Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jAYosb5TZWaQnNRlY8tCVvqoWYY.cer
File:                     jAYosb5TZWaQnNRlY8tCVvqoWYY.cer (raw, json)
Hash identifier:          FyjDNGdJm8VBOK+FAAHX0VhucAC1HpO7JND/Em2O+ks=
Subject key identifier:   8C:06:28:B1:BE:53:65:66:90:9C:D4:65:63:CB:42:56:FA:A8:59:86
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/jAYosb5TZWaQnNRlY8tCVvqoWYY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:06:06 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 137768
                          IP: 103.131.36.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30668 (0x77cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:06:06 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8C0628B1BE536566909CD46563CB4256FAA85986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:bb:ff:ce:1e:59:b3:03:93:46:57:93:50:
                    d3:d7:ed:6c:aa:84:77:11:c2:67:77:e3:95:f8:a9:
                    42:f0:12:a8:7a:66:5c:8f:11:3c:0f:0f:6a:bf:ec:
                    17:da:ca:13:ed:16:5f:10:7f:b3:af:0a:69:0c:00:
                    b2:e1:24:49:7f:56:53:f4:0a:a6:0b:11:65:9a:bd:
                    6d:b9:ed:7f:29:de:60:ff:a7:dc:62:a7:d1:10:05:
                    0a:45:ac:12:6a:31:2f:52:65:6b:98:be:8b:e6:7b:
                    52:3c:69:9b:18:0f:0d:fd:93:a0:27:ef:e8:3c:7b:
                    78:d4:cb:7b:ac:f4:c8:2a:b0:b2:6e:91:bc:a2:78:
                    1b:ef:c2:f6:25:81:27:1a:17:ef:7e:b8:e5:f3:81:
                    23:66:98:5e:5b:9a:9e:7c:93:c2:99:bb:8d:7f:7e:
                    e7:97:54:ec:b6:14:3c:68:ca:e9:bf:55:cd:70:19:
                    c4:75:35:dd:46:29:f8:0d:64:f3:e5:33:36:8b:e4:
                    b3:00:3a:c9:06:a2:ec:eb:5b:08:54:87:1c:b6:38:
                    8f:2f:ba:af:05:0e:29:7b:86:05:60:2d:04:e1:f0:
                    58:d8:7d:70:f3:25:49:a4:0a:df:95:54:b0:5f:b2:
                    42:6f:91:fc:44:d2:06:eb:45:2f:e4:ae:27:26:1c:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:06:28:B1:BE:53:65:66:90:9C:D4:65:63:CB:42:56:FA:A8:59:86
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/jAYosb5TZWaQnNRlY8tCVvqoWYY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137768

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:88:f5:c0:ca:1d:76:10:c9:bc:11:99:f1:7a:0f:c0:3a:39:
         c7:4b:c1:2d:fc:4c:50:b4:8c:db:73:95:e8:78:45:48:2e:8c:
         33:b7:00:85:37:59:86:09:47:f0:90:0e:e0:14:5a:41:c3:ad:
         28:fa:76:7a:d9:01:5e:9c:78:a1:c2:70:eb:60:60:1e:f7:75:
         3d:00:28:30:ba:d5:12:ec:f8:0e:39:1b:f0:0b:d1:fb:1e:04:
         06:d0:92:ae:36:b0:14:29:6b:bd:65:e5:af:9b:bd:50:75:57:
         69:c3:06:c3:f3:55:50:f6:75:3f:a4:08:d6:7f:42:f9:c6:b1:
         34:97:75:d7:98:67:6a:5f:a6:6b:65:2d:d5:ef:a5:ef:ab:c9:
         4d:0c:fa:80:cb:e3:bb:7a:e3:f2:e0:7f:1e:54:c5:da:ed:b5:
         2e:3d:4c:ac:93:e1:46:22:d8:da:97:29:8a:b9:37:25:ff:b6:
         9c:34:fa:ab:93:dd:67:10:b7:04:9e:8a:46:60:23:f0:4f:02:
         c2:d9:f0:d1:58:0c:34:f7:1a:2c:cd:27:fc:54:98:58:85:7d:
         ff:ad:df:59:66:e6:4f:14:e1:25:0f:3c:67:d7:49:6c:7c:48:
         fe:f3:e1:89:08:0e:d2:93:7a:9d:a2:43:e1:d1:48:1b:7b:40:
         cc:93:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----