Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
File:                     se25TxnfoXcCxZETHTXs-xfM0tk.cer (raw, json)
Hash identifier:          zYcwtqt1oEp6pYB9zzUG4QToiYRvkxFtdK/ZA4CSKog=
Subject key identifier:   B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       782A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 10:25:04 +0000
Certificate not after:    Fri 27 May 2022 10:21:02 +0000
Subordinate resources:    AS: 18257
                          IP: 118.184.128.0/17
                          IP: 2404:6380::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30762 (0x782a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 10:25:04 2021 GMT
            Not After : May 27 10:21:02 2022 GMT
        Subject: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:d3:e2:14:bc:7c:46:be:2b:6f:93:7d:d6:
                    ed:43:5c:5a:e5:03:93:be:fb:cc:94:48:fc:9f:ee:
                    33:db:24:60:2f:41:c9:e6:68:ea:9d:8b:6c:3d:db:
                    31:d6:42:20:48:dd:c2:e6:ea:c7:33:ae:c5:f4:29:
                    b8:81:f0:1c:8c:bd:cd:ba:bc:06:4d:06:e2:68:27:
                    e3:7c:71:c8:f4:6e:5d:7e:6d:cf:22:6a:88:70:7b:
                    55:8f:be:d4:52:a7:6f:ac:c6:ca:06:8f:82:c4:bf:
                    ef:26:c5:bd:ab:d4:d1:36:b3:2c:71:b5:ab:a0:ff:
                    ac:8b:9e:29:95:a3:7e:51:10:22:e5:fd:d4:3d:4a:
                    e8:42:ad:e6:de:93:80:47:b6:bf:3a:3e:68:14:d0:
                    0a:77:02:38:9d:87:76:48:9d:53:ed:c6:20:6f:2d:
                    bc:76:93:5b:11:3a:3f:17:0e:a3:50:cc:7f:63:2f:
                    45:8f:2a:a8:b9:e3:ff:7f:20:d3:4c:29:de:b1:6d:
                    09:8c:3f:95:9d:28:f8:fa:8d:61:9a:28:30:20:3a:
                    bf:61:d8:c1:13:e0:ef:c0:6d:0b:14:e7:3a:9a:28:
                    47:16:ee:85:d5:4b:94:bf:ea:03:37:ad:2a:5b:47:
                    02:90:d4:a7:61:b8:15:78:73:0b:d9:25:fc:a1:d8:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18257

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.184.128.0/17
                IPv6:
                  2404:6380::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:56:70:b1:a6:94:b0:53:4f:f8:af:bc:ef:1e:01:75:bc:f2:
         28:fa:07:32:56:27:47:6d:b9:f5:41:74:7e:06:e0:34:a0:58:
         f6:4c:bf:62:07:b3:ed:f6:3f:17:a2:aa:a7:2b:fb:11:f0:39:
         27:2b:27:ef:93:ab:28:03:ef:d3:1f:c3:b7:87:6c:41:50:d1:
         da:7d:ee:22:2a:71:b0:b7:5e:a1:e3:44:ee:a4:60:2c:51:6b:
         ed:ed:5f:5f:d9:37:c3:23:62:f6:ce:87:ff:23:0b:e9:ee:a7:
         49:16:ce:07:a3:cb:9e:10:39:13:86:e3:2c:12:1e:92:de:1e:
         51:97:d5:e6:a1:d6:8c:d4:b1:05:e8:6e:45:3c:1e:e2:7a:ca:
         f8:38:84:75:b0:2f:e8:b9:56:5e:82:68:91:a6:21:c3:ce:72:
         8e:31:21:13:12:cd:b3:07:13:f3:ab:b6:70:99:0a:12:70:60:
         2e:1e:9a:3b:8c:c9:69:50:bd:ea:31:db:cb:c5:85:10:a7:9a:
         a0:0b:99:b2:f8:9e:74:91:5a:30:aa:0d:ba:58:54:5f:b2:29:
         03:74:93:9e:0a:32:3e:b5:c6:b8:78:e1:8d:7d:21:e2:64:b0:
         30:ea:7c:10:98:60:3a:30:91:49:60:78:47:d8:82:fc:15:88:
         f4:ab:c3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org