Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/x75YJXN6hx9lg5xo9LMsKUAkM10.cer
File:                     x75YJXN6hx9lg5xo9LMsKUAkM10.cer (raw, json)
Hash identifier:          HrmaxFmsL6m9xWU8iJABvVBEpqj8FEKd/jFh40fCokk=
Subject key identifier:   C7:BE:58:25:73:7A:87:1F:65:83:9C:68:F4:B3:2C:29:40:24:33:5D
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       205A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/x75YJXN6hx9lg5xo9LMsKUAkM10.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sun 14 Nov 2021 20:16:43 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 167.189.0.0/16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8282 (0x205a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Nov 14 20:16:43 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C7BE5825737A871F65839C68F4B32C294024335D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:0d:69:1e:ac:38:9b:ef:37:c1:7f:1b:59:
                    83:ae:a4:a3:cc:e7:61:70:40:b2:2d:dd:78:aa:74:
                    46:e2:a1:04:3d:a4:c0:f6:9c:60:b4:29:c7:47:6e:
                    8d:cb:81:82:05:8c:9f:3f:67:f9:bb:c6:ca:17:b3:
                    0d:6c:b7:09:49:de:29:48:0a:94:38:be:88:c4:44:
                    14:bc:d6:37:b9:a7:4d:3a:91:96:b6:e0:ee:05:f6:
                    9b:8f:3b:7e:c7:22:7a:ae:06:5e:d1:c0:eb:22:80:
                    03:7c:9a:08:99:df:c9:de:ca:c0:af:9a:5d:d7:b0:
                    fa:40:a6:27:cb:70:ee:35:eb:27:f3:d1:d4:2e:c4:
                    79:eb:32:b3:d7:fe:75:5c:0f:5f:54:fe:14:ad:0f:
                    2e:a8:88:84:24:24:5c:a0:36:ed:0e:f4:08:54:eb:
                    07:9c:de:c6:6a:11:2b:94:f6:bd:b5:79:40:6a:7a:
                    f7:76:85:3b:d5:f9:a9:ea:4f:da:65:f0:f2:07:87:
                    87:e8:f5:a0:c1:a4:42:f8:97:58:00:27:37:78:2b:
                    76:45:3a:b0:d9:ad:45:ab:6b:ee:59:01:df:03:6d:
                    f8:0c:01:b7:3e:15:e1:64:8f:c3:8c:2f:97:88:2c:
                    89:f8:a3:8a:1e:16:89:50:ed:b8:c2:2c:4c:16:3e:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BE:58:25:73:7A:87:1F:65:83:9C:68:F4:B3:2C:29:40:24:33:5D
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/x75YJXN6hx9lg5xo9LMsKUAkM10.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.189.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:bc:f5:81:e6:db:3e:0f:8c:92:98:4f:11:82:9b:c9:e9:
         c9:cc:c0:28:d2:c4:2d:a6:72:34:27:b6:8f:64:9a:fc:9a:03:
         8b:15:dd:99:b4:0d:1b:12:37:9b:c1:e7:db:17:15:2a:00:9f:
         28:c5:f4:5e:fd:ef:e0:8e:35:81:af:d6:ce:0c:dc:f3:62:cf:
         02:61:72:0e:fc:91:9d:85:65:47:59:69:3f:af:7f:32:df:3f:
         e9:32:18:22:ad:1f:b6:77:a6:75:ef:8f:18:d6:f7:3e:3c:d7:
         b5:25:6a:24:2f:db:e9:bf:89:bd:41:ba:45:a9:c5:05:c8:ea:
         08:e2:17:83:cf:01:a4:71:cb:13:52:0d:6a:85:a9:19:c7:99:
         91:df:20:c6:b1:e3:04:87:32:8c:41:54:bd:42:1a:af:92:85:
         03:c9:0b:58:9e:34:90:ba:e4:7d:b4:9d:84:a2:b3:fe:a2:5a:
         a9:f9:1f:d7:bb:3f:5f:2a:0e:27:01:12:47:66:d2:16:f2:7a:
         c3:00:14:61:4d:6f:54:d9:34:ee:c8:c4:96:97:b4:10:c7:f7:
         18:0d:11:10:5a:ff:29:9e:cf:79:cb:b6:7c:a4:8f:6a:e5:40:
         55:14:54:7a:12:e4:c0:eb:af:36:c0:7b:a7:21:a6:4f:3d:34:
         62:62:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----