Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/d1yhDT38V0soA0vPFRFl4apqzhM.cer
File:                     d1yhDT38V0soA0vPFRFl4apqzhM.cer (raw, json)
Hash identifier:          EZrgixLisCvLf5cHbVXzBN7OgIrTkevFbieXBYU8j+U=
Subject key identifier:   77:5C:A1:0D:3D:FC:57:4B:28:03:4B:CF:15:11:65:E1:AA:6A:CE:13
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       773A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/d1yhDT38V0soA0vPFRFl4apqzhM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:53 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131553
                          IP: 103.164.42.0/23
                          IP: 2407:3540::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30522 (0x773a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:53 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=775CA10D3DFC574B28034BCF151165E1AA6ACE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:d5:ce:c1:6b:c1:70:47:eb:4e:0b:d5:33:
                    b0:92:48:84:04:f9:79:69:e4:d6:90:c9:21:8e:28:
                    f2:79:40:fe:4a:71:1c:49:30:42:b6:04:49:da:f5:
                    4b:24:9a:46:93:a7:36:7e:d5:d8:35:61:b9:2d:f8:
                    3b:f7:d3:02:60:d3:2c:0e:86:af:ea:0e:d5:5f:7a:
                    a3:a9:01:e8:33:86:c0:47:ff:43:a9:9f:07:75:07:
                    85:dd:32:fb:6f:ce:3e:82:ed:93:67:2c:cb:65:16:
                    dd:33:38:86:f2:e5:cd:a5:df:70:2b:33:0c:c7:bc:
                    ac:bc:d1:fe:34:63:d7:a0:cf:23:e3:1d:53:c2:fb:
                    7f:5d:06:69:01:da:ce:d6:1c:f8:66:31:4e:fc:17:
                    42:d9:ff:71:36:39:66:50:fe:da:3e:43:ca:e4:96:
                    9c:d4:5b:40:6e:67:c3:e1:ab:3e:ba:09:d3:fd:e8:
                    a9:6f:7f:44:7f:67:e1:83:f0:b3:7e:3f:a9:a2:87:
                    7d:3b:61:7c:cb:17:2f:02:bd:5c:bf:b8:0b:c1:41:
                    fd:b3:2c:bb:4c:76:a4:13:1e:ea:2b:9a:71:50:b6:
                    9c:ed:80:41:36:ad:b1:dc:42:93:6f:f9:ba:3b:35:
                    cf:a1:1a:37:c7:23:7c:65:a6:3d:06:89:9f:2e:c7:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5C:A1:0D:3D:FC:57:4B:28:03:4B:CF:15:11:65:E1:AA:6A:CE:13
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/d1yhDT38V0soA0vPFRFl4apqzhM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131553

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.42.0/23
                IPv6:
                  2407:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:3b:7c:e7:69:6e:54:27:aa:92:81:4e:85:c8:a6:a7:1b:
         ee:9b:d7:fb:84:71:f1:25:d5:83:df:7e:b1:d7:d3:aa:32:fa:
         ce:95:a7:30:06:29:29:3d:52:a0:ef:22:0e:88:01:05:ef:1f:
         1a:85:b4:b3:42:fb:d2:12:49:72:c9:78:49:08:bc:f0:23:c1:
         83:36:d4:10:74:97:39:40:c2:b2:48:03:aa:4f:dd:88:f5:dd:
         bc:b9:13:75:80:aa:92:2b:53:2e:e7:98:a2:9a:42:e1:28:01:
         08:72:92:fd:64:bf:4c:04:74:d0:0f:14:4f:2b:6c:87:00:cf:
         64:c8:d9:5c:f9:aa:8c:0b:5e:21:fa:fa:81:da:2d:66:c8:56:
         a5:b7:04:2a:f5:03:b0:b6:ca:b2:83:7d:c0:11:f4:2a:31:4c:
         0c:a6:3a:1c:30:d2:2a:59:da:70:ea:bd:e3:f4:ae:f5:e6:1c:
         80:f0:ad:76:63:8e:cd:e3:42:e8:d0:7d:7a:5d:04:96:99:52:
         57:a2:e3:50:41:d3:ea:9f:ed:bb:09:c7:fd:90:70:82:ec:9e:
         08:73:b1:8c:84:11:5b:cf:90:17:1e:c7:f7:94:75:0d:5c:e6:
         0f:39:ed:a2:17:d7:53:11:b2:7e:82:aa:f9:0f:a6:9e:3f:36:
         55:91:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----