Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vW24_rI-BQ0W6bQI_Wz7kH374ik.cer
File:                     vW24_rI-BQ0W6bQI_Wz7kH374ik.cer (raw, json)
Hash identifier:          dsO0PlmZ272TuhGQCbsQRmola+OgmNvY5l08mLjzaJQ=
Subject key identifier:   BD:6D:B8:FE:B2:3E:05:0D:16:E9:B4:08:FD:6C:FB:90:7D:FB:E2:29
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       9106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/vW24_rI-BQ0W6bQI_Wz7kH374ik.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 06 Jan 2023 08:46:20 +0000
Certificate not after:    Sat 06 Jan 2024 08:35:17 +0000
Subordinate resources:    AS: 58842
                          IP: 43.240.136.0/22
                          IP: 43.241.76.0/22
                          IP: 43.242.84.0/22
                          IP: 103.25.20.0/22
                          IP: 103.25.36.0/22
                          IP: 103.240.16.0/22
                          IP: 103.240.244.0/22
                          IP: 113.11.192.0/19
                          IP: 2404:9b80::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37126 (0x9106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  6 08:46:20 2023 GMT
            Not After : Jan  6 08:35:17 2024 GMT
        Subject: CN=BD6DB8FEB23E050D16E9B408FD6CFB907DFBE229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:77:23:93:f1:28:61:9d:76:13:f8:14:63:
                    3d:7a:9a:3b:8d:c0:bb:24:e4:f5:1c:45:15:54:d8:
                    de:b6:d1:43:61:61:03:d1:4d:83:30:50:ca:a5:82:
                    05:c1:a1:0b:6c:27:5f:00:72:2c:70:6b:23:cf:40:
                    e9:96:df:dc:a1:c2:1e:ff:af:3b:eb:3e:97:90:d6:
                    b5:41:a2:a9:6f:3d:cc:68:4d:83:24:66:0e:1a:67:
                    31:78:3d:d5:aa:7d:67:12:9d:08:e4:e7:a5:6d:d6:
                    ec:c0:47:5f:10:42:b7:45:61:07:93:95:7f:9e:52:
                    7b:bc:23:85:bf:56:35:b8:77:af:96:1b:38:49:0a:
                    2b:5c:31:4c:46:95:20:d5:16:b8:64:24:16:7d:a4:
                    4d:3c:b6:b4:8b:1d:6f:1f:73:d6:aa:1f:3e:fa:a2:
                    d4:52:e8:86:b1:c3:1c:7f:3d:1e:de:f6:59:03:53:
                    18:75:c5:14:a4:91:02:fb:b6:e4:74:0f:38:4f:97:
                    31:96:26:07:c4:61:02:e7:c2:b5:dc:fe:6f:fa:5a:
                    08:98:0f:f0:2d:d0:5a:ae:a4:0d:4e:26:14:98:31:
                    fc:dc:84:81:27:73:e3:77:81:3d:b4:8a:d2:24:95:
                    e2:46:db:df:93:75:5c:88:96:ed:9c:e8:4a:ae:67:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6D:B8:FE:B2:3E:05:0D:16:E9:B4:08:FD:6C:FB:90:7D:FB:E2:29
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/vW24_rI-BQ0W6bQI_Wz7kH374ik.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58842

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.136.0/22
                  43.241.76.0/22
                  43.242.84.0/22
                  103.25.20.0/22
                  103.25.36.0/22
                  103.240.16.0/22
                  103.240.244.0/22
                  113.11.192.0/19
                IPv6:
                  2404:9b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:b6:5a:b3:d1:77:45:9f:a4:0c:c5:21:29:b6:af:fb:2e:
         46:67:d0:2b:61:cc:f5:71:1f:19:08:42:1b:df:c4:95:97:25:
         b6:f7:6d:04:f3:63:50:24:93:ab:83:f2:eb:05:f3:e5:66:19:
         d4:c6:2b:ec:30:2c:c3:f5:92:39:3a:a7:47:98:c2:49:cd:73:
         20:73:fc:ce:91:48:2a:e8:e8:42:e0:36:95:37:ef:77:8c:5a:
         ec:74:7a:73:95:f8:2a:8c:be:e2:01:1f:39:4e:14:0f:d7:2e:
         a3:02:95:f7:19:43:00:50:95:22:c1:58:e9:74:a4:08:67:89:
         47:af:c7:d6:ef:f3:b9:85:eb:e0:ee:76:8f:bf:15:81:6b:2b:
         97:15:d3:8c:31:d2:05:0b:15:5c:9d:12:66:bb:43:7f:8b:c3:
         35:a8:98:2e:8f:fa:83:e3:6e:d8:ff:f6:d4:b0:c3:f3:97:b0:
         b7:7c:88:02:04:d6:df:6a:88:6c:7e:aa:64:c2:11:66:36:21:
         2a:e3:8e:ca:d0:b8:b0:da:4a:4e:34:87:72:89:0b:bc:43:bc:
         04:43:cc:c9:68:bf:fa:d2:2f:ff:1c:0a:86:12:f6:16:0a:54:
         af:cd:d4:b1:4d:af:66:6c:6a:d2:4c:19:8c:c3:3e:59:23:2e:
         7a:08:59:8a
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAJEGMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzAxMDYwODQ2MjBaFw0yNDAxMDYwODM1MTdaMDMx
MTAvBgNVBAMTKEJENkRCOEZFQjIzRTA1MEQxNkU5QjQwOEZENkNGQjkwN0RGQkUy
MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPXcjk/EoYZ12E/gU
Yz16mjuNwLsk5PUcRRVU2N620UNhYQPRTYMwUMqlggXBoQtsJ18AcixwayPPQOmW
39yhwh7/rzvrPpeQ1rVBoqlvPcxoTYMkZg4aZzF4PdWqfWcSnQjk56Vt1uzAR18Q
QrdFYQeTlX+eUnu8I4W/VjW4d6+WGzhJCitcMUxGlSDVFrhkJBZ9pE08trSLHW8f
c9aqHz76otRS6Iaxwxx/PR7e9lkDUxh1xRSkkQL7tuR0DzhPlzGWJgfEYQLnwrXc
/m/6WgiYD/At0FqupA1OJhSYMfzchIEnc+N3gT20itIkleJG29+TdVyIlu2c6Equ
Z6GVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvW24/rI+BQ0W6bQI/Wz7kH374ikw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzU4
OS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC81ODkvdlcyNF9ySS1CUTBXNmJRSV9XejdrSDM3NGlrLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5dowWAYIKwYBBQUHAQcBAf8ESTBHMDYE
AgABMDADBAIr8IgDBAIr8UwDBAIr8lQDBAJnGRQDBAJnGSQDBAJn8BADBAJn8PQD
BAVxC8AwDQQCAAIwBwMFACQEm4AwDQYJKoZIhvcNAQELBQADggEBAKbCtlqz0XdF
n6QMxSEptq/7LkZn0CthzPVxHxkIQhvfxJWXJbb3bQTzY1Akk6uD8usF8+VmGdTG
K+wwLMP1kjk6p0eYwknNcyBz/M6RSCro6ELgNpU373eMWux0enOV+CqMvuIBHzlO
FA/XLqMClfcZQwBQlSLBWOl0pAhniUevx9bv87mF6+Dudo+/FYFrK5cV04wx0gUL
FVydEma7Q3+LwzWomC6P+oPjbtj/9tSww/OXsLd8iAIE1t9qiGx+qmTCEWY2ISrj
jsrQuLDaSk40h3KJC7xDvARDzMlov/rSL/8cCoYS9hYKVK/N1LFNr2ZsatJMGYzD
PlkjLnoIWYo=
-----END CERTIFICATE-----