Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tUOKwhWbUMGe2F-80bBy6wJPb2U.cer
File:                     tUOKwhWbUMGe2F-80bBy6wJPb2U.cer (raw, json)
Hash identifier:          ctbSy7bKQRd3YbMN4MSaZU8Psw/a7WNYUuikeD8fajw=
Subject key identifier:   B5:43:8A:C2:15:9B:50:C1:9E:D8:5F:BC:D1:B0:72:EB:02:4F:6F:65
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7740
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2446/tUOKwhWbUMGe2F-80bBy6wJPb2U.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2446/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:59 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131515
                          IP: 103.92.132.0/22
                          IP: 2401:1f40::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30528 (0x7740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:59 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B5438AC2159B50C19ED85FBCD1B072EB024F6F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:57:a7:f8:61:93:41:0e:e5:8b:65:f4:5b:
                    ad:58:67:82:54:fd:81:91:55:ea:6b:e5:99:96:96:
                    f3:a8:15:3f:90:36:2c:40:94:2c:19:ca:a0:38:d9:
                    5e:e8:8f:f4:21:2c:8c:5c:af:e1:a6:d8:70:2a:1c:
                    2f:dc:4e:27:b6:be:1f:df:cf:b1:af:b8:6e:0f:f6:
                    34:25:46:18:da:d4:9f:49:55:3d:f3:37:f8:a9:ce:
                    6d:0a:95:de:0d:5c:44:d9:64:62:96:07:28:30:f2:
                    82:17:5f:66:58:53:48:27:ee:bf:02:cb:e2:65:7c:
                    46:0c:44:8a:f9:ab:a3:c1:7b:61:1c:f9:18:92:dc:
                    3e:10:3b:9e:8e:38:16:04:af:bb:bd:2e:78:dc:10:
                    b1:b0:e1:b0:27:d1:fd:f7:b4:ee:ae:2a:9c:95:cd:
                    38:27:fe:64:04:f2:dc:fa:8c:f4:f5:8a:72:66:bf:
                    a8:dc:e8:f7:ac:bd:b1:17:26:e0:51:1e:aa:88:10:
                    c2:00:be:fd:6d:06:56:24:6e:81:ad:b0:e9:04:6f:
                    57:2e:3c:77:88:9a:89:0e:91:67:07:f7:e5:a3:63:
                    bd:2f:f3:ef:5a:8b:fa:86:fc:2e:5b:ca:3c:67:2a:
                    aa:40:e1:5c:5d:b1:25:47:8a:fd:ee:b4:7d:ed:41:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:43:8A:C2:15:9B:50:C1:9E:D8:5F:BC:D1:B0:72:EB:02:4F:6F:65
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2446/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2446/tUOKwhWbUMGe2F-80bBy6wJPb2U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131515

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.132.0/22
                IPv6:
                  2401:1f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:f0:b6:3d:f1:a5:69:07:e9:6c:16:84:a5:bb:7c:89:c5:eb:
         1e:cb:a1:88:f4:2b:20:dc:d2:14:db:1f:1f:9c:e1:82:34:88:
         63:98:64:20:ad:f8:04:a5:d7:32:24:94:3f:9d:2e:24:c4:ed:
         b2:fa:c5:09:d5:be:0d:3b:2a:da:88:7d:9a:dc:2d:c0:06:86:
         aa:3e:1a:2b:6d:67:8f:81:5e:f9:8c:a7:42:95:61:ca:99:28:
         2d:57:32:4c:6c:3d:f7:1e:85:0d:55:e8:57:e3:27:99:4d:60:
         15:0d:49:70:e1:59:f6:52:f0:f2:28:4f:12:6e:de:d9:73:c5:
         5c:55:c2:1b:de:97:ca:ee:7c:83:7b:f5:27:6d:c1:18:ec:af:
         f5:52:7c:e2:a0:0d:95:df:22:63:ce:8a:8f:0d:33:1e:1a:ac:
         f3:0c:ca:60:e3:d0:07:2c:01:a3:36:35:9d:8c:e0:80:e0:00:
         b8:b5:b5:23:ec:03:7c:53:c4:89:b0:7c:c1:c0:89:6b:e6:74:
         5d:aa:5d:3f:69:0a:93:4f:07:b9:58:5e:e0:b3:63:06:3b:d7:
         25:fb:ed:a6:57:df:61:e8:a2:ca:24:9d:61:1c:91:4c:13:bb:
         f2:cd:a6:6a:5c:40:51:69:29:69:c0:8a:ee:e0:d8:f9:a3:a7:
         dc:8f:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----