Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gvEyKj8o9jyQtZ5PKyaBRs4YRJY.cer
File:                     gvEyKj8o9jyQtZ5PKyaBRs4YRJY.cer (raw, json)
Hash identifier:          pHFuYiHIH88nGgrjCGEubI3dsjNO+xiwbOOpfKfgaoI=
Subject key identifier:   82:F1:32:2A:3F:28:F6:3C:90:B5:9E:4F:2B:26:81:46:CE:18:44:96
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       778A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2194/gvEyKj8o9jyQtZ5PKyaBRs4YRJY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2194/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:04:44 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 139120
                          IP: 103.80.192.0/22
                          IP: 2400:57c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30602 (0x778a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:04:44 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=82F1322A3F28F63C90B59E4F2B268146CE184496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:73:a4:25:6c:aa:e4:5a:ff:7d:bd:85:21:
                    37:3f:bf:c8:e8:7b:30:2e:09:53:38:13:fe:b4:52:
                    df:9b:cc:7d:98:bc:46:20:2a:04:89:6c:1a:09:c1:
                    7d:ca:7c:ad:20:b2:72:d7:c5:2d:de:ec:09:09:fb:
                    a7:5b:26:07:00:6d:a9:4a:76:7a:71:e3:54:c6:5e:
                    d6:e3:97:67:1b:f5:79:b5:7c:63:6b:fd:12:c3:b5:
                    68:e2:a8:a1:ed:36:b1:dc:40:bc:8d:d6:7c:8c:81:
                    da:f8:f9:56:95:5b:e3:53:2f:f6:7b:d9:f3:84:b7:
                    ac:f3:03:bb:55:51:5c:5d:5b:15:68:8a:16:2c:e2:
                    93:0e:49:bb:43:ef:18:c9:51:44:54:e8:29:0e:0a:
                    27:1f:b9:6a:53:2c:02:0b:af:be:19:dd:08:ff:80:
                    46:fb:2e:06:e7:fc:d3:96:2e:ca:fc:d9:4c:04:47:
                    b1:29:27:73:b2:41:02:f0:86:8d:4d:2b:11:e9:c3:
                    d2:8e:86:f5:f8:40:f4:37:ef:50:df:b7:ce:a7:c1:
                    dc:64:77:b7:17:3a:22:48:c3:ef:1d:0c:78:49:d3:
                    9c:15:e6:e5:30:0e:65:d2:ef:72:db:78:e3:0e:f1:
                    87:79:6f:3a:eb:26:31:ae:8d:0c:95:d5:ed:5b:5c:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F1:32:2A:3F:28:F6:3C:90:B5:9E:4F:2B:26:81:46:CE:18:44:96
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2194/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2194/gvEyKj8o9jyQtZ5PKyaBRs4YRJY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139120

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.192.0/22
                IPv6:
                  2400:57c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:15:ce:60:ba:42:c3:91:db:c2:bb:25:53:8b:ba:fe:f1:
         27:06:84:57:17:fc:02:bc:97:88:9a:61:f8:3e:16:ec:e9:2a:
         92:1e:3e:ce:ae:e6:66:6a:41:59:a2:53:74:fe:ee:75:65:14:
         4a:ee:19:27:e2:3d:27:3e:1f:b8:0b:d2:42:b4:29:aa:d0:e4:
         ad:f7:97:1c:d8:e3:7e:69:db:99:03:23:19:64:87:17:2b:fd:
         e2:12:55:2a:2f:d0:67:f0:22:77:e1:ac:2a:04:9f:2b:dd:aa:
         e2:4c:63:af:59:20:a9:5c:a5:8f:70:4e:16:c1:26:be:7e:fb:
         55:55:d2:9f:56:23:e8:fd:9d:48:3c:e0:0a:5c:b4:4f:73:dd:
         8a:11:2f:7f:e5:bd:77:de:b3:7a:b2:0b:47:dc:86:4b:26:68:
         e0:50:73:79:40:76:65:cd:ee:a2:a3:5c:c1:f2:e1:1c:7d:1f:
         c0:03:b2:96:7a:9c:93:36:b5:77:5a:0b:a8:ec:dd:f8:40:b9:
         b9:db:f9:0f:ac:14:34:3d:77:19:09:f7:d3:8e:19:32:84:30:
         c8:dd:f7:ae:0c:4e:11:3f:65:db:9d:a5:ac:03:49:25:55:e0:
         5a:62:13:c9:90:1f:8f:40:ee:68:d0:8d:a0:1f:77:70:05:f6:
         1f:f2:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----