Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bWYg4xbWkhi8OwNWsGemCfO3jG0.cer
File:                     bWYg4xbWkhi8OwNWsGemCfO3jG0.cer (raw, json)
Hash identifier:          g7gu4/4vG6X6sAV9BS0SgEw/TIVZH6+ddQXStKHVk38=
Subject key identifier:   6D:66:20:E3:16:D6:92:18:BC:3B:03:56:B0:67:A6:09:F3:B7:8C:6D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7D93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/bWYg4xbWkhi8OwNWsGemCfO3jG0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 03 Jan 2022 03:54:41 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 43.228.76.0/22
                          IP: 43.254.252.0/22
                          IP: 103.23.8.0/22
                          IP: 103.47.80.0/22
                          IP: 103.203.140.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32147 (0x7d93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  3 03:54:41 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=6D6620E316D69218BC3B0356B067A609F3B78C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:e9:89:5d:e4:47:ba:d9:3a:ae:09:1d:9e:
                    08:a2:93:64:2e:87:ad:60:a9:00:7b:1a:9d:ae:3c:
                    a9:1e:2b:5f:33:fa:f5:6d:d9:3a:1c:8f:ec:4d:35:
                    f4:75:af:06:a1:0e:c7:ce:db:f8:a8:2d:5d:63:71:
                    cd:3e:12:e6:35:73:ac:07:9a:f8:4a:05:32:9a:9f:
                    9f:4c:c6:8e:8b:97:13:3c:50:9f:f9:f8:ea:d1:91:
                    0c:06:18:5c:82:35:ab:43:f9:3a:db:39:fd:8e:ac:
                    f2:1e:e3:bf:ba:81:d3:e5:5e:ba:c9:1d:85:b5:a3:
                    42:44:83:d0:a3:ab:7c:01:59:87:b5:dc:50:c8:24:
                    23:06:de:ab:af:df:82:2a:9e:4b:bc:1d:7d:23:11:
                    99:93:aa:66:d9:81:cc:7e:82:a5:0b:10:86:14:ab:
                    3a:02:b3:4f:8a:92:ca:16:41:39:31:d9:ba:1c:e3:
                    96:11:9c:df:43:42:88:72:d3:26:8c:01:c7:88:a9:
                    86:ed:41:75:df:78:8a:67:87:44:6d:fb:64:33:8e:
                    a1:55:d0:15:ff:05:b6:98:b3:21:16:4f:0b:29:4b:
                    01:c4:46:05:cf:29:94:ca:8d:7c:55:f9:5a:7c:d1:
                    db:d2:7f:9e:6f:26:d8:52:ee:9f:29:e2:04:c5:94:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:66:20:E3:16:D6:92:18:BC:3B:03:56:B0:67:A6:09:F3:B7:8C:6D
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/bWYg4xbWkhi8OwNWsGemCfO3jG0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.76.0/22
                  43.254.252.0/22
                  103.23.8.0/22
                  103.47.80.0/22
                  103.203.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:11:31:b6:22:6f:87:3c:c4:f4:1c:9d:9b:5b:f6:81:5f:a0:
         2c:92:be:83:76:8d:9e:e1:05:5c:fd:bc:bd:6d:b4:a5:1d:53:
         14:7c:f0:1b:18:fe:f6:10:fa:21:4f:fa:62:89:2d:6c:8b:ed:
         6e:b1:ab:98:65:ea:c6:7c:6d:9a:f7:ab:c0:ea:aa:ba:fe:d2:
         b4:ef:4b:7a:89:7f:e0:f5:f5:5e:c2:37:b9:d2:b2:e4:16:91:
         cf:a1:e6:63:18:04:6d:1b:30:d0:e3:18:4e:35:fd:0c:84:58:
         1f:6e:c8:60:48:04:43:0b:e3:01:eb:16:54:7e:41:d0:d1:8f:
         19:e6:6b:06:e3:ed:03:9a:dd:6e:3f:4d:00:77:01:a1:22:ad:
         df:90:fd:41:35:c3:b5:40:7e:43:25:52:aa:cb:f6:fc:fe:03:
         b0:50:00:e4:40:47:cd:68:de:ef:ea:ca:a8:20:07:ea:26:8d:
         95:e7:39:57:eb:64:78:ae:33:db:b3:0c:5a:2c:96:f5:62:6b:
         be:ca:c1:ca:87:e9:73:02:46:7f:95:e1:fc:3a:95:fe:6c:b5:
         5d:3a:0f:93:b2:b0:93:4c:53:d0:32:ab:f1:1a:a6:2b:28:00:
         6b:bc:c3:a8:de:51:60:f9:2f:d9:44:2e:46:16:45:4d:7a:c9:
         56:5a:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org