Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tNUz2VnESPlaRFufbzQaekp7qo0.cer
File:                     tNUz2VnESPlaRFufbzQaekp7qo0.cer (raw, json)
Hash identifier:          dqTDSrPSiHhRnTgDHE2x48SyGPj0XfIndXxnqfNawp4=
Subject key identifier:   B4:D5:33:D9:59:C4:48:F9:5A:44:5B:9F:6F:34:1A:7A:4A:7B:AA:8D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       788D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/tNUz2VnESPlaRFufbzQaekp7qo0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 07 Jun 2021 20:29:49 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 45095
                          IP: 27.50.128.0/17
                          IP: 42.1.128.0/17
                          IP: 2403:e500::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30861 (0x788d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  7 20:29:49 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B4D533D959C448F95A445B9F6F341A7A4A7BAA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:c9:1f:54:1d:02:b2:bf:55:c2:96:74:4e:
                    4e:37:8d:02:ac:46:f0:30:c4:9c:27:aa:12:f4:e4:
                    bf:45:7d:48:98:ed:9d:7a:8a:d0:3e:84:46:c9:c2:
                    11:35:62:3c:66:76:d9:1b:21:cd:4a:18:2b:f1:a4:
                    52:80:b5:14:3b:dd:25:d9:98:b6:a4:e2:4b:61:d0:
                    33:2e:12:5a:5a:ae:da:60:cb:be:91:f9:a3:f9:39:
                    1c:08:cb:0c:ce:bc:ae:80:ca:c4:f4:93:fe:5a:08:
                    c8:78:61:a6:c0:d5:ab:d8:f2:14:83:49:31:cd:2a:
                    ba:ec:28:31:20:c0:72:a1:3d:c8:a5:c4:ce:d3:70:
                    0a:96:97:d2:17:82:24:ef:76:e6:aa:1b:7c:ec:37:
                    b1:60:9c:08:98:95:7f:f4:ac:0f:ec:ee:db:18:fe:
                    cd:4c:35:54:b5:9a:53:84:9f:b8:ae:65:2c:26:d5:
                    5b:70:36:a9:dd:a1:bd:ae:b5:44:f1:83:bf:e9:eb:
                    2a:17:d6:db:b2:8e:4d:8d:64:f0:90:4d:22:eb:79:
                    eb:f8:c2:de:f8:3b:03:4e:8f:dc:5c:77:35:26:0f:
                    b1:14:c4:a1:ad:fc:86:9a:e7:df:f5:dd:bb:be:b8:
                    58:d0:1e:2a:7e:d4:ec:66:bb:8b:99:51:27:2d:15:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:33:D9:59:C4:48:F9:5A:44:5B:9F:6F:34:1A:7A:4A:7B:AA:8D
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/tNUz2VnESPlaRFufbzQaekp7qo0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45095

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.128.0/17
                  42.1.128.0/17
                IPv6:
                  2403:e500::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:94:01:40:d6:b9:14:52:de:f3:38:24:92:54:b0:57:c7:08:
         c4:6f:8a:81:75:c6:2c:83:c4:b5:79:e5:3a:df:e1:66:d1:bb:
         2b:3f:77:a9:7f:25:06:ae:9a:7d:11:30:8e:9a:84:81:7f:04:
         e5:77:71:fc:df:bb:c0:c2:2e:2a:de:da:3f:4f:b1:81:5c:9c:
         c5:de:c9:97:c1:4c:b4:71:6c:72:52:7f:6e:b6:49:96:fa:81:
         fe:2c:f2:05:bb:50:10:6c:0e:25:71:72:42:92:ab:6b:c6:b3:
         fa:7b:44:b6:59:a5:a7:6e:7b:57:7b:98:51:a4:c9:ad:02:bb:
         be:18:13:ed:fa:80:52:28:76:da:86:6e:9d:71:ce:66:9d:5d:
         df:a4:e1:5c:db:12:a6:2a:b0:74:f6:f8:d8:d0:fd:77:f1:7b:
         ea:cf:1d:8a:01:05:ac:c5:84:24:f9:66:30:cf:cc:33:43:49:
         52:ea:62:af:2b:69:c7:3b:53:fc:0e:ec:bb:6d:33:08:20:9f:
         00:e4:4c:df:64:7f:43:a8:9e:94:79:d8:50:5c:7f:ae:3c:a0:
         a9:4a:bb:05:1c:dd:04:e3:92:4b:bd:4a:5b:e2:6c:8d:37:19:
         e9:50:cd:e5:12:b1:81:6e:12:d3:47:5c:74:e3:82:ee:2f:b6:
         5d:e4:a4:ff
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICeI0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDYwNzIwMjk0OVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoQjRENTMzRDk1OUM0NDhGOTVBNDQ1QjlGNkYzNDFBN0E0QTdCQUE4
RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANihyR9UHQKyv1XClnRO
TjeNAqxG8DDEnCeqEvTkv0V9SJjtnXqK0D6ERsnCETViPGZ22RshzUoYK/GkUoC1
FDvdJdmYtqTiS2HQMy4SWlqu2mDLvpH5o/k5HAjLDM68roDKxPST/loIyHhhpsDV
q9jyFINJMc0quuwoMSDAcqE9yKXEztNwCpaX0heCJO925qobfOw3sWCcCJiVf/Ss
D+zu2xj+zUw1VLWaU4SfuK5lLCbVW3A2qd2hva61RPGDv+nrKhfW27KOTY1k8JBN
Iut56/jC3vg7A06P3Fx3NSYPsRTEoa38hprn3/Xdu764WNAeKn7U7Ga7i5lRJy0V
ABMCAwEAAaOCAoQwggKAMB0GA1UdDgQWBBS01TPZWcRI+VpEW59vNBp6SnuqjTAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzkw
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzM5MC90TlV6MlZuRVNQbGFSRnVmYnpRYWVrcDdxbzAubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCwJzA0BggrBgEFBQcBBwEB/wQlMCMwEgQC
AAEwDAMEBxsygAMEByoBgDANBAIAAjAHAwUAJAPlADANBgkqhkiG9w0BAQsFAAOC
AQEAMJQBQNa5FFLe8zgkklSwV8cIxG+KgXXGLIPEtXnlOt/hZtG7Kz93qX8lBq6a
fREwjpqEgX8E5Xdx/N+7wMIuKt7aP0+xgVycxd7Jl8FMtHFsclJ/brZJlvqB/izy
BbtQEGwOJXFyQpKra8az+ntEtlmlp257V3uYUaTJrQK7vhgT7fqAUih22oZunXHO
Zp1d36ThXNsSpiqwdPb42ND9d/F76s8digEFrMWEJPlmMM/MM0NJUupirytpxztT
/A7su20zCCCfAORM32R/Q6ielHnYUFx/rjygqUq7BRzdBOOSS71KW+JsjTcZ6VDN
5RKxgW4S00dcdOOC7i+2XeSk/w==
-----END CERTIFICATE-----