Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bsY1GT4krQ6tWnbTm7cxif1jenk.cer
File:                     bsY1GT4krQ6tWnbTm7cxif1jenk.cer (raw, json)
Hash identifier:          +xcSK9HPrb/ymmqPnnyaIS87ugxkkrQIZePtoyCWas8=
Subject key identifier:   6E:C6:35:19:3E:24:AD:0E:AD:5A:76:D3:9B:B7:31:89:FD:63:7A:79
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7CA0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bsY1GT4krQ6tWnbTm7cxif1jenk.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 22 Nov 2021 19:48:05 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 9391
                          IP: 27.103.0.0/16
                          IP: 119.16.0.0/16
                          IP: 124.29.0.0/17
                          IP: 125.169.0.0/16
                          IP: 203.118.192.0/19
                          IP: 210.77.96.0/19
                          IP: 210.78.64.0/19
                          IP: 211.156.224.0/20
                          IP: 218.97.224.0/20
                          IP: 2402:ae00::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31904 (0x7ca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 22 19:48:05 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=6EC635193E24AD0EAD5A76D39BB73189FD637A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:96:ad:88:6d:d6:56:83:bb:7a:c3:dd:19:
                    eb:a0:12:92:52:fe:f3:28:83:3c:3a:76:98:59:74:
                    71:b4:89:85:5a:61:46:b7:4f:eb:22:89:14:ab:10:
                    7a:e9:86:8c:ed:25:be:f4:09:18:80:2a:22:56:ac:
                    09:11:c6:3f:49:57:8e:de:39:53:5f:fb:a6:87:6e:
                    cf:23:51:38:84:ea:64:47:ed:a6:da:ea:77:7f:a6:
                    58:88:5f:c3:83:2b:01:c8:d7:98:5c:b4:56:5a:7e:
                    51:fa:ee:33:f8:13:e7:23:f1:8c:db:df:7d:76:a2:
                    aa:4c:98:bb:46:1e:b6:02:bf:be:e3:79:68:cb:15:
                    ee:19:5a:bd:78:ee:63:56:0f:62:95:01:7e:9b:e7:
                    e8:7f:30:a4:6c:c7:bc:11:33:b0:1d:ea:95:ef:09:
                    e3:ed:0e:24:76:42:e6:ad:78:34:26:e0:3b:dc:57:
                    3e:7a:49:91:d6:98:92:da:f6:56:40:4a:76:5b:c0:
                    22:4f:95:fc:f1:0f:c3:45:59:84:18:da:3e:41:95:
                    5e:82:c0:47:9e:06:76:51:6e:84:fa:e6:ee:bc:ff:
                    5c:3c:3f:6a:06:a2:2b:dc:03:70:f7:04:29:9e:f1:
                    04:d5:54:c1:3e:ec:23:73:9c:dc:f5:f9:fe:d6:60:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C6:35:19:3E:24:AD:0E:AD:5A:76:D3:9B:B7:31:89:FD:63:7A:79
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bsY1GT4krQ6tWnbTm7cxif1jenk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9391

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16
                  119.16.0.0/16
                  124.29.0.0/17
                  125.169.0.0/16
                  203.118.192.0/19
                  210.77.96.0/19
                  210.78.64.0/19
                  211.156.224.0/20
                  218.97.224.0/20
                IPv6:
                  2402:ae00::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:68:23:3b:58:52:2d:9b:a0:75:68:fe:59:41:90:60:3f:12:
         13:1d:b3:76:91:b4:ab:42:30:5b:77:86:3b:52:2d:08:46:7b:
         09:42:b1:0c:af:63:14:e1:22:0e:6e:59:06:ca:bb:3d:77:af:
         ae:be:01:72:1c:68:a0:1e:73:ea:06:ef:f0:fc:97:dc:6d:5a:
         b5:7a:dd:7d:2e:24:11:a3:a6:63:5d:23:17:e8:fa:b2:57:9c:
         1f:bb:4a:5d:00:45:2c:94:42:5b:94:9d:80:23:30:69:10:a3:
         af:84:51:d4:94:f9:e2:bb:be:2d:3c:be:e5:2d:5f:7a:f1:70:
         c8:8d:f8:99:6e:1e:eb:c3:b5:c0:0a:19:6c:9e:54:e4:36:82:
         77:09:dc:37:44:ee:4d:42:05:d7:85:0c:26:3b:80:4c:f9:de:
         3c:3b:f0:7f:10:2e:22:d3:97:c5:a1:02:1a:25:db:c7:a6:9e:
         13:c5:49:d7:68:d0:e5:06:ab:0d:73:87:a2:0e:35:97:af:6d:
         3f:63:4b:31:1e:55:c0:fa:fc:49:75:9e:b3:db:4c:b3:97:06:
         7f:30:81:f9:8e:7a:0c:50:c8:9b:9c:60:6a:79:fa:d8:c2:ef:
         85:a4:63:21:f8:ab:1b:02:c1:f3:a0:22:dd:9c:7e:55:2a:07:
         a5:28:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----