Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/hP5Dc-7LGSpsyLixEOJVrKW2Adc.cer
File:                     hP5Dc-7LGSpsyLixEOJVrKW2Adc.cer (raw, json)
Hash identifier:          Bvj7/lZVQBrVJsDlg89me95ymf7YoEgIjquG7PxRjX8=
Subject key identifier:   84:FE:43:73:EE:CB:19:2A:6C:C8:B8:B1:10:E2:55:AC:A5:B6:01:D7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/hP5Dc-7LGSpsyLixEOJVrKW2Adc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 18 Nov 2021 19:46:27 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 58836
                          AS: 58839
                          IP: 43.250.36.0/22
                          IP: 103.255.212.0/22
                          IP: 2402:d740::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31876 (0x7c84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 18 19:46:27 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=84FE4373EECB192A6CC8B8B110E255ACA5B601D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:1e:29:ae:74:de:81:0c:9f:d9:ea:4b:e4:
                    28:95:97:e5:48:9f:e0:db:3c:a6:af:0a:e1:d0:b4:
                    87:69:bd:dd:d5:88:bd:ed:ab:72:c3:46:29:8b:4e:
                    06:9f:06:96:0c:97:ac:2b:e5:b0:85:7f:6c:48:d3:
                    51:95:89:85:5f:be:30:13:3d:17:7e:af:87:59:56:
                    2a:10:31:1b:d4:37:1d:69:ef:3c:71:99:7f:2e:e0:
                    88:8d:0a:cb:d7:48:eb:b4:3a:c1:99:27:8c:a3:58:
                    eb:7b:07:1d:db:0d:f5:b2:9d:38:0e:22:22:0d:5a:
                    8e:ed:9d:1f:07:a2:26:52:8a:e8:da:1e:d3:36:87:
                    5d:ce:02:58:48:05:82:b2:68:6d:a4:92:54:29:84:
                    17:c7:d5:60:53:8d:c4:89:57:1c:5a:d8:67:7f:7d:
                    ef:4b:f2:bc:29:3d:34:f0:41:a2:a2:24:61:89:e6:
                    5a:2e:b0:3f:3c:02:16:ce:ed:07:00:23:32:85:80:
                    12:88:b8:ab:80:75:b2:02:6f:6a:07:96:c2:e9:b2:
                    b5:f2:89:ca:b6:fe:26:4f:dd:cf:e8:b6:e5:9a:82:
                    eb:ad:01:23:bb:b3:6d:81:18:5f:e3:83:6b:ef:77:
                    a0:d2:35:db:a5:cf:5d:74:44:88:94:71:fd:ba:9e:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:43:73:EE:CB:19:2A:6C:C8:B8:B1:10:E2:55:AC:A5:B6:01:D7
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/685/hP5Dc-7LGSpsyLixEOJVrKW2Adc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58836
                  58839

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.36.0/22
                  103.255.212.0/22
                IPv6:
                  2402:d740::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:b5:09:78:c4:b8:0b:3c:b9:62:77:c8:d6:ff:51:86:41:
         51:1e:35:71:1e:de:38:19:79:8b:3f:7c:cb:a0:1a:dd:34:22:
         aa:75:14:e3:53:3d:e5:17:13:85:f9:ca:5f:f0:eb:49:8a:78:
         6c:c6:22:df:cf:d2:f8:ef:e4:e0:cc:b9:bc:78:54:dd:f8:ef:
         b8:af:08:5c:89:68:f0:a9:45:75:d6:26:ae:ac:63:a9:59:f5:
         30:87:8f:f0:9b:bc:07:87:f1:bb:17:50:9e:79:6c:24:a6:5f:
         07:19:4d:fe:b9:d0:dd:b9:fc:d7:03:50:a1:54:a7:c9:88:74:
         06:bf:4f:f1:9c:22:26:23:d0:1b:fd:98:e2:9a:df:66:c0:26:
         9f:fa:fa:08:ca:7c:a8:d0:71:a6:e5:2d:9a:18:41:68:f1:f8:
         f0:8a:3c:c5:56:98:7e:6a:c8:8d:b0:a4:67:c9:31:3d:43:64:
         a1:6d:db:e8:73:46:b8:8c:ef:43:38:e2:43:35:f9:e9:2e:c1:
         08:db:ec:c8:90:30:f3:4d:99:f4:27:c9:f4:52:3f:e9:5c:e6:
         03:70:ec:59:6e:db:8b:85:1f:d2:37:9b:42:9c:7a:32:5b:19:
         47:23:63:66:5a:73:eb:b1:1e:ab:b3:e6:83:3a:9e:65:7e:d9:
         41:cd:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----