Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jIUAtddrCwrXG87FPSVFa83S-h8.cer
File:                     jIUAtddrCwrXG87FPSVFa83S-h8.cer (raw, json)
Hash identifier:          /P51KyFY/M8aJQuZh/PYusXndDtk49owZW3PwLTsQCY=
Subject key identifier:   8C:85:00:B5:D7:6B:0B:0A:D7:1B:CE:C5:3D:25:45:6B:CD:D2:FA:1F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7ECA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/jIUAtddrCwrXG87FPSVFa83S-h8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 24 Feb 2022 02:22:10 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.208.40.0/22
                          IP: 2406:e580::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32458 (0x7eca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb 24 02:22:10 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8C8500B5D76B0B0AD71BCEC53D25456BCDD2FA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:a0:16:d0:d9:0d:e2:ec:c5:b5:3c:3e:32:
                    d6:e9:db:86:d3:15:a6:25:38:cb:b6:07:c3:7a:b3:
                    f9:49:14:cd:3b:6f:2a:89:19:e7:ee:6c:5e:2b:33:
                    5c:91:ab:e4:e3:ac:ff:7e:5b:88:22:a3:3f:fe:8f:
                    4c:af:37:c7:0c:25:8e:13:2f:0d:ee:69:15:aa:41:
                    17:cc:ce:ee:2d:db:8b:a5:71:e0:4c:5f:31:86:9c:
                    cf:0e:c9:e8:d2:56:9f:d4:c7:d8:25:98:1e:3a:03:
                    05:ce:e7:d0:7d:37:d9:0f:53:12:55:9c:eb:c9:bb:
                    d8:58:99:9c:e1:1b:5c:f2:66:60:b0:39:8c:9d:3f:
                    30:06:fc:38:92:ac:d9:84:65:a8:8d:9f:35:7d:ef:
                    61:e2:d1:53:bd:34:7c:92:17:dc:4c:b9:f2:0e:e0:
                    db:39:e6:2c:fb:b6:88:54:02:28:5e:20:7e:01:41:
                    8b:5b:d6:cd:49:b7:9f:8a:20:78:48:49:7e:79:b3:
                    4a:b4:70:fd:d7:7e:fe:e3:a3:b9:31:dd:81:08:b7:
                    bb:5e:79:be:84:40:17:b4:8c:5c:77:99:18:d3:4e:
                    a6:9a:8c:cc:3c:1f:f1:26:54:cb:4d:9d:0d:25:1c:
                    18:a1:5a:c7:4a:fc:57:a9:fa:e7:26:5f:ed:d6:73:
                    67:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:85:00:B5:D7:6B:0B:0A:D7:1B:CE:C5:3D:25:45:6B:CD:D2:FA:1F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/jIUAtddrCwrXG87FPSVFa83S-h8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.40.0/22
                IPv6:
                  2406:e580::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:55:ec:60:9f:f2:6e:8d:40:56:85:4f:aa:2d:c4:2b:18:cb:
         92:2b:ae:cf:73:1e:bc:e2:26:03:20:f3:1c:1e:55:64:a6:0b:
         66:67:bb:4b:5d:f0:38:8b:eb:ce:83:1b:19:cf:26:b3:75:1f:
         fb:a2:a6:85:dc:d6:31:c1:83:d8:84:65:d7:66:30:6e:95:3f:
         6c:31:22:ab:9a:dc:b5:91:bf:1b:82:86:94:68:1e:a1:c0:6a:
         0c:ff:fe:7a:66:e9:89:f3:c5:98:ea:d7:f0:69:f6:14:85:02:
         38:08:1c:09:2b:39:b5:7d:69:ec:c5:39:5a:f3:1a:68:42:3e:
         b8:47:f2:eb:a0:57:d6:d3:11:1f:1f:ee:b9:df:9f:4a:94:80:
         ec:40:9e:ad:5f:5b:91:19:43:17:05:c5:95:0b:8d:46:08:42:
         bb:3c:22:22:fd:87:98:12:25:45:3e:f8:1c:95:ea:de:eb:cb:
         03:40:73:cf:d0:37:a1:d7:d0:94:0f:0c:13:d6:71:a9:4d:4a:
         78:1c:d6:a9:59:07:3e:c2:37:26:fb:96:a7:36:4a:da:1d:23:
         44:bd:fb:99:05:4e:74:af:0b:3a:be:ad:87:c1:2e:59:1c:a7:
         48:04:28:6a:79:a0:92:15:98:ca:ad:27:09:89:e3:4a:b3:4e:
         28:b6:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----