Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/iylQ_bUU9_JNRWmODyjaE_xVGQg.cer
File:                     iylQ_bUU9_JNRWmODyjaE_xVGQg.cer (raw, json)
Hash identifier:          N3Eb/zWz6OuVpkXLeJR3OAy7oC5cctPifPR6ISa7Q0I=
Subject key identifier:   8B:29:50:FD:B5:14:F7:F2:4D:45:69:8E:0F:28:DA:13:FC:55:19:08
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/iylQ_bUU9_JNRWmODyjaE_xVGQg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:20 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.104.152.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30636 (0x77ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:20 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8B2950FDB514F7F24D45698E0F28DA13FC551908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:f7:64:07:62:70:43:7d:e9:ea:55:b7:f5:
                    d9:15:6e:31:d4:88:d6:5d:e8:87:ba:f3:53:d4:2e:
                    88:1e:17:1d:18:c0:f1:af:dd:d0:02:4d:ed:53:9a:
                    b9:b7:47:22:a5:70:33:3f:af:8f:0b:3b:80:17:3c:
                    c3:f1:16:76:f5:19:ac:79:2a:ba:de:3a:ab:bd:bd:
                    7d:f7:c6:5a:50:9e:a7:50:b1:a9:ab:1c:35:1f:c3:
                    d7:b5:b6:7a:1a:03:03:06:4a:26:a7:07:13:6f:db:
                    e0:3a:8a:d2:f7:24:b9:6d:3d:25:fe:c2:bd:c0:64:
                    14:45:8e:8d:71:7d:cc:e2:c8:e3:69:b4:40:3b:76:
                    a2:b8:87:14:ae:46:a3:3b:d2:fb:50:0b:21:41:86:
                    bc:a6:b0:ce:44:6b:8e:58:16:14:38:16:73:d5:41:
                    13:89:2c:56:12:0c:f8:d6:58:27:3c:6f:1f:bb:d9:
                    0a:e5:9b:c1:f3:22:e8:20:1d:29:3e:70:67:b1:28:
                    7b:da:f5:6d:75:1c:a6:81:d6:cd:1f:6a:1e:c6:0d:
                    2f:32:1b:a8:b4:61:d6:d1:40:a4:b1:60:12:13:be:
                    cd:48:83:39:2b:8c:b3:b4:34:25:31:29:73:68:9e:
                    1c:f6:e9:4f:59:42:b5:96:ac:64:89:9e:3a:9b:5b:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:50:FD:B5:14:F7:F2:4D:45:69:8E:0F:28:DA:13:FC:55:19:08
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/iylQ_bUU9_JNRWmODyjaE_xVGQg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:3c:69:f3:02:aa:2f:7c:e0:21:7b:3b:38:e0:fd:d1:a1:
         61:c7:c1:c7:fb:1f:55:33:19:35:f0:2f:af:28:dc:b2:6f:f7:
         8a:21:b9:51:83:d8:32:5c:59:7e:af:54:56:27:79:62:f2:b5:
         f9:3e:cf:20:c3:84:d7:a4:56:02:e8:bf:9a:0b:71:dc:46:76:
         2c:0d:a9:bb:b3:c5:b1:5d:d2:26:f5:4b:19:49:d8:eb:3e:68:
         b6:23:5c:f2:6d:4d:ab:cc:80:53:ab:17:0a:38:d6:ac:b6:73:
         d2:5f:99:15:dd:9b:98:de:5a:9c:cd:3f:8b:96:95:7f:97:e4:
         46:70:b3:91:a6:8c:34:2e:db:3e:bc:8a:27:18:5b:62:77:db:
         19:2d:5e:30:96:5f:e6:83:ab:07:db:4b:89:a3:75:7f:37:9e:
         a9:d7:a2:69:de:d7:83:0a:73:4c:d2:b5:e2:f6:6c:3f:5f:b1:
         2b:44:18:a8:c3:20:08:fb:49:7c:72:3a:ba:83:a7:d4:94:05:
         af:d7:c4:a0:ed:85:b5:29:f5:95:71:1a:bf:c1:78:36:81:0b:
         6a:69:b1:a4:f1:1f:e5:ab:e6:91:6b:82:25:c0:c4:8d:8e:f8:
         14:e6:ba:d0:ae:00:16:ea:ab:d2:40:1a:ee:78:c9:5e:2f:0f:
         40:ed:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org