Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qrHNTWM8V0QxSCpI3NKOE-d5lG8.cer
File:                     qrHNTWM8V0QxSCpI3NKOE-d5lG8.cer (raw, json)
Hash identifier:          7XI/lLCtpMKMkGzi8Ae1SRD7GgbgZOszpZnIEF61avs=
Subject key identifier:   AA:B1:CD:4D:63:3C:57:44:31:48:2A:48:DC:D2:8E:13:E7:79:94:6F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7822
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/qrHNTWM8V0QxSCpI3NKOE-d5lG8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:07:57 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 210.76.160.0/19

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30754 (0x7822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:07:57 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=AAB1CD4D633C574431482A48DCD28E13E779946F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0f:9c:c5:74:51:6b:a2:d8:d7:96:3e:5a:63:
                    38:ec:49:0f:c7:ab:e1:3c:86:de:6b:c3:4f:0f:7c:
                    f6:06:08:fd:c2:6b:b2:95:6d:62:58:90:77:51:15:
                    1e:18:3d:ef:09:37:e9:6e:89:40:c9:fa:09:99:0e:
                    58:40:97:2e:d3:b2:da:8e:d9:33:f1:5e:a6:c8:b9:
                    df:12:62:50:ca:08:b8:45:30:52:c1:d7:78:68:b8:
                    2d:13:14:e5:38:c8:89:f0:5f:0f:2e:2f:00:93:c2:
                    dd:49:06:e0:1f:3d:30:97:51:e8:00:d2:f6:ab:ea:
                    bd:53:e9:97:01:af:b9:a5:c1:b0:29:18:69:c7:27:
                    4b:84:d4:a6:af:f8:32:11:2f:33:0e:de:e2:db:5a:
                    12:5b:70:d9:2c:92:f1:fa:62:79:90:87:fb:56:d0:
                    d5:c4:cb:0c:de:2d:41:3a:6b:1c:10:c8:35:d8:75:
                    9d:c8:9c:66:4f:23:5e:3b:de:f5:bc:b6:71:47:a6:
                    9c:1c:78:d9:80:47:aa:30:45:e4:87:1d:f4:01:60:
                    7b:be:f3:36:58:b9:c6:06:ca:70:f3:3b:1a:8e:d8:
                    50:04:c8:19:79:58:df:02:8f:7a:49:d8:80:cc:7f:
                    90:c4:e2:59:b2:29:8b:98:42:73:47:71:11:3c:b1:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B1:CD:4D:63:3C:57:44:31:48:2A:48:DC:D2:8E:13:E7:79:94:6F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/98/qrHNTWM8V0QxSCpI3NKOE-d5lG8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:80:f5:42:7c:99:82:c6:e7:6f:f4:cf:e4:3d:7c:e8:b8:
         da:08:cc:b7:f9:86:4a:6e:c2:3c:b2:cd:b3:69:e9:5c:45:73:
         5a:fd:e7:c6:d9:4b:fd:d9:e5:b7:27:ef:f2:9d:01:62:5d:69:
         38:1c:26:1c:44:37:25:4d:38:51:62:4b:3c:3a:de:f4:06:3b:
         8c:ec:a4:a8:c5:20:fb:f3:06:09:ff:b2:cc:24:f9:37:78:eb:
         78:3a:91:dd:40:dc:10:f4:57:b1:62:ea:7f:a3:11:1c:b1:44:
         13:9e:cf:59:ce:87:0f:cb:32:08:b3:1d:4a:ac:a5:7d:dc:13:
         4b:0b:f7:31:cc:3b:0a:39:d0:a6:c3:0b:90:b0:60:57:3b:62:
         af:77:60:a7:ed:d3:b5:3e:b4:73:82:a7:49:2d:f9:df:a4:f1:
         51:fc:48:be:6d:b2:d7:90:20:bd:93:20:ff:31:d0:72:52:70:
         eb:c2:87:97:aa:8b:1f:5d:16:20:ba:25:ba:c8:ff:35:58:ba:
         c0:2c:bd:51:67:f6:23:c1:d1:0a:3e:9e:cd:51:d7:f9:85:8d:
         80:31:64:9e:af:8d:7c:0a:88:f1:16:3e:51:27:53:74:e7:55:
         94:ac:cd:f5:c7:8f:9f:4a:0e:dd:d1:d6:ff:17:89:ba:b4:18:
         e2:0e:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----