Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ulN3FHpAg_HfmG7f_xGdQutnpcs.cer
File:                     ulN3FHpAg_HfmG7f_xGdQutnpcs.cer (raw, json)
Hash identifier:          s0ee8PFKi83JrnDhRciGU2u36ADFOpIGMxQA25L8Njg=
Subject key identifier:   BA:53:77:14:7A:40:83:F1:DF:98:6E:DF:FF:11:9D:42:EB:67:A5:CB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       776A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/ulN3FHpAg_HfmG7f_xGdQutnpcs.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:40 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.103.188.0/22
                          IP: 2401:f7c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30570 (0x776a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:40 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=BA5377147A4083F1DF986EDFFF119D42EB67A5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:91:c5:f7:31:5e:a1:45:66:2d:c2:40:c4:
                    1d:d0:5b:be:99:48:1b:c1:00:a5:35:67:8c:b8:b9:
                    3d:a1:b0:8f:ea:b2:06:25:cf:08:64:38:6a:14:72:
                    b9:90:c9:aa:f2:74:ff:cf:c6:52:b5:0d:42:46:26:
                    a3:ec:7b:e5:98:0d:65:f1:30:e8:a8:4d:32:49:e2:
                    e7:e6:eb:c1:1a:f4:8e:28:ce:ae:f9:1d:1e:d2:a0:
                    20:28:04:ec:a1:8a:58:88:6c:67:f6:b6:04:51:73:
                    65:66:a2:79:91:73:0e:4d:18:a0:22:da:9c:c4:3b:
                    8b:cc:bc:c9:3e:e6:82:94:58:c1:1b:16:8c:11:bf:
                    95:46:84:55:65:ea:52:c8:1e:dd:aa:81:70:de:d9:
                    24:5f:39:9a:9c:6c:dc:ca:93:1f:1a:b9:f4:ce:bb:
                    9e:63:51:23:97:cd:4f:ef:11:6e:d2:4c:79:20:74:
                    1c:63:57:99:30:55:e2:c2:90:f7:1e:d0:4a:fb:24:
                    42:5c:79:b2:7e:ef:40:6e:dd:21:b0:c1:f5:52:56:
                    fd:28:68:02:f5:d3:56:a0:c6:7c:a7:a3:78:86:25:
                    59:bf:d5:37:10:81:06:fe:32:26:6c:ae:00:f8:8d:
                    b9:c5:cd:88:71:90:ab:45:11:00:fd:20:68:81:ba:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:53:77:14:7A:40:83:F1:DF:98:6E:DF:FF:11:9D:42:EB:67:A5:CB
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/ulN3FHpAg_HfmG7f_xGdQutnpcs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.188.0/22
                IPv6:
                  2401:f7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:8d:47:03:6b:5e:82:e7:bf:43:67:b9:dc:e0:ca:fb:94:db:
         81:44:1b:13:3a:02:3f:ac:89:da:de:0d:42:f9:4d:be:fa:c1:
         9f:a4:69:d7:96:64:f1:e5:39:26:ae:b3:30:16:20:97:62:b5:
         42:66:03:d1:e2:6d:df:9e:8d:59:0e:c8:d3:b9:e8:f8:62:f5:
         90:58:a3:42:38:4b:84:56:b7:f7:a3:b3:41:fd:43:cc:dd:66:
         8f:ee:79:6b:40:e7:4f:2c:78:31:76:01:e8:10:6f:24:f9:e1:
         41:cd:bd:cf:3b:ca:c5:f1:dd:72:ba:80:29:36:31:36:67:1e:
         9b:d3:54:97:21:c0:d2:82:27:79:07:1f:ff:b9:2e:c5:7a:ae:
         05:e3:eb:3a:00:41:fa:6c:87:34:fc:30:bd:9b:1c:c4:14:57:
         1f:e9:b4:c9:33:7c:6d:ad:99:ca:b9:30:52:0f:6f:c0:35:d2:
         2d:39:1b:a4:a2:e3:f5:06:aa:6f:e5:63:3c:c2:8e:da:85:cf:
         3b:c2:f0:ad:32:44:e8:5c:58:d8:6a:3b:70:b7:c3:4d:30:8f:
         51:07:eb:d6:e4:b0:01:d3:76:a6:43:94:84:6b:b4:98:fa:d2:
         15:61:d9:7a:05:d4:b9:23:01:46:ed:31:15:f0:3c:3d:d2:05:
         13:dd:a2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----