Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer
File:                     nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer (raw, json)
Hash identifier:          BZKvaUI7F+7xjP1+JjJeqvekmjfZeqb0ba6eBYUHvck=
Subject key identifier:   9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/nmWqPjnHn1_GuKBiCEtYiCcP-RU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:01 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131530
                          IP: 103.98.164.0/22
                          IP: 2403:fc0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30530 (0x7742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:01 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:aa:95:03:9d:e7:8a:fd:f0:38:f9:51:77:
                    cd:3a:7e:a0:0f:fa:f9:c0:52:03:44:ab:42:bd:b8:
                    ae:87:68:16:1d:46:a4:68:09:66:84:48:1f:bc:6e:
                    6d:57:b7:72:c3:00:84:f5:1a:9e:39:13:ce:27:93:
                    ac:7d:af:19:77:cf:b1:a0:6c:f5:8b:79:21:60:87:
                    86:c6:1a:6d:4d:85:18:b9:92:f1:28:3a:61:49:95:
                    cc:35:91:87:3a:95:e3:44:39:5a:7f:85:86:de:b3:
                    fa:5e:eb:c6:c8:87:5b:15:b6:1c:d1:19:10:3f:e9:
                    7e:60:7e:cd:97:3f:6f:bf:f0:0f:a9:33:26:6e:56:
                    4f:c9:7e:81:a9:5e:c6:a0:af:d3:9d:70:b7:1d:f3:
                    a7:f5:f0:15:14:de:44:84:f9:89:72:ff:6a:c5:22:
                    0f:d8:82:7a:43:1f:3d:14:68:ad:58:8c:ee:13:7b:
                    dc:4c:38:5e:21:ec:6f:91:f3:4a:b6:d4:70:d7:a3:
                    2f:e7:df:32:91:e0:14:39:e9:29:86:b9:f3:cb:8d:
                    4a:ba:28:d4:09:99:a0:46:aa:db:95:d5:be:0b:fc:
                    95:4f:f6:a6:e9:a0:4b:b7:17:06:f4:d8:7a:a7:7e:
                    d3:a9:a3:e4:8d:8a:f1:e0:41:56:ad:48:f7:98:b2:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/nmWqPjnHn1_GuKBiCEtYiCcP-RU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131530

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.164.0/22
                IPv6:
                  2403:fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:f0:19:2a:5b:46:24:9c:35:fe:cd:83:fe:6e:00:d6:85:f8:
         62:90:fe:00:e8:ce:f0:e4:24:26:98:11:f8:b9:51:40:cc:3f:
         d0:4f:2a:c9:3f:ac:e1:47:0f:50:36:d9:2d:9d:bb:7e:38:97:
         cf:34:58:b7:9c:11:97:d4:f9:6c:e3:5a:39:51:2c:5b:2f:5c:
         c7:b7:9d:32:7f:d7:22:a8:97:31:5c:ba:f6:92:5c:a5:d0:3b:
         5f:59:97:fa:9d:8c:b5:cc:c6:e5:37:2b:7a:d3:f5:de:6c:b3:
         9e:8b:df:a8:83:09:71:18:37:2f:40:8b:a2:0c:c6:44:fa:08:
         ac:e1:b7:95:bb:d2:6c:af:2d:8f:68:59:04:ce:0f:0e:3f:d6:
         8b:9a:79:92:a0:27:de:b0:36:18:83:4d:0f:3f:08:01:2e:26:
         87:91:e4:16:bd:11:42:77:a7:8f:40:40:76:f2:b2:12:1b:4e:
         86:ff:16:3c:c9:46:fa:df:0b:4a:51:26:de:48:8e:36:f5:f6:
         76:43:43:4e:5e:f6:77:92:5a:96:fb:3b:b9:8c:cc:07:d0:b0:
         7e:8b:8f:5b:9d:1d:9f:11:82:c1:f5:98:51:ff:1a:15:6b:0a:
         e5:1a:13:75:0c:27:9e:ab:0e:09:d0:d6:b2:9a:f1:1b:c0:e3:
         88:bd:c4:ff
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgICd0IwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDMwMVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoOUU2NUFBM0UzOUM3OUY1RkM2QjhBMDYyMDg0QjU4ODgyNzBGRjkx
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOc9qpUDneeK/fA4+VF3
zTp+oA/6+cBSA0SrQr24rodoFh1GpGgJZoRIH7xubVe3csMAhPUanjkTzieTrH2v
GXfPsaBs9Yt5IWCHhsYabU2FGLmS8Sg6YUmVzDWRhzqV40Q5Wn+Fht6z+l7rxsiH
WxW2HNEZED/pfmB+zZc/b7/wD6kzJm5WT8l+galexqCv051wtx3zp/XwFRTeRIT5
iXL/asUiD9iCekMfPRRorViM7hN73Ew4XiHsb5HzSrbUcNejL+ffMpHgFDnpKYa5
88uNSroo1AmZoEaq25XVvgv8lU/2pumgS7cXBvTYeqd+06mj5I2K8eBBVq1I95iy
bt0CAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBSeZao+OcefX8a4oGIIS1iIJw/5FTAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU2
NC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yNTY0L25tV3FQam5IbjFfR3VLQmlDRXRZaUNjUC1SVS5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgHKMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2KkMA0EAgACMAcDBQAkAw/AMA0GCSqGSIb3DQEBCwUAA4IBAQAZ
8BkqW0YknDX+zYP+bgDWhfhikP4A6M7w5CQmmBH4uVFAzD/QTyrJP6zhRw9QNtkt
nbt+OJfPNFi3nBGX1Pls41o5USxbL1zHt50yf9ciqJcxXLr2klyl0DtfWZf6nYy1
zMblNyt60/XebLOei9+ogwlxGDcvQIuiDMZE+gis4beVu9Jsry2PaFkEzg8OP9aL
mnmSoCfesDYYg00PPwgBLiaHkeQWvRFCd6ePQEB28rISG06G/xY8yUb63wtKUSbe
SI429fZ2Q0NOXvZ3klqW+zu5jMwH0LB+i49bnR2fEYLB9ZhR/xoVawrlGhN1DCee
qw4J0NaymvEbwOOIvcT/
-----END CERTIFICATE-----