Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer
File:                     v7hTbPcPQdALMlBbJ4yvyzhxFso.cer (raw, json)
Hash identifier:          3a/tKqbaarQmxMQsDUacGSmyH6p51e1DyFZIj4nVmwc=
Subject key identifier:   BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7728
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/v7hTbPcPQdALMlBbJ4yvyzhxFso.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:31 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131482
                          IP: 103.72.120.0/22
                          IP: 2406:dd80::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30504 (0x7728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:31 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:c6:0d:5a:ff:61:17:6f:af:1e:ac:1d:a7:
                    f9:6e:7f:47:08:12:ff:f6:2c:35:b4:0c:2c:25:0b:
                    10:0f:ab:9f:d4:57:2c:b9:a8:a0:f9:ab:94:9c:c4:
                    67:b5:27:9e:81:fe:ff:1d:f3:3a:75:8e:65:dc:08:
                    0c:b1:ba:99:bb:4a:f7:9c:06:61:60:81:4e:48:bb:
                    d9:2b:98:a9:1c:ff:0a:0c:7b:12:f4:e4:2f:62:6e:
                    3c:b1:10:04:83:b6:fe:a2:ea:e3:2f:02:07:bc:cd:
                    bf:41:9c:47:cd:c8:21:b5:b9:27:91:fc:70:b6:13:
                    3b:33:bb:f2:1c:c8:a8:0c:7b:29:fa:fe:53:38:1c:
                    95:74:a9:fa:66:2f:0f:b6:77:76:18:87:1d:91:24:
                    72:1a:5e:c1:20:52:81:f8:71:3c:c8:28:7a:33:89:
                    ff:97:ec:e2:d4:67:7f:53:53:d5:3b:3f:ad:f6:07:
                    8b:9c:d9:76:61:62:b7:85:94:92:38:5e:0a:4d:b4:
                    2f:64:ff:a2:73:df:6f:70:4d:eb:c7:1d:2a:46:7b:
                    fb:96:5e:a5:77:a4:a2:9d:15:52:03:f7:10:4e:a8:
                    38:41:f3:b8:a5:59:a1:ba:fc:d8:a3:c8:ce:f9:34:
                    75:56:11:44:41:8d:52:9f:a0:19:40:fb:ef:8d:97:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/v7hTbPcPQdALMlBbJ4yvyzhxFso.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131482

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.120.0/22
                IPv6:
                  2406:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:6f:e4:a1:04:49:9e:fa:b5:8a:33:6a:0a:09:9a:e6:4f:
         02:29:aa:34:b2:3e:50:47:56:11:03:3c:66:48:da:39:b8:5b:
         aa:f2:99:43:c1:b3:2c:6e:29:11:45:7b:d2:ad:9d:6b:49:4f:
         7b:a2:2c:51:0f:39:be:de:03:f1:1c:ff:79:6b:3f:a6:16:95:
         29:6f:15:d8:a8:e2:a1:06:e9:47:8a:8f:49:bf:69:8b:6c:fa:
         bd:f3:3a:df:26:64:03:3f:e7:b6:9b:e8:f5:94:92:77:61:f8:
         1b:b9:44:d0:74:7d:11:c7:49:b6:7f:98:57:8b:9a:38:77:48:
         05:2e:e1:7d:ce:ec:d8:f5:03:be:40:fc:27:08:9a:a8:bd:cc:
         e5:3e:d3:fc:04:a3:45:24:53:c2:fa:d4:38:0f:c1:b5:20:23:
         fe:a1:c3:17:b2:42:8c:22:9c:a5:7b:fb:1c:5b:9c:97:06:98:
         38:27:4a:1c:f8:fc:b3:98:bf:9b:93:b8:e6:6e:a3:8d:ca:6e:
         5d:f6:64:4e:3f:b6:4e:eb:e2:53:2f:ad:34:b2:73:d1:bc:1e:
         5f:55:65:07:15:33:30:74:fa:40:bc:03:06:10:20:9b:dc:99:
         5d:da:db:84:0a:f3:9c:48:6f:36:ce:37:f4:f8:de:5e:12:3f:
         70:4b:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org