Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tC6f9Ew4_gQPyBsYwGah1284pUM.cer
File:                     tC6f9Ew4_gQPyBsYwGah1284pUM.cer (raw, json)
Hash identifier:          Mk6lgT5ZblEXDtxgnhygrPtVhXeFjM3n2mCYK2tfgoM=
Subject key identifier:   B4:2E:9F:F4:4C:38:FE:04:0F:C8:1B:18:C0:66:A1:D7:6F:38:A5:43
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/tC6f9Ew4_gQPyBsYwGah1284pUM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:18 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 45.115.228.0/22
                          IP: 45.127.216.0/22
                          IP: 103.56.8.0/22
                          IP: 103.196.204.0/22
                          IP: 103.207.48.0/22
                          IP: 210.16.104.0/22
                          IP: 2406:f280::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30544 (0x7750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:18 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B42E9FF44C38FE040FC81B18C066A1D76F38A543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:be:ab:18:5d:3b:e4:51:71:8f:45:45:3b:
                    26:62:d9:9d:25:25:73:44:ab:64:91:d4:19:19:d3:
                    e9:a9:e0:43:db:0c:ca:39:47:04:df:89:fd:c9:3f:
                    49:31:99:ac:07:af:d8:69:65:f5:45:33:e0:22:86:
                    87:83:5b:30:c4:bb:56:5a:e0:83:f7:9a:7f:09:2e:
                    75:44:ef:f0:f3:4f:f0:f1:f5:af:34:09:49:84:6d:
                    29:5a:58:8b:80:c6:aa:fd:02:84:2d:d2:c0:01:2d:
                    ee:f8:dc:dc:db:89:0e:34:12:d3:a2:d3:05:e9:f8:
                    1d:19:2c:f7:69:aa:23:96:b4:8b:40:91:47:94:6f:
                    46:ad:ab:95:6a:51:fa:fa:22:e2:24:1c:af:4e:28:
                    be:b6:d5:ac:b2:90:00:16:1b:8e:68:6e:3d:ab:e1:
                    17:2a:15:e3:8b:ef:82:00:6a:37:78:a3:8d:b0:3e:
                    7a:11:6d:4e:06:4d:f5:64:93:75:cc:c5:0f:49:ae:
                    63:4f:7b:24:2a:87:5e:d7:65:e8:2e:00:37:04:86:
                    9d:e6:df:e3:5d:f3:fd:bd:ea:13:ad:73:11:a3:0f:
                    7c:70:a9:a8:90:7d:c3:45:1b:f7:69:46:c8:c3:e1:
                    e6:77:87:91:67:2e:54:aa:fe:6b:88:d3:fe:cf:8e:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:9F:F4:4C:38:FE:04:0F:C8:1B:18:C0:66:A1:D7:6F:38:A5:43
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/tC6f9Ew4_gQPyBsYwGah1284pUM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.228.0/22
                  45.127.216.0/22
                  103.56.8.0/22
                  103.196.204.0/22
                  103.207.48.0/22
                  210.16.104.0/22
                IPv6:
                  2406:f280::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:43:26:88:33:ec:62:99:05:71:93:dd:a9:00:e9:50:e4:41:
         06:b7:21:f2:d4:79:6c:34:39:f0:8e:51:46:b1:08:d0:50:0c:
         6b:27:c4:6f:f2:a6:bf:4a:6b:fa:02:d5:08:90:ec:9e:55:3a:
         bc:88:fe:9a:60:6c:e0:98:42:cf:64:7e:a7:3a:94:f6:d6:d7:
         5a:89:4b:b7:d4:66:39:12:8d:d5:95:ec:dc:0f:20:d9:c7:a3:
         7f:2e:1a:a3:be:af:5e:65:45:39:5e:d7:12:c1:41:7a:60:b6:
         0c:13:91:27:cc:84:e8:75:0b:52:91:1d:07:58:f2:b0:eb:31:
         98:5c:b8:0b:52:61:36:12:6f:83:ec:b3:40:39:f1:4f:fd:22:
         0a:c8:ca:c5:7e:95:f0:4e:71:2f:7c:01:05:33:ad:69:58:48:
         c2:a2:7a:b8:9a:75:17:cf:86:78:2c:6c:55:ab:e1:36:76:06:
         e5:f5:c9:04:a5:9e:d2:24:1a:27:f5:ed:0f:de:37:e0:f9:29:
         fc:75:da:a7:a2:70:4b:6b:0a:20:54:7a:54:e7:43:5c:e4:5c:
         83:37:84:0f:0f:f3:d4:0f:86:c6:41:81:e2:de:c3:27:75:cc:
         d5:5f:e7:b1:d3:d4:13:9b:e4:7a:11:13:63:db:c9:5c:5c:10:
         08:85:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----