Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ihLD_XuIkhWD5wZVTmMM98i5BV0.cer
File:                     ihLD_XuIkhWD5wZVTmMM98i5BV0.cer (raw, json)
Hash identifier:          mGDaAZ4UNNXTmMAmb2zYs+S0Wi5LOFQKxKWY1b+tYWg=
Subject key identifier:   8A:12:C3:FD:7B:88:92:15:83:E7:06:55:4E:63:0C:F7:C8:B9:05:5D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/ihLD_XuIkhWD5wZVTmMM98i5BV0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sat 20 Nov 2021 20:17:43 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 59026
                          IP: 103.40.88.0/22
                          IP: 2401:9f80::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31892 (0x7c94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 20 20:17:43 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8A12C3FD7B88921583E706554E630CF7C8B9055D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:c8:c5:25:2e:c6:47:dc:bd:21:2f:ca:a2:
                    ca:39:aa:bf:ba:9c:a3:93:06:85:9b:d0:21:ef:37:
                    c1:fe:ef:ee:94:61:17:66:27:46:ac:6c:af:0e:c0:
                    c3:44:c7:e0:9f:00:cf:69:97:72:72:ee:c3:9e:f5:
                    9d:d5:ef:35:5d:f2:ef:6a:3a:78:25:db:88:db:3a:
                    c0:07:97:fc:d7:39:fe:02:46:f7:5d:6f:a4:94:b7:
                    4c:4c:75:85:22:27:dd:64:9a:64:a6:70:6d:d8:d5:
                    2c:4b:e4:d7:93:72:d8:3f:e9:04:05:52:4f:99:56:
                    d5:35:f4:8f:63:61:bd:fa:a9:d6:5c:a5:a9:2f:a3:
                    a2:81:b2:10:d2:0c:17:e1:14:51:0e:64:fa:77:55:
                    2b:1b:f5:2c:80:ec:e9:c5:46:52:b2:3c:0e:0c:d3:
                    7d:e1:65:40:77:a6:c7:1a:a2:04:58:1d:ce:35:9a:
                    5a:05:ca:54:3b:6c:8e:fe:ca:22:eb:24:84:ee:ba:
                    30:2d:34:0f:a2:8c:ae:df:1c:fc:60:c2:5c:7b:8d:
                    5d:26:68:1a:7d:a8:74:32:8b:4e:10:fc:68:74:3a:
                    ce:35:1b:20:8b:92:56:99:57:d0:be:69:72:8d:96:
                    9c:89:b2:33:1c:56:ef:2f:86:74:fd:47:98:43:22:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:12:C3:FD:7B:88:92:15:83:E7:06:55:4E:63:0C:F7:C8:B9:05:5D
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/999/ihLD_XuIkhWD5wZVTmMM98i5BV0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59026

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.88.0/22
                IPv6:
                  2401:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:08:43:db:c1:25:49:45:b9:14:7e:10:75:ac:82:b3:06:1c:
         ca:2d:e0:78:9f:eb:0c:3a:25:09:d6:b4:eb:d8:a2:c8:b6:28:
         23:17:a2:ba:dc:dd:c1:4c:49:8d:a9:bd:cb:c6:ef:d0:1d:2a:
         1b:c3:0f:8c:9a:b6:3a:12:3f:54:dc:e4:2d:92:91:82:a1:e0:
         7f:80:9a:e0:48:72:71:04:4d:f2:ec:53:58:28:dc:f9:2c:23:
         d1:ad:87:bf:f8:98:a5:84:f3:83:05:16:07:42:88:f7:33:21:
         c4:84:ad:13:e4:ac:e6:ce:15:c9:9d:58:6c:f3:50:36:71:11:
         68:80:92:29:31:e7:77:d0:35:b0:9e:89:25:33:88:01:6b:0e:
         e3:bf:8d:98:b5:de:e6:73:dd:8f:f9:07:3c:e1:79:53:42:e2:
         32:98:bd:cb:b4:56:96:b1:00:14:3e:63:78:98:34:9a:6b:b5:
         f3:d9:ce:7f:76:03:84:f8:15:4f:85:c9:e5:df:41:60:2b:fe:
         36:cb:bf:6c:55:ad:b4:2b:22:54:dd:41:f3:f5:ac:35:7a:b6:
         f9:79:0b:6d:88:e2:2b:a2:d8:c4:e8:52:f1:77:7f:40:f3:8b:
         02:0c:45:e9:68:09:b9:3a:2f:d2:ec:0a:51:83:36:5d:b8:a1:
         8d:fc:f1:20
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICfJQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMTEyMDIwMTc0M1oXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoOEExMkMzRkQ3Qjg4OTIxNTgzRTcwNjU1NEU2MzBDRjdDOEI5MDU1
RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMa8yMUlLsZH3L0hL8qi
yjmqv7qco5MGhZvQIe83wf7v7pRhF2YnRqxsrw7Aw0TH4J8Az2mXcnLuw571ndXv
NV3y72o6eCXbiNs6wAeX/Nc5/gJG911vpJS3TEx1hSIn3WSaZKZwbdjVLEvk15Ny
2D/pBAVST5lW1TX0j2Nhvfqp1lylqS+jooGyENIMF+EUUQ5k+ndVKxv1LIDs6cVG
UrI8DgzTfeFlQHemxxqiBFgdzjWaWgXKVDtsjv7KIuskhO66MC00D6KMrt8c/GDC
XHuNXSZoGn2odDKLThD8aHQ6zjUbIIuSVplX0L5pco2WnImyMxxW7y+GdP1HmEMi
WZUCAwEAAaOCAn4wggJ6MB0GA1UdDgQWBBSKEsP9e4iSFYPnBlVOYwz3yLkFXTAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvOTk5
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzk5OS9paExEX1h1SWtoV0Q1d1pWVG1NTTk4aTVCVjAubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmkjAuBggrBgEFBQcBBwEB/wQfMB0wDAQC
AAEwBgMEAmcoWDANBAIAAjAHAwUAJAGfgDANBgkqhkiG9w0BAQsFAAOCAQEAJQhD
28ElSUW5FH4QdayCswYcyi3geJ/rDDolCda069iiyLYoIxeiutzdwUxJjam9y8bv
0B0qG8MPjJq2OhI/VNzkLZKRgqHgf4Ca4EhycQRN8uxTWCjc+Swj0a2Hv/iYpYTz
gwUWB0KI9zMhxIStE+Ss5s4VyZ1YbPNQNnERaICSKTHnd9A1sJ6JJTOIAWsO47+N
mLXe5nPdj/kHPOF5U0LiMpi9y7RWlrEAFD5jeJg0mmu189nOf3YDhPgVT4XJ5d9B
YCv+Nsu/bFWttCsiVN1B8/WsNXq2+XkLbYjiK6LYxOhS8Xd/QPOLAgxF6WgJuTov
0uwKUYM2XbihjfzxIA==
-----END CERTIFICATE-----