Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_bM2LuqOtnjpudi18WnSjk_pysU.cer
File:                     _bM2LuqOtnjpudi18WnSjk_pysU.cer (raw, json)
Hash identifier:          MUiOHyU8+vjlwZYsWRJSOY3VCSNrgtofRC4Ealyr6Tw=
Subject key identifier:   FD:B3:36:2E:EA:8E:B6:78:E9:B9:D8:B5:F1:69:D2:8E:4F:E9:CA:C5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7FCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/_bM2LuqOtnjpudi18WnSjk_pysU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 08 Apr 2022 08:08:53 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 17773
                          IP: 103.248.64.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32714 (0x7fca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Apr  8 08:08:53 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=FDB3362EEA8EB678E9B9D8B5F169D28E4FE9CAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:17:da:f7:e2:87:43:1f:ca:78:d3:f4:23:16:
                    b5:26:28:63:e7:94:ff:52:9d:94:2d:6a:c3:84:f1:
                    ec:79:6a:c8:80:6a:19:60:ce:2d:c0:c8:9b:9b:71:
                    2c:53:8e:93:3d:8c:a4:bf:15:52:dc:12:1e:5b:4a:
                    00:7f:e9:69:e7:02:d2:39:74:00:bf:25:8e:51:5b:
                    55:e5:0b:d1:8d:43:db:8d:4f:5d:bc:36:11:26:65:
                    6c:4d:0d:2e:17:d4:85:72:06:fd:a2:86:01:b0:1e:
                    bd:e4:67:bd:47:fc:63:c2:f3:50:21:2b:9b:27:0a:
                    3e:07:dc:b2:7d:1f:36:a6:f7:1d:87:d2:27:13:59:
                    50:f9:c4:a1:fe:a3:0b:f8:f4:72:9c:43:ff:ac:f4:
                    c3:0b:60:2c:d6:cf:2b:e7:9f:d9:1c:a7:8c:fa:b4:
                    0d:33:e7:97:38:83:5f:f9:60:cc:5d:ff:13:43:d6:
                    d6:ab:8c:02:a4:80:83:f4:cb:b3:14:47:5b:b0:ca:
                    6b:d7:b9:51:c6:df:39:ad:84:09:f4:57:86:d5:16:
                    2a:0a:81:cf:1b:fe:10:ab:e4:80:66:f2:a0:95:57:
                    3e:43:ea:d9:40:4b:6d:f4:51:7e:94:a1:44:9e:c4:
                    48:bd:b1:37:9a:f9:8b:2b:9f:cb:3a:cd:4b:9c:3c:
                    3d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B3:36:2E:EA:8E:B6:78:E9:B9:D8:B5:F1:69:D2:8E:4F:E9:CA:C5
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/_bM2LuqOtnjpudi18WnSjk_pysU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17773

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:fb:7a:74:4f:11:52:53:86:e7:79:05:f8:00:87:38:d5:
         48:9f:70:bd:67:3f:68:53:3e:58:6b:6f:1b:48:d7:2b:0a:28:
         09:1d:dd:0c:50:5f:92:73:96:91:87:0a:a0:a7:6a:69:6d:6a:
         ea:5a:eb:a2:da:5b:a6:f1:17:e9:aa:4b:94:35:1c:34:0c:4f:
         09:7e:c5:93:04:a7:04:5d:8a:29:4e:88:43:0f:a5:0b:d0:f6:
         bf:a6:72:b7:f4:d6:e1:03:10:8b:9e:04:91:a1:3f:64:27:92:
         59:bd:8e:1e:e4:92:0b:c5:e7:d5:5a:7f:ef:64:62:64:11:23:
         6d:6d:f5:61:86:fb:2b:04:d2:70:9d:cb:9a:15:dd:f0:28:f9:
         4f:92:9c:c7:d2:24:e6:41:d8:f0:b3:18:ed:55:66:e8:36:c3:
         2d:0e:ff:c6:84:ea:c0:36:ea:6d:80:ce:2d:28:fa:09:b2:c8:
         a6:90:e8:30:03:1c:b6:41:04:7c:b4:5a:c5:32:22:c2:14:3f:
         37:64:f3:3e:6a:b6:de:8e:5c:72:70:67:1e:da:f8:af:7b:4a:
         67:df:e9:ec:bc:92:2a:15:17:14:c3:47:a9:71:fe:bb:66:48:
         02:7d:56:a4:f8:a8:e8:99:30:f9:a5:fa:86:2e:d0:6e:97:5a:
         57:f5:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org