Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/oXYLGTBywMMmfie-8ey2y1H6dfc.cer
File:                     oXYLGTBywMMmfie-8ey2y1H6dfc.cer (raw, json)
Hash identifier:          4CO+lXPiHzIqNaJxvJqvKaQvhkVgaY8HM9eqIKUhWmk=
Subject key identifier:   A1:76:0B:19:30:72:C0:C3:26:7E:27:BE:F1:EC:B6:CB:51:FA:75:F7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7784
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/oXYLGTBywMMmfie-8ey2y1H6dfc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:04:40 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.163.28.0/23

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30596 (0x7784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:04:40 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=A1760B193072C0C3267E27BEF1ECB6CB51FA75F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:ce:29:f0:00:5e:c1:66:55:74:f6:cf:c6:
                    73:0e:2b:b8:ca:8f:2c:05:85:65:2d:f9:64:6c:ac:
                    76:e2:57:52:f9:6d:d6:e6:f6:2c:eb:9b:cd:29:bf:
                    25:14:92:e0:d2:3d:82:77:17:a9:db:ee:eb:98:5b:
                    fe:c9:97:db:28:4f:96:d6:ba:9d:71:27:7b:5d:62:
                    9d:71:a0:de:19:fc:95:d8:11:f6:87:67:0b:d2:bc:
                    10:88:53:8b:0c:38:b0:fd:85:bd:9e:a1:0e:a7:a4:
                    8e:e2:e2:87:70:bc:84:07:57:37:96:ce:6c:8a:00:
                    fc:80:59:99:1b:58:a8:03:e1:79:c6:91:c2:37:6f:
                    5a:d4:ea:8c:f9:9d:e5:4d:2b:00:18:2f:89:15:3b:
                    9f:02:bf:eb:ef:75:7d:bd:07:ca:96:e2:0d:58:54:
                    e5:7a:ec:a2:ee:cb:e5:16:3a:a2:ba:27:3f:b3:7c:
                    e3:f0:cf:13:69:ab:84:27:2b:54:fc:b8:4d:07:30:
                    46:a5:6e:1c:af:33:5c:d1:39:c8:d9:d7:7e:50:cd:
                    91:dc:29:32:14:97:0b:85:71:5b:41:88:c4:d8:94:
                    50:24:56:70:26:78:2a:bf:f9:9b:2f:ba:d1:13:2d:
                    77:80:2f:d8:51:2b:70:47:ac:5f:b5:b4:28:dd:dc:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:0B:19:30:72:C0:C3:26:7E:27:BE:F1:EC:B6:CB:51:FA:75:F7
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/oXYLGTBywMMmfie-8ey2y1H6dfc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:63:e3:4f:cd:11:b9:da:a3:e7:dc:a7:1f:63:8e:06:a3:
         df:dd:c0:31:5d:7f:01:85:2d:ff:b0:f1:e5:78:45:00:22:60:
         8c:71:25:ce:e8:00:c0:4b:9c:e4:e6:cd:83:30:92:d9:84:dd:
         1a:f5:89:08:29:df:01:03:00:e7:03:69:9a:38:d7:9e:2b:6f:
         c6:a1:0f:f4:78:30:99:58:ee:31:c8:30:9c:fe:5e:02:c5:78:
         fb:aa:cb:27:c6:e1:f0:7a:c7:e1:72:aa:d9:f1:64:e2:ea:16:
         d0:b1:91:a1:af:4e:66:25:26:32:96:6c:33:27:d4:0d:f8:9c:
         cc:4e:c2:b6:f5:49:b9:f6:e7:32:e2:ac:16:6b:b9:38:31:e7:
         50:93:fa:66:56:58:1a:37:bf:f0:7e:22:11:9c:e7:35:a8:e5:
         1d:21:2a:af:4a:2b:bc:6c:60:d8:b6:04:bb:84:91:97:66:c4:
         2e:b9:07:26:c4:60:8e:7d:a7:9d:ec:c7:07:1e:39:19:0d:ed:
         36:4c:c0:d0:73:9f:ee:98:5e:69:de:9e:47:98:f1:27:4b:ce:
         6d:d7:45:d8:3b:0b:ed:4f:9f:0d:67:0a:54:c4:be:49:f7:fc:
         94:08:a5:26:1c:19:bc:e0:f6:f5:0f:f0:db:98:5b:5b:45:6c:
         d2:aa:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----