Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/m0nRKqAvjZP3_7p9i6uRE1Qnqco.cer
File:                     m0nRKqAvjZP3_7p9i6uRE1Qnqco.cer (raw, json)
Hash identifier:          QqUdzMaBAbL11a35xITAoj2QFSTZQz95/rQ/Ppz+Ohk=
Subject key identifier:   9B:49:D1:2A:A0:2F:8D:93:F7:FF:BA:7D:8B:AB:91:13:54:27:A9:CA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       778E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/m0nRKqAvjZP3_7p9i6uRE1Qnqco.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:04:49 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131514
                          IP: 103.92.48.0/22
                          IP: 2401:1dc0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30606 (0x778e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:04:49 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=9B49D12AA02F8D93F7FFBA7D8BAB91135427A9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:d6:89:cc:20:10:07:7d:3f:2f:e8:1b:88:
                    be:24:92:2b:20:16:f9:b1:f2:e9:0e:6e:e9:df:d0:
                    91:1c:99:66:d0:7f:d0:2b:de:e1:b6:4f:bf:fb:c7:
                    c0:33:f9:b3:3c:9b:9f:85:52:6a:65:68:97:6b:ed:
                    73:df:7d:36:02:7a:b4:a3:13:b6:9c:f1:7c:92:82:
                    05:8b:68:58:f2:f7:08:22:7d:57:15:05:34:7f:6e:
                    e7:ea:ec:f6:86:21:05:14:2d:62:e0:5d:3d:0a:cc:
                    28:72:b6:d2:63:29:fd:d0:ef:33:e8:63:da:ec:9a:
                    53:03:8c:dd:c9:0f:5d:08:f1:6f:25:b7:62:c6:05:
                    72:0c:10:e9:aa:7f:6c:a9:45:24:45:97:b1:68:64:
                    30:f4:e6:ba:4a:bf:b9:35:fd:af:6a:f3:2b:b2:ed:
                    12:37:9c:09:6d:7d:40:44:42:1a:62:02:ae:3c:84:
                    50:73:f9:66:7f:c4:39:1e:73:f2:4d:84:55:55:a0:
                    63:be:46:fc:82:f2:c8:80:00:3e:d8:a7:e6:b6:e0:
                    ed:8a:50:bc:9f:12:46:4e:22:db:b8:a3:f5:3f:6c:
                    ab:9c:02:e1:55:c8:48:60:f0:a9:c7:8f:89:25:33:
                    fa:5d:48:a8:16:f0:ee:e8:68:81:ba:26:c8:15:3c:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:D1:2A:A0:2F:8D:93:F7:FF:BA:7D:8B:AB:91:13:54:27:A9:CA
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2440/m0nRKqAvjZP3_7p9i6uRE1Qnqco.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131514

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.48.0/22
                IPv6:
                  2401:1dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:05:6e:f0:1c:de:d4:5a:6d:fd:23:61:5f:09:8b:fe:ac:31:
         aa:04:64:24:8a:91:83:50:b6:b0:c4:56:48:5b:56:47:95:99:
         e2:97:21:92:fa:ed:18:d6:27:25:9c:49:5d:54:08:5d:9a:aa:
         e7:9b:75:07:8a:0b:5e:a5:c2:ba:b9:67:c2:c6:f1:82:e6:fc:
         34:af:9c:dc:55:09:fe:8c:e9:6f:5e:1d:88:4f:4c:b1:9e:3a:
         4d:d4:4c:7c:be:de:05:fc:0c:e4:b4:08:aa:62:04:a9:50:8e:
         1f:a2:a6:84:b8:25:fc:74:28:ab:cb:d1:50:8c:29:ea:ee:6a:
         d4:d9:b5:fd:c6:a7:42:9c:5d:ab:14:5f:1e:4e:24:6d:f6:37:
         c5:0f:85:45:a2:68:7b:2b:7f:d3:65:4f:be:87:52:1f:69:0d:
         d8:8c:74:47:66:e4:e6:7a:f9:83:51:69:56:97:9d:46:4e:05:
         15:f1:96:35:1c:57:bc:29:9a:14:5a:f6:3e:82:33:8b:1f:2e:
         05:f0:de:04:6b:b1:ae:68:69:dc:aa:fd:95:c5:3e:6e:a2:01:
         ca:a5:1d:26:b4:5c:34:6e:ef:1f:69:4d:6e:2b:7f:b0:07:e9:
         ed:ba:fd:6a:23:f6:f3:85:81:92:e5:39:dc:a7:d9:4b:a1:f9:
         f6:d2:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----