Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/reqVSyRojwdQiNmQwCdxOccqu2U.cer
File:                     reqVSyRojwdQiNmQwCdxOccqu2U.cer (raw, json)
Hash identifier:          NQ2K+/fJm0fY6AXUjjpdD7pxWatg6NI1BoXDj9akSTg=
Subject key identifier:   AD:EA:95:4B:24:68:8F:07:50:88:D9:90:C0:27:71:39:C7:2A:BB:65
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       775C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/reqVSyRojwdQiNmQwCdxOccqu2U.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:28 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.196.168.0/22
                          IP: 202.123.116.0/22
                          IP: 2402:f780::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30556 (0x775c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:28 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=ADEA954B24688F075088D990C0277139C72ABB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:12:f4:27:b8:42:fd:11:20:3c:62:c9:ef:e0:
                    04:4e:2e:08:a0:09:33:31:33:68:d4:71:f4:51:6b:
                    61:e5:c7:d7:5e:1d:b5:10:6d:5d:c0:c1:06:a5:10:
                    9b:37:e1:93:0f:db:05:63:f3:a2:72:37:5c:96:4e:
                    f5:61:8e:f5:46:50:a8:99:89:19:d2:fa:bf:2b:d2:
                    97:53:18:9d:22:8b:6f:4e:9f:1e:c3:61:1d:a2:83:
                    c1:2f:43:f6:7d:03:93:ce:bc:e2:26:8c:1a:06:fa:
                    9a:b6:bd:94:62:68:96:cc:81:d8:8a:d7:2f:c4:5b:
                    40:aa:47:57:6d:c9:3a:5a:0c:39:97:ee:23:c8:46:
                    db:c3:83:a0:74:67:5d:81:9a:78:f0:c9:de:0d:98:
                    04:00:dc:aa:44:89:27:1e:46:68:ac:7a:f5:b0:06:
                    2f:78:8b:20:8e:83:9c:58:15:55:05:0f:bb:ea:3b:
                    15:1f:a2:8e:9c:72:7b:d3:fe:93:e6:00:4e:7b:64:
                    bb:f6:cf:58:e9:da:a1:82:6a:85:fc:3f:aa:3f:2b:
                    a3:0a:5d:84:a3:17:34:b5:e0:85:66:05:49:07:6b:
                    96:e3:92:8d:de:98:90:cf:40:ca:e7:0b:03:d9:c1:
                    77:4d:78:9a:d6:ab:27:76:b6:ed:17:6e:57:31:2f:
                    b1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EA:95:4B:24:68:8F:07:50:88:D9:90:C0:27:71:39:C7:2A:BB:65
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1374/reqVSyRojwdQiNmQwCdxOccqu2U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.168.0/22
                  202.123.116.0/22
                IPv6:
                  2402:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:6b:55:df:22:4e:ea:4e:5e:80:7d:00:92:42:23:7d:7d:
         db:a1:ba:36:c5:5a:47:6f:07:38:c6:23:69:90:4b:ee:c1:17:
         01:48:86:90:e3:ea:d8:14:98:89:e5:c3:b3:98:31:af:84:61:
         16:99:ec:3b:4f:44:34:9a:16:6e:26:67:02:b7:c0:a2:7f:3e:
         a1:63:70:3c:35:ab:fa:86:67:06:ca:68:7c:f4:bd:95:53:cc:
         dc:62:8d:7c:26:c5:2b:12:35:35:d2:d7:8d:90:13:a4:29:30:
         2c:e6:87:22:4e:b8:0d:86:6f:46:fe:d9:78:3c:8c:d7:b8:0a:
         ae:89:3e:51:15:09:96:bd:75:2e:4f:cc:56:57:71:24:e5:f9:
         7a:3e:6d:76:ab:43:bb:4c:4a:00:38:59:20:85:a8:16:27:ca:
         9b:87:da:0b:ea:c8:c0:9e:b9:d4:bb:90:18:92:0d:4a:25:fd:
         1e:2b:75:e6:ae:a7:ec:e9:ff:ba:77:34:ea:00:05:e4:71:bc:
         0d:de:78:30:1c:a9:5d:ea:26:c4:5a:1b:73:48:81:73:4a:9e:
         b8:a9:2f:f7:8f:48:61:19:ab:42:8a:05:40:70:4b:02:e5:0f:
         b8:b5:86:c8:0c:f5:7e:f4:a6:f0:ea:20:75:20:94:46:c3:23:
         64:3d:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----