Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/djXQuIumrsIrpQlOfzgx8wyYMpk.cer
File:                     djXQuIumrsIrpQlOfzgx8wyYMpk.cer (raw, json)
Hash identifier:          hih4k/aZ2t229pUiua9/MByZDFEim6teMhFOpAoK+s8=
Subject key identifier:   76:35:D0:B8:8B:A6:AE:C2:2B:A5:09:4E:7F:38:31:F3:0C:98:32:99
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2637/djXQuIumrsIrpQlOfzgx8wyYMpk.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2637/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:34 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.104.4.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30564 (0x7764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:34 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7635D0B88BA6AEC22BA5094E7F3831F30C983299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:c6:bc:88:4b:d8:d6:db:13:dc:09:6b:fc:
                    05:59:1f:f7:4e:f5:d7:fa:eb:7f:f0:ef:d2:81:14:
                    24:d3:d9:e9:7c:79:dc:4f:cd:4e:52:48:82:af:5f:
                    86:fc:49:53:9c:0d:26:d3:ef:b6:78:4b:61:41:9a:
                    cb:cd:e4:8f:ca:8b:da:cf:51:1a:73:7b:09:85:d7:
                    e6:da:6a:13:a7:6f:8b:96:27:c1:d5:bd:01:b3:18:
                    48:da:a3:9c:36:5c:11:19:52:18:d6:f1:bb:86:39:
                    b4:5d:da:dd:6a:c5:ef:f7:1b:87:63:60:94:02:52:
                    a5:f2:19:2d:8c:d4:02:9c:54:b5:9a:3f:a8:bb:c2:
                    fa:4a:e1:85:50:6d:24:2b:45:04:65:1c:4e:16:34:
                    20:a6:bd:92:13:ab:9e:69:a3:66:68:fd:3c:59:e8:
                    57:66:5a:4b:e2:60:fd:f0:10:5e:04:5b:2e:61:b2:
                    06:27:f0:72:b1:0c:75:92:6f:80:fe:06:e5:74:eb:
                    0c:87:de:e1:12:6d:ac:cc:34:f5:cc:84:60:53:8c:
                    99:d2:fd:de:73:9e:95:40:40:d2:3f:2c:41:c3:52:
                    5a:4b:3a:88:22:bd:39:95:52:5e:55:db:1e:61:17:
                    69:bc:5c:19:4e:6d:93:ce:4d:d2:18:e9:2c:85:52:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:35:D0:B8:8B:A6:AE:C2:2B:A5:09:4E:7F:38:31:F3:0C:98:32:99
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2637/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2637/djXQuIumrsIrpQlOfzgx8wyYMpk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:eb:89:d4:09:44:44:47:44:76:03:e2:07:b6:9a:c8:46:19:
         41:40:a0:c1:12:00:da:3d:90:7c:9a:46:2f:77:34:bf:81:7f:
         3e:a8:06:bd:45:83:17:9a:48:81:fd:0a:88:45:e1:38:9d:13:
         4f:33:b6:0b:b5:24:50:16:b4:e7:80:c6:cf:1b:0c:3e:48:ed:
         27:09:2f:79:9a:6c:35:3c:79:8f:f7:ef:44:b1:f4:62:88:dc:
         5d:3b:e6:f2:75:5e:5a:9e:4f:37:b0:c4:fe:9d:bb:d5:e9:57:
         5c:cd:03:6b:f8:4f:e0:e0:78:a4:a5:80:21:d6:9f:f0:e8:9d:
         7d:ef:b8:d9:33:bd:3f:d1:99:dc:aa:43:d3:15:ac:9f:74:d2:
         a2:1b:06:a0:88:ed:49:e8:f5:ce:b4:ba:47:01:30:aa:0e:9e:
         85:39:54:a4:dc:fe:99:1c:5a:5b:79:e2:15:86:30:e7:60:bc:
         3d:38:24:a1:1c:5c:7d:37:e7:3b:73:5e:3f:ee:5f:fb:2b:ae:
         ac:05:02:bc:0d:59:16:81:e9:a8:76:33:42:63:a2:63:38:e0:
         98:1e:8c:71:74:92:9f:bf:1c:ff:08:78:57:b8:d2:01:51:b4:
         f5:a2:14:d6:a8:fa:09:9d:5c:5e:fe:88:77:ee:43:1f:cd:ac:
         db:57:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org