Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jSYPPSDRxnM3XFOlHKgt-2w4bhM.cer
File:                     jSYPPSDRxnM3XFOlHKgt-2w4bhM.cer (raw, json)
Hash identifier:          /+9jzJelN+v9ahh9S7IL8ErtY5Jkyhr7BgNaVpakU18=
Subject key identifier:   8D:26:0F:3D:20:D1:C6:73:37:5C:53:A5:1C:A8:2D:FB:6C:38:6E:13
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7720
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/jSYPPSDRxnM3XFOlHKgt-2w4bhM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:25 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63614
                          IP: 27.0.164.0/22
                          IP: 43.227.140.0/22
                          IP: 45.127.144.0/21
                          IP: 103.25.24.0/22
                          IP: 103.196.88.0/21
                          IP: 114.113.224.0/20
                          IP: 122.115.32.0/19
                          IP: 2402:9f80::/32
                          IP: 2402:e880::/32
                          IP: 2402:e980::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30496 (0x7720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:25 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8D260F3D20D1C673375C53A51CA82DFB6C386E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:4d:1e:02:d3:f1:6f:6c:5e:f7:eb:26:8c:
                    a7:4b:49:90:2f:fb:8c:38:be:9d:e5:a3:79:b4:ef:
                    47:2a:21:09:d3:b7:60:94:85:66:ea:32:af:68:fe:
                    b1:f9:e7:a2:0b:24:a9:35:73:f0:d8:68:19:d2:ac:
                    95:6e:4e:b2:d9:c5:55:64:63:17:aa:14:e6:10:21:
                    83:7b:a9:46:00:32:0c:9b:75:57:4f:93:64:ea:37:
                    52:3a:0c:06:1a:c8:e5:25:5b:19:b4:e1:01:5d:7b:
                    11:c8:4e:da:48:0d:11:08:a2:89:1c:28:58:e5:25:
                    75:d3:8e:9e:29:44:4b:97:21:95:f4:b3:c6:7a:14:
                    3c:2d:75:b2:d8:71:ee:99:99:c6:02:51:47:aa:de:
                    e0:d9:60:dc:d0:51:ba:11:9d:0c:ff:fa:a0:02:9b:
                    56:39:e0:f0:03:dc:e7:0a:3e:37:ab:a3:29:95:27:
                    2b:5e:23:b4:e7:9a:7b:0e:b0:47:17:6b:00:cd:b2:
                    b5:01:7b:bb:02:cc:fc:a8:65:6e:b0:22:6e:41:0d:
                    71:b9:66:57:9e:e6:00:be:7a:fc:2d:3e:6d:f3:27:
                    0a:4d:06:25:a8:a8:5e:8a:eb:9a:9d:07:32:72:41:
                    62:2a:fb:9a:30:3a:08:e1:12:c0:86:dc:bd:8c:37:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:26:0F:3D:20:D1:C6:73:37:5C:53:A5:1C:A8:2D:FB:6C:38:6E:13
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/591/jSYPPSDRxnM3XFOlHKgt-2w4bhM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63614

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.164.0/22
                  43.227.140.0/22
                  45.127.144.0/21
                  103.25.24.0/22
                  103.196.88.0/21
                  114.113.224.0/20
                  122.115.32.0/19
                IPv6:
                  2402:9f80::/32
                  2402:e880::/32
                  2402:e980::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:60:45:0b:c4:c5:5e:7f:7b:43:f2:4a:e9:52:70:e5:b0:52:
         8b:61:51:9b:89:4a:5a:17:53:9d:51:ea:25:60:43:df:5f:7f:
         05:80:f3:6c:47:f2:89:3a:23:ca:43:82:44:98:a0:00:4e:98:
         50:c9:7e:23:90:58:49:d3:c4:0e:23:d8:1f:36:1e:68:15:26:
         c1:1d:4b:be:fa:38:c8:b8:21:7e:61:8c:29:e5:cd:bb:f7:1b:
         29:5b:44:47:18:a9:8c:81:cc:97:1c:74:58:0b:f9:6b:05:ab:
         3a:41:50:84:7c:ed:3c:9e:18:ef:72:b5:59:47:77:e0:d1:81:
         45:cb:e4:d0:d6:10:9f:ef:aa:61:7b:c4:a4:6c:bc:63:27:55:
         ba:da:1d:f1:24:92:a6:02:03:6f:2b:80:c3:e5:2f:b8:4e:07:
         2e:55:90:74:75:16:a1:bd:09:bc:c8:b6:8e:63:86:92:ce:8c:
         f0:ab:7a:3b:0c:d8:05:6c:8a:7e:63:1b:63:4e:21:d6:89:98:
         3e:d6:88:b5:b6:a7:91:d7:10:f2:54:2f:3a:b5:c6:49:86:04:
         ac:72:90:61:5c:2d:d3:d3:0a:35:c9:04:e5:27:ae:27:4c:f8:
         84:9d:80:f3:7b:a2:dd:f0:5d:43:4a:9f:f4:f9:75:67:b7:8d:
         17:f0:e8:29
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgICdyAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDIyNVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoOEQyNjBGM0QyMEQxQzY3MzM3NUM1M0E1MUNBODJERkI2QzM4NkUx
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMKwTR4C0/FvbF736yaM
p0tJkC/7jDi+neWjebTvRyohCdO3YJSFZuoyr2j+sfnnogskqTVz8NhoGdKslW5O
stnFVWRjF6oU5hAhg3upRgAyDJt1V0+TZOo3UjoMBhrI5SVbGbThAV17EchO2kgN
EQiiiRwoWOUlddOOnilES5chlfSzxnoUPC11sthx7pmZxgJRR6re4Nlg3NBRuhGd
DP/6oAKbVjng8APc5wo+N6ujKZUnK14jtOeaew6wRxdrAM2ytQF7uwLM/KhlbrAi
bkENcblmV57mAL56/C0+bfMnCk0GJaioXorrmp0HMnJBYir7mjA6COESwIbcvYw3
Vb8CAwEAAaOCArAwggKsMB0GA1UdDgQWBBSNJg89INHGczdcU6UcqC37bDhuEzAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTkx
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzU5MS9qU1lQUFNEUnhuTTNYRk9sSEtndC0ydzRiaE0ubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4fjBgBggrBgEFBQcBBwEB/wRRME8wMAQC
AAEwKgMEAhsApAMEAivjjAMEAy1/kAMEAmcZGAMEA2fEWAMEBHJx4AMEBXpzIDAb
BAIAAjAVAwUAJAKfgAMFACQC6IADBQAkAumAMA0GCSqGSIb3DQEBCwUAA4IBAQCX
YEULxMVef3tD8krpUnDlsFKLYVGbiUpaF1OdUeolYEPfX38FgPNsR/KJOiPKQ4JE
mKAATphQyX4jkFhJ08QOI9gfNh5oFSbBHUu++jjIuCF+YYwp5c279xspW0RHGKmM
gcyXHHRYC/lrBas6QVCEfO08nhjvcrVZR3fg0YFFy+TQ1hCf76phe8SkbLxjJ1W6
2h3xJJKmAgNvK4DD5S+4TgcuVZB0dRahvQm8yLaOY4aSzozwq3o7DNgFbIp+Yxtj
TiHWiZg+1oi1tqeR1xDyVC86tcZJhgSscpBhXC3T0wo1yQTlJ64nTPiEnYDze6Ld
8F1DSp/0+XVnt40X8Ogp
-----END CERTIFICATE-----