Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.cer
File:                     hLN7OF1Mvz8xANLh-1AkVpc1Ic0.cer (raw, json)
Hash identifier:          Lt7BgsJKiPHxawTSe4505Mriv6NodQ1f8dKvIgMJNUI=
Subject key identifier:   84:B3:7B:38:5D:4C:BF:3F:31:00:D2:E1:FB:50:24:56:97:35:21:CD
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7A31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 12 Aug 2021 02:17:54 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45075
                          AS: 55468
                          IP: 43.248.112.0/22
                          IP: 101.129.0.0/16
                          IP: 103.39.204.0/22
                          IP: 122.10.132.0/23
                          IP: 122.10.136.0/23
                          IP: 2400:d100::/32
                          IP: 2402:bac0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31281 (0x7a31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Aug 12 02:17:54 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=84B37B385D4CBF3F3100D2E1FB502456973521CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:ef:12:11:f3:6b:34:a7:31:96:2e:53:5d:
                    43:ed:74:7d:83:ef:33:1d:5c:19:10:12:21:68:a1:
                    10:15:72:9b:06:7c:44:64:00:9c:f5:d4:f4:05:20:
                    5f:1b:03:2e:46:f7:26:7d:aa:28:5e:a6:bf:02:09:
                    43:4c:f2:37:b4:b5:4f:c5:bf:0f:05:5e:00:84:53:
                    72:4f:26:ca:99:ae:2b:65:a8:0c:75:09:25:98:58:
                    6a:11:a6:91:ad:59:85:53:e3:01:e0:ca:11:5e:61:
                    53:63:ba:f6:d1:16:7f:6d:d8:9f:b6:2e:15:b1:7c:
                    c5:82:ce:20:35:06:70:07:9e:ce:69:a5:7e:ef:0f:
                    cf:3a:e2:c2:4b:17:7c:6a:d6:50:0e:e6:20:66:2e:
                    93:4f:06:9f:f1:89:3e:1d:90:69:3d:c4:28:15:a4:
                    72:58:a1:ba:26:bf:f8:28:8d:74:19:9f:1b:d2:eb:
                    6d:ca:da:91:09:b2:1b:f6:b5:99:25:02:66:f3:8c:
                    30:f4:42:3e:87:5d:92:11:ac:ba:05:45:99:03:27:
                    4d:ee:e4:ee:ae:34:6d:73:e4:49:8c:9c:f9:41:c2:
                    c5:f9:e4:bd:52:ae:26:8d:77:72:8e:43:4e:c7:d0:
                    79:54:52:c2:1c:b7:a8:40:b6:8e:40:16:53:22:fd:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:7B:38:5D:4C:BF:3F:31:00:D2:E1:FB:50:24:56:97:35:21:CD
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/hLN7OF1Mvz8xANLh-1AkVpc1Ic0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45075
                  55468

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.112.0/22
                  101.129.0.0/16
                  103.39.204.0/22
                  122.10.132.0/23
                  122.10.136.0/23
                IPv6:
                  2400:d100::/32
                  2402:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:fd:b1:96:73:a9:ac:1d:8c:1c:6d:8f:c5:05:c3:24:3e:5a:
         92:00:36:30:69:b2:e2:12:7f:33:25:96:d2:23:3b:ab:2b:65:
         2a:2c:12:18:4e:32:93:23:ca:62:b6:1f:f9:56:e3:57:0a:0c:
         e5:23:75:e3:b1:7a:fd:59:8a:8c:df:9f:1b:0b:e2:54:97:d7:
         97:6f:85:28:e7:4f:26:a3:a2:9b:63:7d:7e:58:15:79:a0:5b:
         59:2c:7a:aa:1b:5e:dc:7d:ac:54:1b:64:e6:bd:6a:3a:86:ca:
         7e:99:b5:e1:32:8b:76:3a:45:4a:92:2f:52:ea:1d:b2:bb:2d:
         09:52:da:60:81:60:09:9c:60:0f:12:4d:ce:33:68:fd:54:5c:
         68:9b:7c:29:e2:50:90:d1:38:de:00:94:3b:e4:44:ff:39:3b:
         b4:66:63:e4:cf:b7:40:db:ad:4b:c8:62:81:3d:58:5c:81:13:
         d8:a4:0d:fb:97:1a:2c:28:59:32:c3:e9:27:4b:24:90:bf:db:
         60:59:e7:6c:2d:1e:fa:b7:53:3c:d3:1c:1e:49:95:e9:2e:1f:
         e7:09:e6:8a:16:9b:68:1f:d6:d0:63:52:e0:83:4d:26:94:e1:
         0c:a2:95:19:35:1a:27:d5:55:ad:c7:61:55:a0:11:80:e9:d1:
         14:cc:12:5f
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgICejEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDgxMjAyMTc1NFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoODRCMzdCMzg1RDRDQkYzRjMxMDBEMkUxRkI1MDI0NTY5NzM1MjFD
RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMi97xIR82s0pzGWLlNd
Q+10fYPvMx1cGRASIWihEBVymwZ8RGQAnPXU9AUgXxsDLkb3Jn2qKF6mvwIJQ0zy
N7S1T8W/DwVeAIRTck8mypmuK2WoDHUJJZhYahGmka1ZhVPjAeDKEV5hU2O69tEW
f23Yn7YuFbF8xYLOIDUGcAeezmmlfu8PzzriwksXfGrWUA7mIGYuk08Gn/GJPh2Q
aT3EKBWkclihuia/+CiNdBmfG9LrbcrakQmyG/a1mSUCZvOMMPRCPoddkhGsugVF
mQMnTe7k7q40bXPkSYyc+UHCxfnkvVKuJo13co5DTsfQeVRSwhy3qEC2jkAWUyL9
pdMCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBSEs3s4XUy/PzEA0uH7UCRWlzUhzTAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTk2
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzk5Ni9oTE43T0YxTXZ6OHhBTkxoLTFBa1ZwYzFJYzAubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCwEwIDANisMEwGCCsGAQUFBwEHAQH/BD0w
OzAjBAIAATAdAwQCK/hwAwMAZYEDBAJnJ8wDBAF6CoQDBAF6CogwFAQCAAIwDgMF
ACQA0QADBQAkArrAMA0GCSqGSIb3DQEBCwUAA4IBAQCl/bGWc6msHYwcbY/FBcMk
PlqSADYwabLiEn8zJZbSIzurK2UqLBIYTjKTI8pith/5VuNXCgzlI3XjsXr9WYqM
358bC+JUl9eXb4Uo508mo6KbY31+WBV5oFtZLHqqG17cfaxUG2TmvWo6hsp+mbXh
Mot2OkVKki9S6h2yuy0JUtpggWAJnGAPEk3OM2j9VFxom3wp4lCQ0TjeAJQ75ET/
OTu0ZmPkz7dA261LyGKBPVhcgRPYpA37lxosKFkyw+knSySQv9tgWedsLR76t1M8
0xweSZXpLh/nCeaKFptoH9bQY1Lgg00mlOEMopUZNRon1VWtx2FVoBGA6dEUzBJf
-----END CERTIFICATE-----