Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
File:                     k-dJ5lSyqdzFv7NMLKmudf2DC90.cer (raw, json)
Hash identifier:          2ytN/uaXbmu0fDF7lkkIKcEH12hFgU6vknWgGltPZt0=
Subject key identifier:   93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       9477
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 17 Feb 2023 03:16:21 +0000
Certificate not after:    Sat 17 Feb 2024 02:46:59 +0000
Subordinate resources:    AS: 137732
                          IP: 103.160.244.0/23
                          IP: 2406:f4c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38007 (0x9477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb 17 03:16:21 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:aa:1f:4d:55:d0:ff:e8:9c:bd:00:46:b3:
                    eb:1b:4b:81:c0:46:ab:c2:ab:cc:eb:30:45:a2:0a:
                    57:94:7d:3b:8b:83:c3:18:30:8e:07:ae:d1:6d:b9:
                    06:c2:ab:c1:c4:33:14:49:2d:75:27:ce:9b:3c:b5:
                    fa:c1:10:04:28:f6:18:f1:08:d2:da:48:7f:f7:5d:
                    67:69:ab:47:e6:ab:48:60:23:d5:80:29:da:6a:4c:
                    ec:39:ac:02:7e:b5:2d:78:14:e6:bf:01:90:6d:56:
                    15:45:9d:e3:77:d4:a2:cc:55:48:fe:ed:e6:89:ed:
                    5f:bc:3c:e6:15:91:fa:c1:84:5d:fc:a9:87:21:96:
                    be:ff:fc:30:0b:36:09:ee:6a:ba:ed:95:2f:69:1a:
                    01:fb:49:ce:ad:69:32:da:3a:03:b2:54:f9:1d:d7:
                    4a:95:83:bd:27:d4:a8:d0:52:2c:01:ac:b1:56:b7:
                    a4:ef:de:b5:53:f8:fe:dd:5f:9b:1d:b7:02:5c:e8:
                    88:6e:ec:5f:97:4c:93:08:d4:c9:d2:b1:ff:76:c0:
                    c4:78:79:8b:73:36:20:74:c0:47:ab:3d:eb:ac:c7:
                    9f:c3:fd:f4:46:7c:4d:0d:cc:b8:1d:03:91:fc:0f:
                    e6:0e:89:40:fe:53:42:6f:15:4b:c0:65:d9:50:48:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137732

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.244.0/23
                IPv6:
                  2406:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:7e:38:5b:25:43:af:29:e7:25:06:4d:41:2d:09:de:5a:
         73:85:97:97:6d:a8:11:73:1f:c9:ea:b2:ff:0c:e6:f1:5f:af:
         93:df:6a:29:72:b6:b2:75:94:4c:d2:ba:26:98:ec:2a:86:05:
         39:7e:42:bd:b5:95:4b:01:6f:b9:74:e5:0b:73:19:53:77:fb:
         f0:c7:7f:6a:ad:08:4b:64:4d:2e:dc:2e:44:fc:a2:1a:d7:37:
         b5:1a:56:9a:4f:a9:12:54:37:b1:43:80:a3:a6:21:a9:f9:10:
         2e:dc:38:8e:31:b8:c8:e1:46:1b:88:79:f7:92:4f:b4:3b:3f:
         9c:06:a5:c0:e7:53:11:65:9c:ff:9c:37:bb:8e:b4:01:17:44:
         9c:ec:94:9e:fa:1d:0b:ad:66:b4:e8:fb:d1:da:07:a1:e8:bd:
         7e:50:b7:e1:68:e4:e0:74:29:0f:a0:91:95:9c:c4:24:45:44:
         dd:5b:4b:2a:09:6e:7b:7d:6a:d5:68:8e:a9:06:c1:d2:95:0d:
         92:45:83:83:6a:74:2b:5a:9a:ce:ae:50:61:fa:1d:1d:20:f8:
         07:8b:fb:f9:f9:3a:05:a9:1f:b3:84:05:22:8b:bc:c1:db:77:
         e2:c3:f9:a8:66:ce:07:68:62:e7:a8:06:f8:80:97:4e:44:35:
         33:93:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----