Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dFUJsQVAWrNha3S3OqMiQHIzstE.cer
File:                     dFUJsQVAWrNha3S3OqMiQHIzstE.cer (raw, json)
Hash identifier:          Zd+pCwHQEk1CB1AMy7OQUX2u1Dlf4GYSoN63WaQTnQ8=
Subject key identifier:   74:55:09:B1:05:40:5A:B3:61:6B:74:B7:3A:A3:22:40:72:33:B2:D1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       770C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/dFUJsQVAWrNha3S3OqMiQHIzstE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:04 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 139125
                          IP: 103.154.168.0/23
                          IP: 2406:5b40::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30476 (0x770c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:04 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=745509B105405AB3616B74B73AA322407233B2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:f8:e5:5b:71:e8:60:50:28:79:0a:fb:36:
                    92:3c:8d:9d:fb:7d:0a:b8:bb:8b:59:48:86:16:f0:
                    e8:5d:9d:32:8b:6f:72:cb:1a:80:d4:a0:d5:51:21:
                    6d:a4:67:d9:4f:5c:51:7d:12:5f:6e:94:2e:de:63:
                    7e:b6:f6:66:cc:18:8c:09:a3:1a:a2:ab:9b:79:78:
                    ff:b9:a9:46:d5:7a:f3:32:88:41:fc:27:51:f0:62:
                    3f:d5:b3:b3:64:e2:7a:c0:95:e6:40:ca:8e:d1:d3:
                    9e:39:5c:78:75:be:d1:4e:e5:41:0d:12:52:1c:96:
                    17:41:01:fc:81:09:08:33:93:4d:5b:70:49:3f:9c:
                    64:e3:28:fb:f4:87:c2:09:9b:b7:41:4b:81:61:f9:
                    96:32:c7:bc:84:4b:77:6d:cf:d1:90:db:53:f6:98:
                    d0:31:30:4c:5f:cc:fd:5a:6c:9d:ea:3e:13:d4:d4:
                    81:6c:3a:c0:20:58:59:3a:33:a6:94:e7:fb:66:0c:
                    c4:67:7d:4a:06:a5:8b:bf:c5:e5:ae:1d:f9:51:1c:
                    03:01:3b:7b:51:a9:e2:b2:39:c5:8a:38:e7:ce:a7:
                    e8:1d:0f:da:0c:63:58:ef:3f:fe:73:67:7e:0a:1f:
                    19:b0:75:ee:4e:6b:b5:f3:a1:60:bb:d6:fc:f7:b3:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:09:B1:05:40:5A:B3:61:6B:74:B7:3A:A3:22:40:72:33:B2:D1
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/dFUJsQVAWrNha3S3OqMiQHIzstE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139125

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.168.0/23
                IPv6:
                  2406:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:2c:69:23:f2:c0:d5:b6:2f:2b:8d:f0:2c:09:03:3a:0a:9c:
         61:9a:bb:3b:e4:8c:b8:63:8f:ff:59:ec:bf:36:be:01:57:a0:
         34:15:ca:1f:4c:12:72:19:d5:c7:86:06:e0:6b:49:92:dc:99:
         1c:c6:a5:6c:3d:93:b0:29:e3:32:4f:b9:32:d5:79:6c:45:70:
         a5:1f:b3:39:c5:48:0f:f0:7c:64:87:64:bd:0a:d5:4b:7f:c5:
         4f:f6:f1:8e:6e:88:c6:a1:ba:0c:a7:c0:59:df:20:d1:52:9c:
         6e:8d:56:0e:cf:1c:c0:d2:95:02:e9:be:79:3f:9f:f9:a8:ec:
         04:f5:43:cb:f9:62:7d:fa:68:e1:3f:2e:04:cc:9e:58:b9:97:
         45:1f:2c:fc:f1:b5:9a:ba:9a:18:82:44:64:ea:84:4a:88:38:
         87:94:df:14:c5:fa:ce:c4:42:a4:2d:24:b4:6b:0e:0f:cf:76:
         d4:c3:de:65:09:2e:d1:fd:0f:2a:f7:cf:89:4f:80:2a:a4:aa:
         e3:78:34:55:d7:e4:8e:79:88:81:25:35:a3:af:fd:56:93:1c:
         00:0c:6d:71:4e:84:26:9c:d1:48:4e:67:a6:97:2f:aa:ce:0c:
         8e:22:d4:0e:c0:5a:6a:9f:85:ce:59:34:a8:25:c1:a9:6c:ec:
         2d:a3:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----