Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
File:                     gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer (raw, json)
Hash identifier:          8WzCEw31sH5po2OUuzPFNvu+7ARO+XnrdvOwm6yZzm0=
Subject key identifier:   81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7710
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:08 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59033
                          AS: 63689
                          IP: 103.204.72.0/22
                          IP: 202.160.140.0/22
                          IP: 2402:1440::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30480 (0x7710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:08 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:47:a2:fb:91:87:c2:82:52:ac:36:f6:8e:
                    78:04:bb:05:8b:9c:b8:e0:0b:ce:59:cb:91:2c:a4:
                    1e:55:44:25:21:53:ab:0e:68:b7:11:3a:45:3d:c0:
                    f7:86:8c:64:02:42:d4:e0:04:ed:6d:b1:2b:8c:5b:
                    fa:d6:8a:d1:d5:24:f5:ef:07:ec:24:93:03:3b:7d:
                    8e:bd:45:06:91:65:0f:a5:63:a9:50:70:ba:da:45:
                    50:e3:20:be:5d:9a:6c:dd:db:ff:17:22:2f:86:e0:
                    4a:2e:3b:2c:6a:f6:f5:7f:88:37:a3:4f:ea:f4:db:
                    b3:b2:ec:43:c4:13:42:bf:8e:75:e5:1e:5b:11:d7:
                    ad:06:81:78:7c:76:bf:06:51:ed:a4:54:ab:d2:58:
                    a5:e1:2c:b6:53:49:0c:50:2f:c9:79:03:86:13:7f:
                    63:2a:97:4f:5d:8d:c6:20:79:3b:47:2f:53:70:26:
                    15:cc:8e:87:05:f7:b1:d8:a6:46:c7:99:9c:f7:62:
                    27:f1:3e:05:de:35:1f:08:d6:de:e1:05:4f:56:24:
                    18:73:42:02:e9:80:65:7e:2a:37:18:7e:0b:74:ba:
                    67:81:92:05:17:fa:f5:1b:e5:7d:f2:0f:fd:d5:38:
                    3e:b8:fd:40:f7:6c:f6:9b:c7:d1:47:c0:45:b9:fb:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59033
                  63689

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.72.0/22
                  202.160.140.0/22
                IPv6:
                  2402:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:22:f6:19:05:da:01:8a:8e:83:ce:84:d4:01:5e:78:00:c0:
         e6:39:94:2c:b6:be:1a:62:97:95:9a:7a:ad:f2:68:a8:56:48:
         45:fd:dd:7c:3f:31:ad:ee:7f:85:e3:a0:74:6e:1c:b3:bd:cd:
         3f:b7:58:96:f5:0e:97:c3:eb:55:9b:58:98:4c:90:50:ec:18:
         81:f6:ab:e8:3c:7b:7a:08:9c:bc:0f:b9:0e:50:88:3a:7c:45:
         55:61:8f:ee:56:6b:e8:98:58:4d:82:99:55:89:50:34:a6:7c:
         dc:bc:63:52:61:65:82:4f:58:40:54:a2:8f:5d:6f:ed:7d:17:
         ca:2a:cf:5d:5b:04:d7:de:b4:59:4d:33:8b:df:84:fe:24:5b:
         47:31:3c:83:e4:4f:2b:27:a0:0f:a7:99:d2:2f:6c:19:4a:79:
         95:58:a1:70:8d:17:46:e8:a2:d2:64:10:9b:d3:2a:3f:2d:f1:
         c2:46:b9:ce:25:ec:11:8d:68:f1:09:f5:9b:74:c1:09:13:b8:
         2a:c1:b9:fe:58:26:4d:63:0a:c1:61:3c:95:30:f2:10:36:9f:
         3b:03:51:b4:8b:42:9e:03:28:e0:52:a2:06:2e:e1:1e:fd:b2:
         75:23:c0:61:ff:c1:25:2c:cd:0e:bb:ec:5e:1d:40:0c:29:ce:
         8a:2b:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----