Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fS-RN01LbadVzcA-P1iZoa3i2Sc.cer
File:                     fS-RN01LbadVzcA-P1iZoa3i2Sc.cer (raw, json)
Hash identifier:          Fowf/4pSr6B1Gu/Apd2QXELhsP8Xs6j47P3wFJCJu2E=
Subject key identifier:   7D:2F:91:37:4D:4B:6D:A7:55:CD:C0:3E:3F:58:99:A1:AD:E2:D9:27
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7958
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/fS-RN01LbadVzcA-P1iZoa3i2Sc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 05 Jul 2021 01:26:15 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63621
                          IP: 45.253.60.0/22
                          IP: 103.222.184.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31064 (0x7958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jul  5 01:26:15 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7D2F91374D4B6DA755CDC03E3F5899A1ADE2D927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:fc:8a:84:03:b1:a6:b6:1c:26:40:a1:a3:
                    a8:c3:60:c9:dd:4a:88:c6:da:2e:07:43:dd:96:37:
                    23:b2:5f:a7:d3:44:8c:5f:ac:ee:10:79:44:d4:21:
                    ee:7a:d0:ea:5d:0d:30:2e:1d:36:f6:e2:46:94:0b:
                    bd:f7:22:02:80:88:65:d2:73:1e:af:d4:f8:bc:ac:
                    bc:4b:db:a9:61:dd:09:b3:a2:de:7b:c3:c8:11:06:
                    8c:97:8a:62:42:6c:d5:38:60:cb:bf:7d:35:ed:96:
                    9f:ac:af:67:01:aa:82:45:96:7f:9a:d1:01:54:d4:
                    b8:3e:21:91:8b:4a:5e:9a:4e:50:c2:59:c9:8d:66:
                    27:ff:4d:a8:98:9a:6d:dc:98:39:77:bd:26:d3:96:
                    a7:43:d9:5c:88:bb:9e:88:0a:78:7d:0b:d7:c7:e2:
                    34:12:65:b7:0b:a6:8c:ca:80:2e:3d:41:4e:1c:44:
                    c1:c5:1c:e7:66:74:e8:4a:0f:c0:a0:87:05:1b:d9:
                    8f:ca:4b:65:06:71:45:64:5b:f7:73:a3:74:ed:cb:
                    99:8d:1d:8a:9b:7c:d2:b8:41:27:09:b4:f5:61:b2:
                    b9:03:e5:51:5a:a6:48:06:81:6d:15:e6:2b:26:8e:
                    b5:42:e7:84:2f:3d:a5:08:ed:c5:f2:5f:24:bb:b3:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:91:37:4D:4B:6D:A7:55:CD:C0:3E:3F:58:99:A1:AD:E2:D9:27
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/fS-RN01LbadVzcA-P1iZoa3i2Sc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63621

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.60.0/22
                  103.222.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:7f:5d:2d:00:ed:c3:a4:23:f0:5f:32:b3:3f:89:6e:54:58:
         bd:25:ad:c6:6e:69:18:cd:37:42:5d:b5:0b:a7:59:24:68:dd:
         24:f3:8e:22:91:fc:14:bf:07:d0:af:fc:fa:c1:2e:81:99:bd:
         fe:9c:71:56:a9:42:14:5b:dc:15:68:79:c5:34:68:17:e4:07:
         d9:f7:d0:a0:b2:b1:46:5d:53:5c:82:d9:d3:96:b8:2e:ac:b0:
         01:d7:a8:b2:56:d2:28:69:13:29:b0:fe:cd:1e:1a:86:85:4a:
         8e:cd:46:68:cf:be:4d:81:fc:a8:20:0a:49:a5:0a:ba:7e:fa:
         71:0f:b2:df:36:6a:36:5b:f0:6a:0d:bf:4e:75:d0:29:7e:58:
         63:56:52:f9:be:ad:0f:7e:e7:6e:b8:09:80:34:7c:b1:19:88:
         61:72:c0:91:37:5b:60:2a:53:fd:2e:7a:8c:49:d7:c0:a3:9e:
         d8:71:87:98:d3:42:93:0f:f3:67:58:e9:88:89:a1:94:77:d2:
         75:71:d2:98:69:9d:da:76:ec:06:de:c8:9e:d7:9e:79:07:f5:
         4b:de:34:11:06:40:8c:7e:d7:79:a7:7a:bf:45:56:8f:92:89:
         b2:ef:ff:2f:4e:3e:8f:ea:01:61:66:c7:24:79:45:5d:2c:39:
         c1:83:6d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org