:15:55:45:fa:34:6b:75:bb:87:50:f7:82:7b:f4:
                    45:a9:4c:2c:fb:e5:83:1f:a8:30:ff:c6:1d:df:85:
                    4c:62:7a:d6:ab:cf:c9:01:d8:85:52:27:af:9d:83:
                    36:0b:93:cb:76:d3:e5:5f:8d:f1:4a:4b:bd:49:c1:
                    9b:95:28:5b:dd:60:83:08:a3:05:ad:b7:79:be:98:
                    1f:f1:66:2f:04:40:a4:5a:2e:2e:4f:f0:ff:2d:a0:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:87:44:86:AB:02:DC:0D:29:18:66:E4:75:9A:E2:6C:60:67:AA
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_DKHRIarAtwNKRhm5HWa4mxgZ6o.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.24.0/22
                  103.223.120.0/22
                IPv6:
                  2405:a680::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:b8:47:6d:b3:82:4a:bd:2e:aa:80:66:58:46:ec:f4:91:d7:
         d1:71:99:0a:66:3e:a0:e7:4a:93:ed:fe:fb:6c:d0:4c:79:52:
         0e:cf:00:60:5f:7f:47:1b:6d:ba:ba:95:2d:a1:e7:9a:8a:ee:
         ca:84:4c:c7:9f:0b:1b:0b:b7:58:a4:fb:0c:e1:53:2a:af:ba:
         18:69:bf:28:fe:06:7d:92:75:c2:c8:ea:78:a9:ae:14:e7:a0:
         d3:26:6a:d3:5a:f2:bc:f7:fa:a0:81:b4:ef:02:8f:d1:44:af:
         97:79:1a:15:43:22:5a:41:cf:61:bd:e4:82:eb:af:59:7b:2d:
         a0:5a:80:66:1b:3c:17:bf:e9:8d:92:79:a5:12:e2:5d:be:d3:
         5c:72:5a:08:4e:e5:f2:92:35:62:18:81:64:a2:02:cb:c2:94:
         b3:1d:85:ea:c2:18:21:bc:f7:2f:9d:56:2c:21:fa:85:fc:2d:
         55:98:7b:34:e1:6e:21:88:7e:9f:a4:7e:87:4d:6a:91:20:b7:
         36:61:cc:4c:1e:d6:2c:2d:fd:71:1b:93:0f:79:50:e7:ee:e9:
         71:5f:d7:a2:07:e6:56:7b:ef:69:f2:2d:01:8a:8d:70:44:24:
         b5:ed:a0:4d:d5:36:fd:a2:cc:40:1e:51:82:15:8a:72:fb:ad:
         b4:54:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----