Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fx24mSPVjS1Okl1_KbT6VSyxo0Q.cer
File:                     fx24mSPVjS1Okl1_KbT6VSyxo0Q.cer (raw, json)
Hash identifier:          X9xYhEiUdV58b3KW1tpBBeAQ/OIeNQDhvUh54GnffGI=
Subject key identifier:   7F:1D:B8:99:23:D5:8D:2D:4E:92:5D:7F:29:B4:FA:55:2C:B1:A3:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:57 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 137720
                          IP: 103.120.96.0/22
                          IP: 2403:5540::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30662 (0x77c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:57 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7F1DB89923D58D2D4E925D7F29B4FA552CB1A344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:82:ff:af:6b:2d:7e:22:bc:64:72:de:6e:
                    0c:15:45:29:83:b9:46:ae:a0:69:ad:a3:4f:0d:96:
                    66:2b:f8:35:d0:5c:4a:71:db:2b:3c:65:27:ad:62:
                    fc:5b:2b:54:14:34:ff:91:1f:bb:e9:05:f3:11:48:
                    c0:a1:f6:d5:d2:dd:98:7e:f2:65:09:b8:16:21:48:
                    62:5e:81:de:cf:ab:e8:79:d7:be:f9:46:71:59:81:
                    64:ba:c0:ff:4d:fa:06:45:d5:4f:ca:f9:36:da:94:
                    81:0e:a4:e8:c1:6d:e4:fd:3f:39:b8:46:c4:8c:46:
                    e6:bf:51:9e:b5:c8:f7:f0:71:08:ac:5a:22:a7:71:
                    54:0c:2d:60:31:15:28:d3:e3:f7:46:59:fc:19:e4:
                    74:69:5e:b1:cf:3e:73:3f:7f:4c:42:d7:63:8d:1d:
                    47:cd:ab:f4:c6:2b:91:8e:ad:ca:2b:2c:ac:a8:0d:
                    ce:72:6f:c2:53:8e:2a:95:e5:6a:39:2f:de:b1:2f:
                    fb:dc:84:bd:9e:9c:37:ec:4c:16:8c:6b:11:b6:0d:
                    61:39:7f:c2:72:76:6a:fd:41:24:4e:b3:78:02:4a:
                    59:3f:ae:92:19:9f:83:a3:16:f8:a9:b4:e1:cd:f9:
                    80:77:63:69:72:de:e8:35:bf:6a:0b:b8:c0:a7:ac:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:B8:99:23:D5:8D:2D:4E:92:5D:7F:29:B4:FA:55:2C:B1:A3:44
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137720

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.96.0/22
                IPv6:
                  2403:5540::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:90:83:4f:43:a3:c6:9b:8a:49:0f:fb:22:11:ed:60:1a:36:
         b0:09:13:9f:6b:aa:13:5f:84:c7:6d:ed:33:4f:cf:df:eb:34:
         fd:4b:83:7b:22:70:25:5c:3d:9f:41:32:47:63:92:08:d2:1d:
         57:13:89:98:ba:92:7a:0a:55:a0:e6:01:38:5f:e2:0b:f3:f3:
         e7:07:ce:ab:da:b9:ea:51:ff:cb:d8:de:c5:6c:e3:84:52:e0:
         8f:cf:fc:d6:5a:75:d0:93:d6:d2:8f:2e:a3:08:98:8f:19:24:
         1f:ec:31:10:fe:1c:d0:7d:6d:4a:c3:d6:b5:2a:f8:55:db:cb:
         b8:71:02:cc:93:f4:8e:b3:8a:ce:25:5b:26:f5:8e:22:d2:3a:
         87:26:bd:70:29:e1:0c:60:0b:3c:81:d8:ce:7f:9f:3c:3a:f0:
         e9:1b:8e:3f:7c:88:6e:d0:e9:32:b9:4f:eb:2d:e1:72:b8:5b:
         f0:4e:ec:3b:cf:dd:9d:e5:60:cf:6f:8a:aa:c7:eb:c9:25:79:
         93:c9:05:f6:18:a6:36:f8:2d:1d:b1:ac:71:57:f1:cd:ff:a1:
         a1:a0:0d:85:09:b1:8b:ec:f5:aa:93:a4:48:fd:a2:95:30:31:
         dc:c2:9d:74:40:66:1d:af:bd:12:08:3d:05:b4:22:c9:56:0c:
         42:84:67:24
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgICd8YwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDU1N1oXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoN0YxREI4OTkyM0Q1OEQyRDRFOTI1RDdGMjlCNEZBNTUyQ0IxQTM0
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2Lgv+vay1+Irxkct5u
DBVFKYO5Rq6gaa2jTw2WZiv4NdBcSnHbKzxlJ61i/FsrVBQ0/5Efu+kF8xFIwKH2
1dLdmH7yZQm4FiFIYl6B3s+r6HnXvvlGcVmBZLrA/036BkXVT8r5NtqUgQ6k6MFt
5P0/ObhGxIxG5r9RnrXI9/BxCKxaIqdxVAwtYDEVKNPj90ZZ/BnkdGlesc8+cz9/
TELXY40dR82r9MYrkY6tyissrKgNznJvwlOOKpXlajkv3rEv+9yEvZ6cN+xMFoxr
EbYNYTl/wnJ2av1BJE6zeAJKWT+ukhmfg6MW+Km04c35gHdjaXLe6DW/agu4wKes
5GECAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBR/HbiZI9WNLU6SXX8ptPpVLLGjRDAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4
NS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yNzg1L2Z4MjRtU1BWalMxT2tsMV9LYlQ2VlN5eG8wUS5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAhn4MC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ3hgMA0EAgACMAcDBQAkA1VAMA0GCSqGSIb3DQEBCwUAA4IBAQBg
kINPQ6PGm4pJD/siEe1gGjawCROfa6oTX4THbe0zT8/f6zT9S4N7InAlXD2fQTJH
Y5II0h1XE4mYupJ6ClWg5gE4X+IL8/PnB86r2rnqUf/L2N7FbOOEUuCPz/zWWnXQ
k9bSjy6jCJiPGSQf7DEQ/hzQfW1Kw9a1KvhV28u4cQLMk/SOs4rOJVsm9Y4i0jqH
Jr1wKeEMYAs8gdjOf588OvDpG44/fIhu0OkyuU/rLeFyuFvwTuw7z92d5WDPb4qq
x+vJJXmTyQX2GKY2+C0dsaxxV/HN/6GhoA2FCbGL7PWqk6RI/aKVMDHcwp10QGYd
r70SCD0FtCLJVgxChGck
-----END CERTIFICATE-----