Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/wxFDJQUFCsYb1ipsgNlH2WJvCxY.cer
File:                     wxFDJQUFCsYb1ipsgNlH2WJvCxY.cer (raw, json)
Hash identifier:          jW0Gxn1tfSm6WrXChNOik9qfshNHY/CfoauKn3lPmBI=
Subject key identifier:   C3:11:43:25:05:05:0A:C6:1B:D6:2A:6C:80:D9:47:D9:62:6F:0B:16
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       78A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/wxFDJQUFCsYb1ipsgNlH2WJvCxY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Wed 09 Jun 2021 20:29:42 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63620
                          IP: 59.153.116.0/22
                          IP: 103.70.220.0/22
                          IP: 2406:3d80::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30889 (0x78a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  9 20:29:42 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C311432505050AC61BD62A6C80D947D9626F0B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:99:e2:4e:46:78:3b:a1:70:ce:9d:c5:e8:
                    27:b6:21:9f:05:cb:5d:24:16:17:d9:f6:b5:4d:c3:
                    bc:dd:79:2e:a8:bf:91:16:14:88:d7:c8:8c:eb:2a:
                    d5:e7:e2:c3:e4:41:8f:f6:ea:43:c3:d8:54:0c:78:
                    4b:e7:0c:35:29:d0:77:28:c5:2a:e8:16:4b:de:59:
                    8d:2c:25:79:43:e1:aa:3d:28:3d:35:2b:ea:a3:7e:
                    57:a8:19:f8:8b:3f:e1:94:1a:ea:93:96:ca:68:26:
                    76:72:bd:fb:4f:7a:38:7b:6a:3a:d0:93:85:86:69:
                    45:24:e5:11:9d:6b:f1:c2:3a:7a:f3:65:90:5b:ab:
                    8e:c6:3c:dc:08:8d:cd:0a:89:82:97:4e:a5:42:13:
                    d5:41:5d:4b:34:a0:82:ad:33:fb:ad:c6:e5:2d:da:
                    df:ef:1f:3e:79:1c:a9:c2:ea:6e:30:3f:61:0a:ec:
                    cc:d2:f1:71:00:93:4e:1f:22:d0:ba:26:64:a3:78:
                    a9:28:8b:13:23:f4:ce:da:ff:41:c3:da:93:0f:94:
                    ec:b8:85:39:e2:f8:90:82:1c:12:cb:42:19:6c:64:
                    6b:cc:c0:b9:d6:dc:16:e4:7d:97:9e:9a:10:27:d7:
                    0c:82:7a:a7:a6:44:d4:b1:15:f8:e7:d9:fa:ac:35:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:11:43:25:05:05:0A:C6:1B:D6:2A:6C:80:D9:47:D9:62:6F:0B:16
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2038/wxFDJQUFCsYb1ipsgNlH2WJvCxY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63620

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.116.0/22
                  103.70.220.0/22
                IPv6:
                  2406:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:01:8e:89:7d:ff:9f:9a:55:61:0d:ab:c7:8c:29:af:2a:e0:
         13:d0:f8:ea:b0:fa:e2:3c:22:54:e3:23:52:83:26:f6:c1:e2:
         a8:d5:a2:b5:1b:a0:57:22:3e:e8:8d:41:83:c6:5d:a5:58:86:
         71:5c:db:cc:94:d9:d7:2f:a0:ad:fe:de:2c:e5:af:a6:4f:43:
         c6:bd:67:db:22:a3:54:af:46:0a:11:25:32:f3:43:16:5c:db:
         22:cf:46:11:cf:80:01:cd:73:b8:a0:79:ae:03:ad:c3:b0:e2:
         d4:e4:83:77:07:79:d5:f1:2e:38:75:ae:4b:36:35:3b:0c:b2:
         76:5f:4d:30:40:c1:ef:97:81:e3:e6:44:56:74:ea:56:fd:1a:
         fc:09:64:96:f2:70:cd:17:b7:69:d7:c1:93:70:0a:7f:e6:28:
         d6:1b:94:94:3a:04:dc:46:bd:b5:7f:59:56:b9:e9:ad:14:8c:
         b6:66:c1:4a:20:ee:fc:d9:5c:47:de:ec:a4:f4:2e:62:24:04:
         1e:16:d1:c5:31:85:90:64:50:a9:64:2f:85:34:eb:e7:c1:d5:
         89:66:94:06:e8:4c:aa:4c:55:c1:51:be:11:3e:e9:ee:f7:39:
         e5:d3:ee:d2:8f:7c:94:db:62:d3:6f:1a:72:5f:8f:3a:7f:89:
         df:a0:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----