Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.cer
File:                     wrDgZzsfzDPiLOnT_7xmmpcc8Z4.cer (raw, json)
Hash identifier:          BuI5mzGY0IDUbZCaSqL0DhDrEIrsI4sgKPDLh9ULO+M=
Subject key identifier:   C2:B0:E0:67:3B:1F:CC:33:E2:2C:E9:D3:FF:BC:66:9A:97:1C:F1:9E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       77D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:06:19 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.126.100.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30680 (0x77d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:06:19 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C2B0E0673B1FCC33E22CE9D3FFBC669A971CF19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:33:80:b3:a0:c2:d8:50:bc:ea:20:15:cc:
                    3c:de:db:56:12:74:52:8a:86:89:21:6d:0c:15:87:
                    2e:84:da:a7:1e:0d:e4:51:b7:24:52:ed:bb:89:f1:
                    29:05:61:0c:bc:1f:79:d5:5b:d3:4b:95:31:c4:92:
                    24:0b:d2:14:b8:11:f9:d6:53:1f:1d:84:32:72:31:
                    a1:91:08:5f:b1:46:37:27:b8:85:74:ea:2c:dd:5f:
                    47:c2:b4:20:f6:97:44:89:e6:c5:86:01:52:14:a1:
                    7b:7c:77:c1:b5:11:c2:29:4b:e5:67:ff:e2:59:1b:
                    b1:0c:4a:3d:61:72:15:51:2c:29:5d:7a:b6:0d:57:
                    3a:b2:5d:ab:fb:7f:24:f9:d7:54:d7:d4:32:10:f4:
                    ca:bd:8c:25:2b:7e:cb:8b:ea:e5:1f:b6:d6:e3:58:
                    04:fd:9f:fa:f0:01:5c:b7:25:1d:71:af:de:2f:3e:
                    0c:11:54:83:8c:a0:bd:ec:ba:57:a0:27:44:3a:12:
                    18:07:fd:24:85:f3:22:1c:f5:d6:28:86:37:9a:5c:
                    59:a9:74:63:ad:2d:34:81:81:ae:a5:3d:a9:a0:eb:
                    62:88:25:52:88:cb:a7:ec:92:a4:0b:48:34:55:2b:
                    b0:81:4e:ac:12:ee:b0:9f:29:24:8f:72:15:68:47:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B0:E0:67:3B:1F:CC:33:E2:2C:E9:D3:FF:BC:66:9A:97:1C:F1:9E
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:69:3b:32:47:8c:ce:20:a8:ca:bc:b8:57:05:40:1c:1e:b2:
         b3:da:ba:3e:9c:22:a0:2f:28:35:e5:df:c5:cd:47:d5:8b:d3:
         86:e9:47:fb:c6:ba:52:2f:2c:0d:5d:e1:34:98:ae:89:50:59:
         84:6d:6d:f5:07:0c:87:7d:2d:42:f2:35:aa:2f:4b:97:97:f7:
         39:c4:d0:3d:4b:88:03:e5:53:bb:e0:08:5e:90:16:b3:17:ca:
         22:2e:1f:b1:8d:e3:1a:a6:46:94:be:76:35:86:35:b7:29:e1:
         01:ff:60:d0:85:15:b9:0c:0e:25:b5:c8:a9:bd:ae:91:ec:62:
         98:36:9d:24:6a:cc:4b:10:97:75:ef:8f:87:15:ea:2d:ed:9c:
         93:46:a9:c5:45:76:5a:98:db:cb:61:d9:dc:69:d2:6e:10:05:
         04:07:df:df:73:17:97:38:9d:a6:57:51:2c:15:90:0d:51:fd:
         ef:92:85:9c:58:25:1a:ec:a3:cd:fa:c3:f9:d5:2e:3c:93:b4:
         14:d1:76:d3:c3:f7:c2:5c:f1:84:33:0c:9b:d8:88:1c:ee:b4:
         17:f3:bd:17:48:c5:4d:a1:cf:7b:83:67:55:0a:18:2d:c8:3f:
         ac:8b:ee:23:0c:e7:78:1d:ef:1b:74:16:43:e3:2b:f7:46:15:
         8b:3a:52:27
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICd9gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDYxOVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoQzJCMEUwNjczQjFGQ0MzM0UyMkNFOUQzRkZCQzY2OUE5NzFDRjE5
RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKHYM4CzoMLYULzqIBXM
PN7bVhJ0UoqGiSFtDBWHLoTapx4N5FG3JFLtu4nxKQVhDLwfedVb00uVMcSSJAvS
FLgR+dZTHx2EMnIxoZEIX7FGNye4hXTqLN1fR8K0IPaXRInmxYYBUhShe3x3wbUR
wilL5Wf/4lkbsQxKPWFyFVEsKV16tg1XOrJdq/t/JPnXVNfUMhD0yr2MJSt+y4vq
5R+21uNYBP2f+vABXLclHXGv3i8+DBFUg4ygvey6V6AnRDoSGAf9JIXzIhz11iiG
N5pcWal0Y60tNIGBrqU9qaDrYoglUojLp+ySpAtINFUrsIFOrBLusJ8pJI9yFWhH
u00CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTCsOBnOx/MM+Is6dP/vGaalxzxnjAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg0
MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yODQxL3dyRGdaenNmekRQaUxPblRfN3htbXBjYzhaNC5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnfmQwDQYJKoZIhvcNAQELBQAD
ggEBAJtpOzJHjM4gqMq8uFcFQBwesrPauj6cIqAvKDXl38XNR9WL04bpR/vGulIv
LA1d4TSYrolQWYRtbfUHDId9LULyNaovS5eX9znE0D1LiAPlU7vgCF6QFrMXyiIu
H7GN4xqmRpS+djWGNbcp4QH/YNCFFbkMDiW1yKm9rpHsYpg2nSRqzEsQl3Xvj4cV
6i3tnJNGqcVFdlqY28th2dxp0m4QBQQH399zF5c4naZXUSwVkA1R/e+ShZxYJRrs
o836w/nVLjyTtBTRdtPD98Jc8YQzDJvYiBzutBfzvRdIxU2hz3uDZ1UKGC3IP6yL
7iMM53gd7xt0FkPjK/dGFYs6Uic=
-----END CERTIFICATE-----