Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bddtxYOvGcH_lVFeiV2QiVG9BrU.cer
File:                     bddtxYOvGcH_lVFeiV2QiVG9BrU.cer (raw, json)
Hash identifier:          gcYE+34c8FKJBeoE1bniJe2TooOqPGAGpkcEi2hOsoI=
Subject key identifier:   6D:D7:6D:C5:83:AF:19:C1:FF:95:51:5E:89:5D:90:89:51:BD:06:B5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/bddtxYOvGcH_lVFeiV2QiVG9BrU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 02 Nov 2021 20:13:05 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.103.252.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31772 (0x7c1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov  2 20:13:05 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=6DD76DC583AF19C1FF95515E895D908951BD06B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:38:92:41:d5:05:6e:12:44:c0:f5:d0:8d:
                    e0:b6:9c:c2:04:4b:37:fb:1e:7b:e7:ee:04:f1:28:
                    4d:03:f4:34:a4:c3:31:4a:c8:cf:98:c0:bc:19:d4:
                    b1:7e:10:03:69:79:2d:a7:12:75:f2:80:88:67:60:
                    4e:67:43:8b:e6:9b:8b:7a:0d:11:07:d7:c1:bc:1b:
                    67:a6:46:1b:b7:2a:11:eb:a4:9f:bd:50:df:dd:e8:
                    92:a1:6a:f3:13:ac:20:78:a5:e6:30:aa:52:f0:0c:
                    64:f4:0f:25:31:03:ab:28:f2:08:32:b7:fc:2a:64:
                    42:bf:9c:53:8e:ab:d2:e6:e7:e4:e4:7f:04:b2:53:
                    d5:55:1b:94:bd:ab:36:6e:fa:b7:5c:35:f6:a6:7a:
                    c6:26:e9:9e:0c:ce:7b:59:3b:7a:8c:19:f4:d8:10:
                    ea:14:ab:dd:26:fa:55:11:53:7e:96:a3:3d:51:7b:
                    01:59:c4:e7:a3:8c:4a:d4:82:61:57:91:db:83:8e:
                    cd:b2:42:3c:42:5b:ff:23:c8:a3:01:84:05:b5:4e:
                    cc:84:f3:91:79:85:54:a6:7f:5d:6c:6f:a4:92:26:
                    d3:9b:8a:9f:6a:1e:08:56:10:b4:7c:0a:d6:de:ce:
                    e3:6f:5f:51:ba:ba:2a:40:af:7c:65:2b:25:40:0f:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:6D:C5:83:AF:19:C1:FF:95:51:5E:89:5D:90:89:51:BD:06:B5
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/bddtxYOvGcH_lVFeiV2QiVG9BrU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:d2:a3:75:14:dd:50:26:bb:00:6a:54:15:06:f7:2f:8f:
         b6:08:e1:39:96:62:ee:f6:b6:2f:09:0d:4f:89:d2:f4:07:09:
         e2:31:b1:d8:bf:7a:78:69:4f:18:1d:42:07:ee:d2:af:49:7e:
         7c:c0:5d:82:6f:0f:ab:9a:54:f6:1f:1d:28:a0:1f:d1:50:6a:
         bf:48:21:d1:8f:fa:a5:3c:56:19:2a:21:2a:a4:c6:25:a0:b9:
         33:ae:ac:ef:2a:a4:6a:07:49:41:09:a9:f6:eb:04:05:2a:03:
         6e:6a:9d:d3:a1:6a:62:14:3b:82:82:63:82:aa:a7:ed:72:12:
         e9:5a:41:01:8e:8d:99:2f:5e:f7:4e:80:03:3f:0f:b2:80:a3:
         fa:56:49:3a:92:59:85:23:8a:43:46:b9:51:f5:fb:ce:82:25:
         aa:e2:eb:bb:90:18:3a:48:7b:4c:b4:9c:2c:5c:7d:f0:79:a8:
         26:28:72:5b:d7:1d:ea:f5:93:c4:6b:4f:e1:80:a1:9f:61:00:
         6a:c7:bf:95:59:6c:ac:d4:4a:32:32:4a:99:83:34:45:22:34:
         82:12:85:94:43:d5:14:ca:1d:e3:cc:a8:13:f4:4d:e7:f3:d4:
         48:47:f7:82:b6:db:79:83:44:07:5d:10:7b:c3:ac:f6:a6:c4:
         2e:5a:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org