Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/lvIE0t8rCXiwXe94k6RbLIWAww4.cer
File:                     lvIE0t8rCXiwXe94k6RbLIWAww4.cer (raw, json)
Hash identifier:          ilyhxM0L8o1MODIjYbt+N3cpfx0IUcNKoG8f1Id3fuM=
Subject key identifier:   96:F2:04:D2:DF:2B:09:78:B0:5D:EF:78:93:A4:5B:2C:85:80:C3:0E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/lvIE0t8rCXiwXe94k6RbLIWAww4.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:33 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131573
                          IP: 103.94.72.0/22
                          IP: 2401:3640::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30562 (0x7762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:33 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=96F204D2DF2B0978B05DEF7893A45B2C8580C30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:08:05:7a:ec:8d:0a:24:22:15:c2:db:53:
                    01:e8:4f:b3:bf:78:93:f6:07:5c:1d:84:de:3b:4e:
                    43:41:99:df:0d:aa:2e:3e:a9:7e:9b:9f:ca:99:b1:
                    ef:34:ba:d3:ed:68:8d:d6:4e:ad:5b:94:55:b8:97:
                    d8:fa:d0:43:d1:36:1f:67:87:e6:d9:7a:7c:1f:8b:
                    08:94:5c:41:42:f4:97:7d:76:fe:9b:60:e4:d3:70:
                    60:b3:5b:da:a6:96:23:5d:39:a1:fb:d8:c7:15:e8:
                    15:99:97:04:79:4d:a8:b5:54:2f:66:50:6b:9e:cf:
                    43:3b:f1:42:95:68:39:04:61:97:1c:f5:38:14:0d:
                    a1:d6:b7:e9:87:a5:a0:16:57:b3:32:62:de:c2:b3:
                    8f:67:20:ae:df:8a:50:95:23:b0:de:f7:fa:9e:7a:
                    5c:39:89:72:d2:43:19:a7:be:ff:f5:68:78:36:3b:
                    f9:46:f3:d1:51:d6:f0:13:02:69:08:20:15:c6:06:
                    1e:f4:93:b7:3e:4a:c9:62:9b:5e:5a:08:2a:d1:fc:
                    b0:2d:79:5b:0e:54:75:66:ee:20:6a:fd:84:d6:90:
                    5a:76:9a:16:da:9a:a7:1c:06:dd:d1:67:8a:13:09:
                    c4:72:5c:69:71:f9:e1:25:ad:65:bd:da:db:b7:34:
                    ce:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F2:04:D2:DF:2B:09:78:B0:5D:EF:78:93:A4:5B:2C:85:80:C3:0E
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/lvIE0t8rCXiwXe94k6RbLIWAww4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131573

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.72.0/22
                IPv6:
                  2401:3640::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:79:b0:14:83:00:70:c0:69:1a:df:4a:3a:dd:26:6d:b3:c0:
         98:1f:ca:23:ac:f7:ea:1b:f3:7b:8f:bd:f1:b0:fb:70:08:a6:
         2b:8d:06:9e:0d:5a:66:77:ef:2e:a8:a4:1f:42:4c:ea:24:95:
         64:5c:a6:fc:e6:be:d6:eb:a8:70:cf:08:99:e2:1e:c4:4a:07:
         18:09:8c:cb:16:6b:74:04:cc:88:8b:4d:92:46:40:93:e3:d5:
         65:df:5e:f9:d8:d6:f7:83:fc:25:6e:b3:50:bf:fd:de:8f:71:
         67:c5:55:63:b3:7d:b9:3c:55:fb:f8:ab:a5:4a:62:74:35:b6:
         8d:39:1c:28:c4:c2:77:3a:cf:36:8e:56:c6:91:33:ec:44:85:
         62:1f:38:60:36:65:c2:32:e6:a9:26:dd:93:88:79:c8:d2:2f:
         53:2a:2b:49:64:e0:3e:d1:e4:d2:bc:70:49:51:e7:e4:49:80:
         6b:ba:fb:94:1d:92:0e:74:f0:f6:aa:93:67:cd:e8:8c:24:a4:
         9b:fd:43:d4:dd:cc:6f:0a:9d:55:fe:11:8a:77:d2:25:5c:5b:
         7d:a1:c3:7b:3d:da:47:8c:7a:fe:31:52:2e:69:91:c3:47:13:
         94:7c:71:91:6c:51:65:0a:72:a4:95:b1:9e:73:d4:03:6f:6a:
         98:4f:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----