Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/trszXPYH7uIPRY49od2o5H-vi_k.cer
File:                     trszXPYH7uIPRY49od2o5H-vi_k.cer (raw, json)
Hash identifier:          nZDTHNiLUKs9KwT2HLDTpUzAMS6fh//GZd+m6rrQWDo=
Subject key identifier:   B6:BB:33:5C:F6:07:EE:E2:0F:45:8E:3D:A1:DD:A8:E4:7F:AF:8B:F9
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7788
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/trszXPYH7uIPRY49od2o5H-vi_k.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:04:43 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 139097
                          IP: 103.143.132.0/23
                          IP: 2405:5240::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30600 (0x7788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:04:43 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B6BB335CF607EEE20F458E3DA1DDA8E47FAF8BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:e1:d0:56:e1:66:8f:8d:10:74:02:c5:f0:
                    6a:62:cf:33:47:c3:23:4c:6a:11:0e:7a:e5:7f:39:
                    15:d1:c2:ed:d7:46:e3:b2:b6:b0:3a:7a:2d:99:20:
                    5e:55:4a:b9:34:25:d5:a0:26:61:cf:35:ea:ee:2c:
                    86:04:91:28:60:52:2b:58:e9:ec:2d:19:70:b2:db:
                    28:41:ff:8b:d1:f7:83:09:49:e1:1e:34:86:5b:98:
                    e2:82:1b:df:d8:d5:5f:06:31:b1:97:a9:0d:05:11:
                    0a:f3:26:0f:a2:76:fa:62:17:de:bc:1b:68:1a:f4:
                    3a:89:a5:1b:16:94:ae:d0:65:48:bd:36:54:78:98:
                    e2:90:dc:96:55:0f:86:5a:f2:04:85:8a:a5:87:d3:
                    24:b8:c4:5c:19:ca:36:33:43:31:77:3d:2b:58:87:
                    4c:eb:da:65:31:7b:99:c6:a2:07:b6:e1:b2:0e:19:
                    b3:7d:69:c6:84:ee:e2:53:35:95:36:02:f3:a7:d7:
                    18:98:f1:7a:f5:ec:18:25:71:49:a9:ab:ad:80:61:
                    b7:70:5e:13:b0:52:4c:92:d2:29:c3:3a:3e:59:53:
                    9e:a5:7c:d5:18:8a:88:ec:ad:ff:db:81:9c:3e:d6:
                    98:36:e3:f3:f2:3f:d4:da:1d:96:d6:f9:36:c7:4e:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BB:33:5C:F6:07:EE:E2:0F:45:8E:3D:A1:DD:A8:E4:7F:AF:8B:F9
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/trszXPYH7uIPRY49od2o5H-vi_k.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139097

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.132.0/23
                IPv6:
                  2405:5240::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:23:48:08:96:7f:ac:4f:e9:32:46:69:a7:42:a7:ba:27:02:
         53:99:af:a1:ca:aa:c6:da:d8:4f:d8:a7:ff:75:ce:56:c1:c9:
         e4:a9:19:31:2d:ae:89:1e:db:de:a7:7d:49:bb:83:76:d7:d7:
         83:a2:7f:08:67:9b:13:7d:5b:9b:3f:e2:40:29:94:36:b9:58:
         bf:e6:89:da:e6:e8:f8:44:47:be:6e:70:97:fd:4b:ed:10:2a:
         dc:01:03:b0:f3:ba:80:eb:fd:ee:62:a0:62:39:9e:df:9e:a2:
         9d:4d:fc:3a:7a:72:14:9c:85:f5:66:54:66:0d:de:cd:5e:e9:
         a6:a2:4c:ec:ec:af:4e:22:dd:d8:29:3f:f3:67:95:a9:08:bd:
         f5:57:04:01:c4:26:22:44:82:8d:2c:f8:da:8f:fa:49:23:67:
         67:0b:8a:63:c4:d6:91:05:5d:1c:0f:1c:ed:0a:2d:c3:60:47:
         e4:0b:86:ac:e0:b6:47:ab:d9:55:53:a7:77:2a:79:37:f4:ef:
         32:03:97:a7:2a:98:4c:f8:6f:16:fb:00:67:1b:b5:b6:46:66:
         81:7e:b8:ce:4b:04:ad:ee:c5:ca:68:e4:6c:2f:7e:6c:12:93:
         bd:4e:3b:c6:48:5c:ce:34:2b:37:67:45:37:20:4b:b1:5b:78:
         26:b8:f4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----