Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tmIDJUJaicSorS93j5zjanE1XRk.cer
File:                     tmIDJUJaicSorS93j5zjanE1XRk.cer (raw, json)
Hash identifier:          ZXHrfKSLqVnM3PjmeQ3otUTthWml8mSTb3jE+3xKbBo=
Subject key identifier:   B6:62:03:25:42:5A:89:C4:A8:AD:2F:77:8F:9C:E3:6A:71:35:5D:19
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7919
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/tmIDJUJaicSorS93j5zjanE1XRk.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sun 27 Jun 2021 19:35:08 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 24430
                          IP: 120.72.128.0/17
                          IP: 211.156.192.0/19
                          IP: 2402:c5c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31001 (0x7919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun 27 19:35:08 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B6620325425A89C4A8AD2F778F9CE36A71355D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:f9:2e:f0:4c:30:43:dc:9d:ff:55:f5:12:
                    97:e6:8b:f5:f0:66:2d:79:0f:0e:e4:6d:c3:97:ba:
                    81:7a:f5:12:b4:05:7e:04:f2:f0:d9:0c:2f:46:dd:
                    05:07:e8:1d:1f:c3:55:99:72:0d:5e:73:51:46:3f:
                    00:b7:6a:e0:7f:f9:8b:ce:3a:0c:e5:c9:fd:ae:4f:
                    16:39:c8:ea:8d:3e:fe:76:24:b3:60:3d:8f:13:9e:
                    63:a3:de:28:dd:3e:43:3e:b8:0d:f6:98:2f:4d:b0:
                    1d:06:39:d1:94:9f:6f:ba:ab:4e:8d:86:74:ba:a5:
                    e2:6a:47:01:a4:ef:af:56:e5:11:f2:57:eb:46:f3:
                    ec:93:d1:ed:66:f2:81:a7:e3:92:21:7b:33:52:33:
                    20:80:45:53:77:21:65:a3:a4:fa:6c:85:70:f1:b0:
                    22:c7:6f:a3:8f:4a:0d:5d:88:7d:98:a5:e6:d6:73:
                    ad:32:04:51:0e:5f:8d:90:b9:d4:16:1c:fa:13:60:
                    39:03:fd:52:23:8c:b5:14:74:a3:a4:87:ce:45:da:
                    e9:35:63:3c:a8:76:c7:09:65:f9:9f:4b:72:1f:1e:
                    7b:c5:c5:2f:12:fd:51:70:6f:28:71:44:8f:f0:c1:
                    a6:16:40:5a:62:ec:12:ea:3f:20:58:85:23:fb:e1:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:03:25:42:5A:89:C4:A8:AD:2F:77:8F:9C:E3:6A:71:35:5D:19
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/tmIDJUJaicSorS93j5zjanE1XRk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24430

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.128.0/17
                  211.156.192.0/19
                IPv6:
                  2402:c5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:1c:24:57:d5:b0:1f:7e:0a:34:48:75:3a:9d:2b:8d:59:49:
         78:4a:f4:f7:99:26:f1:9b:0c:d1:22:8a:01:94:c3:4c:d4:f5:
         a9:4e:c1:1d:a4:b1:e9:c8:98:4f:b3:f3:58:06:16:9a:55:1d:
         dc:84:40:f8:d0:79:cf:c5:db:b1:c0:f8:be:60:e8:0f:ee:80:
         0a:2f:01:7d:f2:5b:ef:4c:41:a4:bf:fa:3b:69:a4:b4:9d:1f:
         dd:b5:74:5f:3d:57:c4:ae:d0:ce:fd:95:ae:a2:61:11:de:18:
         8c:14:55:c8:e0:99:38:d0:72:16:d1:3f:fe:9d:c3:2f:7f:3f:
         a3:5f:7b:61:df:78:1c:ca:dd:3a:1e:05:fc:b0:1a:60:11:92:
         ca:07:06:51:cb:f8:dd:9f:34:c1:53:14:22:57:b8:ea:cf:27:
         e7:00:d8:76:da:01:4f:aa:65:d1:a0:a6:47:6d:34:10:13:a6:
         f2:4c:bd:7e:eb:dc:c1:53:c8:ca:71:36:67:db:af:c3:18:8c:
         38:9e:cd:16:90:4a:90:1f:b9:99:0c:b6:a7:4f:0c:14:20:38:
         ce:6c:28:36:af:2b:c7:00:ab:11:90:18:e2:fd:d9:e9:f5:84:
         d8:b3:ec:55:9e:d1:a2:7f:9e:15:ca:0b:25:4c:43:81:7b:a8:
         bd:31:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----