Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/wCOc_EyH5Xh_xaHjbE43N5OaCDw.cer
File:                     wCOc_EyH5Xh_xaHjbE43N5OaCDw.cer (raw, json)
Hash identifier:          I53kx80ODjT3aLF194WXXi581cGAIHmxo0GcuObKHWs=
Subject key identifier:   C0:23:9C:FC:4C:87:E5:78:7F:C5:A1:E3:6C:4E:37:37:93:9A:08:3C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/wCOc_EyH5Xh_xaHjbE43N5OaCDw.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:49 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 139119
                          IP: 103.157.234.0/23
                          IP: 2406:a7c0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30518 (0x7736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:49 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C0239CFC4C87E5787FC5A1E36C4E3737939A083C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:2f:dc:be:62:74:64:b4:c5:61:06:39:f7:
                    c7:6a:a5:9e:38:ad:ac:d2:a5:29:02:ae:2e:e7:bf:
                    77:98:0a:c0:14:3a:fb:3e:25:4e:e0:3c:b1:a5:7f:
                    3f:c5:2d:c1:5a:a2:f9:b2:b1:be:f0:6a:92:eb:c8:
                    3d:22:1e:bb:28:b8:f7:8b:2b:4d:52:6c:70:30:9e:
                    4f:3c:db:3d:76:1b:21:94:ca:00:4b:7b:00:28:77:
                    1e:00:eb:a8:63:fc:53:88:92:43:eb:c2:5d:3a:39:
                    98:e5:3a:92:28:b9:34:65:67:0f:42:35:d4:2b:0f:
                    59:80:6c:72:7b:97:a2:c9:4c:88:fb:c4:5a:f7:6e:
                    33:fc:59:a2:7f:ad:40:66:62:f6:3f:c5:42:78:67:
                    89:dc:8e:cf:22:9d:e6:06:a5:64:47:29:dd:f1:42:
                    e4:92:bb:40:d8:94:e4:0b:ca:4d:a4:69:0d:43:a2:
                    dd:3b:36:bb:02:e8:f7:52:41:f2:ca:e1:35:9f:52:
                    ee:35:c2:18:08:6b:13:d2:1a:2c:6d:10:16:d7:2d:
                    14:74:b9:50:82:6c:cb:8f:7c:8b:d3:40:f6:d4:d2:
                    0c:11:8b:26:8b:47:82:ed:c0:2c:c9:9f:77:6c:4b:
                    31:dc:70:df:6d:2d:7f:b3:18:3e:df:a1:92:8d:2f:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:23:9C:FC:4C:87:E5:78:7F:C5:A1:E3:6C:4E:37:37:93:9A:08:3C
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/wCOc_EyH5Xh_xaHjbE43N5OaCDw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139119

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.234.0/23
                IPv6:
                  2406:a7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:99:c9:b4:55:e4:eb:a7:23:6d:1d:8e:e2:62:21:d6:d3:
         42:b3:80:d1:a3:0f:28:61:5a:17:a8:95:df:88:5d:6d:c9:63:
         bb:98:eb:3d:78:ab:a7:12:4f:0c:e3:37:e2:4e:a6:00:43:e0:
         78:f0:a7:0d:3b:e9:9b:8c:2c:74:00:ce:f8:46:6b:9d:b6:8d:
         4f:90:2e:76:07:d7:95:2c:26:c7:45:fa:55:d9:e6:4f:3a:cf:
         0f:3a:5a:a2:7c:c2:45:d7:d4:01:77:fd:cc:71:46:30:f8:b8:
         e0:b5:bc:73:98:6c:b3:5d:80:c3:bf:99:00:dc:ae:ef:d3:70:
         ff:3b:a0:61:5b:ab:1c:27:5e:7c:13:65:a7:57:5e:b0:ba:c2:
         78:08:ae:dc:58:ba:9b:09:25:35:63:95:f2:d5:47:e0:dd:48:
         20:e9:63:0d:bd:9f:a5:b1:3e:84:c1:39:57:5a:fc:5f:3c:05:
         62:59:99:21:17:a7:38:1b:6b:bd:54:88:5c:de:4d:ac:17:c0:
         c0:f7:06:c9:df:7d:81:70:bc:f2:ab:f8:03:d3:54:a9:5e:f9:
         e5:a7:1b:b4:bb:bb:18:d5:ba:5c:47:85:9b:fb:40:09:c6:2a:
         ca:a6:3b:db:be:6c:bb:14:1d:16:c7:8d:86:d8:de:b8:f0:c0:
         ac:85:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----