Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/lwF2by03rOarDkR1hVb5AuBWoYg.cer
File:                     lwF2by03rOarDkR1hVb5AuBWoYg.cer (raw, json)
Hash identifier:          clVxv8uApEBniG8+IP90+0o8lpZKlgrztpuuHT3BoiA=
Subject key identifier:   97:01:76:6F:2D:37:AC:E6:AB:0E:44:75:85:56:F9:02:E0:56:A1:88
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/lwF2by03rOarDkR1hVb5AuBWoYg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:07:06 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 9809
                          AS: 63600 -- 63601
                          IP: 116.214.32.0/19
                          IP: 116.214.128.0/17
                          IP: 202.170.128.0/19
                          IP: 210.75.0.0/19
                          IP: 219.235.224.0/19
                          IP: 2401:9600::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30718 (0x77fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:07:06 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=9701766F2D37ACE6AB0E44758556F902E056A188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:df:5f:00:ff:83:f0:da:b6:5f:3b:36:0b:
                    94:3f:1e:04:ca:d2:77:f2:34:99:76:a8:4e:74:37:
                    07:ce:1e:3f:11:62:7e:38:9f:36:6d:68:64:24:4e:
                    13:08:bd:18:1f:a1:a1:31:bd:9e:8d:e4:9e:5e:67:
                    78:d1:20:61:f3:f1:f8:c1:58:c9:4a:2a:7d:71:f1:
                    d5:d0:69:a2:9f:e6:c1:5d:ec:73:3b:86:7f:71:88:
                    14:62:42:24:81:39:7c:3e:b3:82:fe:1b:10:17:db:
                    2a:2e:62:6a:90:7b:f9:89:09:93:be:4a:b1:5d:aa:
                    9b:15:ba:ce:96:57:9a:fb:b8:cd:23:39:c0:64:36:
                    e0:00:32:a2:77:eb:0c:93:15:d9:6c:39:34:77:eb:
                    c3:ea:f9:78:92:f8:11:c2:d3:b5:79:1a:7e:85:3d:
                    a9:96:f9:ab:44:da:f9:d1:81:ee:0c:cc:8b:66:be:
                    8e:12:a9:1d:4f:42:0e:38:da:e8:30:1a:e2:ff:0d:
                    0f:e5:f7:e3:b2:04:34:ea:8a:22:17:4f:c7:de:c2:
                    91:44:7f:19:46:ac:76:13:f2:ec:d0:ee:d6:7c:c9:
                    d8:8a:05:74:a9:f9:ef:ba:81:46:8e:c4:10:a1:eb:
                    08:27:7f:fd:c3:5a:62:c7:ee:d7:23:3c:08:f3:bf:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:01:76:6F:2D:37:AC:E6:AB:0E:44:75:85:56:F9:02:E0:56:A1:88
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/50/lwF2by03rOarDkR1hVb5AuBWoYg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9809
                  63600-63601

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.214.32.0/19
                  116.214.128.0/17
                  202.170.128.0/19
                  210.75.0.0/19
                  219.235.224.0/19
                IPv6:
                  2401:9600::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:c4:6f:58:56:e4:a1:c9:fe:78:40:07:ca:37:e5:f4:ca:
         1e:f7:58:e0:2d:41:d6:ec:33:7e:4b:4f:bb:d9:bd:aa:12:e3:
         98:8e:6e:de:05:47:24:9e:31:33:13:f6:8a:8c:8e:6e:fe:c8:
         b2:25:11:11:a3:1f:15:f8:f1:8c:1f:c0:93:b8:f1:8e:85:d1:
         0d:ec:87:49:f6:ef:b7:6f:30:1e:aa:e4:11:b0:5b:48:61:c4:
         ed:8d:43:c0:c1:d9:a8:77:af:3e:90:29:25:86:47:5f:06:30:
         7b:13:3a:c1:5b:8b:96:32:fa:50:73:fb:7e:e8:b4:39:fc:a4:
         64:88:e7:33:71:03:89:66:33:80:91:34:91:1b:4b:90:fa:3f:
         bd:99:e2:e6:b0:fc:fc:b0:44:e6:8d:7c:1b:b6:ae:07:0a:8f:
         d1:be:87:f1:cb:f7:9d:b4:de:4c:0a:eb:37:08:76:dc:52:61:
         1b:e6:a1:21:6f:2a:09:07:44:dc:75:9e:d5:6d:6b:69:a8:1e:
         66:49:c9:75:d9:f5:ad:dd:9b:b2:9f:3d:87:ff:cc:12:16:fe:
         08:85:a7:8a:d7:57:54:3e:e1:77:4e:74:d9:9c:6d:1f:07:d8:
         4e:84:82:c2:8a:c5:6b:71:c0:a2:a3:2a:c1:71:b2:38:16:3a:
         bb:d0:7b:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----