Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/q1UWELsUY6YsOYQAlUiEj3T5mPY.cer
File:                     q1UWELsUY6YsOYQAlUiEj3T5mPY.cer (raw, json)
Hash identifier:          3qS1e+J+fRz8mGHbjfSRXyE9zk2L+qK/wq9xaTs+7bI=
Subject key identifier:   AB:55:16:10:BB:14:63:A6:2C:39:84:00:95:48:84:8F:74:F9:98:F6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       78C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/q1UWELsUY6YsOYQAlUiEj3T5mPY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sun 13 Jun 2021 19:30:58 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 56005
                          IP: 103.22.188.0/22
                          IP: 163.53.56.0/22
                          IP: 2404:f00::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30917 (0x78c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun 13 19:30:58 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=AB551610BB1463A62C3984009548848F74F998F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:4d:ba:a0:12:16:41:bb:d2:8f:ee:10:f7:
                    29:39:0c:49:3e:c2:d8:24:e3:00:b2:cd:ea:fb:fd:
                    3d:19:bb:ef:be:cc:c2:5f:fc:df:c9:fe:97:73:51:
                    12:1f:fe:34:ff:a9:d5:69:18:61:72:8a:3e:4f:ab:
                    e5:41:1f:28:fd:77:90:08:49:fe:2c:a8:17:4c:f5:
                    34:a3:a8:21:6f:ff:7f:75:d3:7a:35:e4:83:47:a8:
                    a7:9c:9e:8c:c5:16:0e:fe:ac:27:48:c9:72:ec:a4:
                    d4:6f:97:8c:ce:9a:61:8a:4b:8c:69:48:5e:25:ca:
                    f3:57:7b:98:b4:53:93:70:b7:b2:62:7e:21:05:ef:
                    58:fe:bd:c9:d8:c0:e1:cd:ac:1f:ca:42:72:6a:2c:
                    e4:44:3a:ad:ed:ad:2d:db:2b:dd:3c:3e:41:e1:4f:
                    e8:8a:80:8c:b5:50:e5:32:9b:64:5a:ab:a4:e6:f7:
                    37:5e:21:89:77:d0:43:56:4d:74:07:6d:26:38:68:
                    ba:f1:5e:57:9d:6b:a0:17:30:65:03:c2:51:73:42:
                    8a:8b:a8:c5:f3:67:94:d1:88:e1:3e:28:ca:ba:01:
                    6d:46:df:00:9e:2b:d9:c9:b6:ec:cc:5c:94:c8:30:
                    83:37:44:75:4a:92:0b:ad:1e:bd:e9:7a:b3:11:39:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:55:16:10:BB:14:63:A6:2C:39:84:00:95:48:84:8F:74:F9:98:F6
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/q1UWELsUY6YsOYQAlUiEj3T5mPY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56005

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.188.0/22
                  163.53.56.0/22
                IPv6:
                  2404:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:f4:13:72:59:e9:01:d7:bb:f2:9c:dd:41:bb:18:85:d5:
         7a:cf:87:9e:58:23:21:22:93:f9:86:17:81:11:9c:cc:0a:f7:
         72:7a:17:7c:b0:97:4b:27:e5:84:37:bd:76:dd:59:f6:c3:a6:
         64:d0:7f:7f:39:14:bd:5e:51:f1:e3:b1:f4:6e:a8:0f:01:6b:
         30:31:07:9e:d6:e4:6d:07:c1:64:a5:9c:f4:1e:33:11:c8:4d:
         7f:e7:2e:31:c5:86:73:1e:f6:bf:a1:38:c4:82:58:27:37:b4:
         b5:b2:38:bd:d1:b5:5b:6c:c9:8c:a0:38:f1:bf:49:91:2a:0c:
         7c:05:26:cd:8b:18:c3:66:fd:43:7f:cd:c1:a7:e5:c8:0d:19:
         b5:52:d0:0f:8a:f1:7f:a0:0a:05:79:4d:ca:83:dc:ee:df:67:
         17:24:74:21:02:20:a5:73:22:67:95:1e:b7:3f:5a:ea:49:34:
         1f:7a:3f:90:b3:08:93:06:15:51:27:ea:4c:aa:54:9d:e2:d9:
         f2:e8:92:f6:3a:7b:12:00:3b:23:36:6c:53:f6:06:3a:ec:2c:
         fa:7b:bd:ac:45:6c:c6:a8:56:50:84:9a:1a:98:7e:24:a8:25:
         cb:41:3d:01:2b:81:cf:b6:87:ee:9b:00:61:39:51:77:f2:4b:
         58:b3:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----