Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fRGXjW7O-I8hmMacrePXRs_28MM.cer
File:                     fRGXjW7O-I8hmMacrePXRs_28MM.cer (raw, json)
Hash identifier:          Mcqxt38gspDXOmt2BzWRDSBi4bh/fM4jSoAEY27XAio=
Subject key identifier:   7D:11:97:8D:6E:CE:F8:8F:21:98:C6:9C:AD:E3:D7:46:CF:F6:F0:C3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/fRGXjW7O-I8hmMacrePXRs_28MM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Wed 10 Nov 2021 20:15:32 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.115.40.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31818 (0x7c4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 10 20:15:32 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7D11978D6ECEF88F2198C69CADE3D746CFF6F0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:af:3f:25:5d:c7:24:2b:2a:18:70:59:cd:
                    51:db:cc:cf:e0:93:db:10:b3:45:10:a3:46:a6:d1:
                    d1:77:95:d8:17:79:0f:e8:c1:21:97:b3:b1:ec:14:
                    8a:e8:55:68:6e:e5:f8:2f:c4:82:2e:65:02:79:ba:
                    4c:3d:2d:f5:52:99:81:f4:83:96:60:e7:6c:44:ec:
                    cb:d3:5a:74:4b:13:86:8e:d8:eb:72:53:ea:7f:3c:
                    3e:50:b9:31:f5:27:85:0b:c6:a3:cf:a8:20:f9:1f:
                    c9:32:59:7c:d5:a5:c7:1f:31:79:00:32:e7:02:ca:
                    bd:ee:d8:64:a9:33:e0:d5:0a:ab:c4:18:60:fc:fa:
                    94:de:ac:e9:08:f0:67:a3:dd:ab:cc:8d:1a:ee:e6:
                    f2:5b:8c:a9:43:45:bd:54:bf:ba:aa:17:59:7d:e1:
                    df:19:22:6b:79:30:80:f3:bf:58:a8:6d:50:24:fd:
                    bc:38:73:fe:f4:f7:43:31:b3:30:d8:66:1f:2b:31:
                    c4:e6:5f:39:bc:72:33:aa:ab:55:0e:90:5e:09:cb:
                    71:61:87:af:0e:53:9a:79:72:b7:78:de:aa:fd:c8:
                    4d:18:ff:77:c6:1c:ff:df:3e:a9:74:7a:ec:a8:39:
                    1e:1e:4c:9b:9f:f8:11:b2:40:d2:ca:28:e0:1b:ca:
                    dc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:11:97:8D:6E:CE:F8:8F:21:98:C6:9C:AD:E3:D7:46:CF:F6:F0:C3
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/fRGXjW7O-I8hmMacrePXRs_28MM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:6f:34:5a:b8:0a:f9:7a:8a:f4:55:63:29:72:05:d7:01:a4:
         ff:25:15:5c:dc:a3:47:24:50:56:03:c0:46:41:60:db:81:53:
         f2:d1:63:c3:db:77:6b:7d:d2:68:4f:f2:13:dc:70:04:d5:46:
         74:99:06:fc:f5:8f:e9:8d:04:24:d3:55:87:a6:93:33:f8:ce:
         9c:0b:7c:04:4a:49:02:63:97:06:77:66:67:05:06:90:64:0c:
         87:66:60:04:f3:a1:71:3a:b3:4e:34:d3:58:8a:c3:35:cd:b3:
         b0:a0:5d:97:f2:1b:77:cb:07:2c:83:3e:a9:72:b5:60:6e:9b:
         60:5b:1c:77:67:d3:13:c5:2a:d3:3d:d9:e4:ff:80:f3:a4:25:
         1a:a0:25:49:5e:83:23:f0:78:d0:a6:20:eb:72:fb:43:b4:a7:
         98:4d:77:aa:74:50:4d:df:1a:2b:10:f2:11:79:3f:cf:b4:e7:
         0a:28:51:57:7e:5a:f8:ba:a6:28:36:8e:38:99:f7:fe:1f:2d:
         bd:e7:c2:e8:2f:90:82:5d:46:20:44:15:3a:c7:5c:bd:8a:87:
         59:3e:aa:ab:05:04:a9:f5:62:f7:80:25:da:6e:8e:6f:83:94:
         3d:8b:7b:b8:b5:58:fa:31:4c:89:d8:4b:b3:8d:5e:57:b6:94:
         17:4c:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----