Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/eZfNOlqCIoDWn9ib9x0oO4ewwXU.cer
File:                     eZfNOlqCIoDWn9ib9x0oO4ewwXU.cer (raw, json)
Hash identifier:          0NIy37PbYUEi1bgXruV5PQAxCZZDy87ms0c1Rr8iMZU=
Subject key identifier:   79:97:CD:3A:5A:82:22:80:D6:9F:D8:9B:F7:1D:28:3B:87:B0:C1:75
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       777A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/eZfNOlqCIoDWn9ib9x0oO4ewwXU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:04:30 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131577
                          IP: 103.163.180.0/23
                          IP: 2407:2ac0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30586 (0x777a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:04:30 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7997CD3A5A822280D69FD89BF71D283B87B0C175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:38:06:6c:bd:88:d6:e6:dc:6f:bd:b9:dd:
                    d1:32:0e:cd:03:4b:a3:ae:37:fc:a7:32:6e:fa:7a:
                    21:04:da:44:e1:9d:47:d1:cd:d7:af:bb:25:6b:b0:
                    20:c0:e4:68:cb:54:ce:df:21:a3:24:ef:b5:ad:58:
                    7e:1f:13:5b:53:b4:18:d0:6e:e3:a7:0e:d1:36:6e:
                    45:1f:e5:c7:9f:1b:5f:84:4d:01:51:dc:0a:1c:eb:
                    3e:fd:62:bd:33:2a:d0:4a:3a:a2:b6:a5:b7:09:f6:
                    07:a5:d9:49:38:0a:cb:8b:21:2e:89:de:00:93:90:
                    38:55:4f:91:cb:07:b1:11:cc:4d:d8:d3:65:32:06:
                    7b:98:8f:51:8a:5a:fb:f9:dc:df:3f:23:ff:6b:8e:
                    1c:b4:af:18:a5:de:0a:de:65:49:60:7f:fc:39:f9:
                    c2:6f:1e:d8:22:f2:65:da:17:d3:ff:1e:b3:51:55:
                    c5:4e:d3:4a:8c:aa:46:71:c7:b5:a8:7c:13:bd:3d:
                    42:c3:e4:1c:e9:e5:0d:07:27:81:d8:a2:53:f1:62:
                    02:92:56:b0:88:b7:04:3e:36:ab:72:d5:a7:bf:a3:
                    43:af:9c:29:8e:6c:93:58:f4:5c:ef:bf:af:23:10:
                    01:61:81:89:b9:bd:4f:27:a5:98:ab:e4:23:af:81:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:97:CD:3A:5A:82:22:80:D6:9F:D8:9B:F7:1D:28:3B:87:B0:C1:75
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/eZfNOlqCIoDWn9ib9x0oO4ewwXU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131577

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.180.0/23
                IPv6:
                  2407:2ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:dc:7e:b4:7c:36:e3:d6:28:43:4c:dd:19:8b:a4:53:1a:
         97:93:99:75:77:5f:9b:df:4c:9e:88:15:b9:8c:dd:41:4e:07:
         ef:c5:bd:93:b5:88:76:24:32:b9:40:75:ed:47:2a:62:dd:ce:
         0f:02:1b:e4:a9:77:96:85:64:73:df:cb:45:fa:9d:90:56:06:
         2b:e3:74:71:50:aa:96:85:7c:63:91:34:87:19:22:e8:e2:83:
         e4:b2:b1:4b:7c:4e:71:e9:5f:cd:d6:7d:0b:17:3e:ba:db:26:
         14:fb:8b:db:f2:af:14:fc:78:a8:30:67:df:13:87:48:2a:5f:
         d7:49:a4:c2:f6:9d:42:50:5d:15:35:07:66:87:be:50:6c:fc:
         39:a2:5b:88:3f:4e:e2:53:7f:d6:5a:19:8b:e1:da:5e:72:12:
         d3:4d:ec:f5:c3:03:8c:8f:eb:da:58:a0:9f:81:4e:91:2f:91:
         90:a4:25:67:ae:1e:98:0f:44:85:a0:18:d5:13:f5:aa:82:16:
         6c:b2:8c:b7:3f:d4:41:75:88:e8:77:0f:3d:04:c8:03:de:5b:
         5e:ac:9a:c5:30:5f:0a:7a:ac:db:f7:35:2e:5e:90:aa:d0:2c:
         90:cc:a5:c5:1b:76:5c:a3:12:aa:4a:0a:5b:48:f9:23:67:0b:
         22:b9:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----