Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xWqPJSIg58yb7AOSq9Q8kpiDefo.cer
File:                     xWqPJSIg58yb7AOSq9Q8kpiDefo.cer (raw, json)
Hash identifier:          60G60TtZQOFvngiO58Z++MZFaqGbCauhn+xY8hdQUV4=
Subject key identifier:   C5:6A:8F:25:22:20:E7:CC:9B:EC:03:92:AB:D4:3C:92:98:83:79:FA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       771A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/xWqPJSIg58yb7AOSq9Q8kpiDefo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:19 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 38356
                          AS: 45058
                          IP: 103.235.56.0/22
                          IP: 117.79.64.0 -- 117.79.255.255
                          IP: 180.188.48.0 -- 180.188.127.255
                          IP: 218.240.0.0/18
                          IP: 2400:c200::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30490 (0x771a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:19 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C56A8F252220E7CC9BEC0392ABD43C92988379FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:95:dc:48:1c:5c:22:f9:ff:ac:fa:10:3a:b0:
                    a5:30:55:22:03:a2:29:cf:f3:1f:d3:12:b8:74:53:
                    14:c9:8f:a1:3f:e0:9a:db:77:64:99:c8:73:04:0e:
                    40:17:42:8f:8a:77:3a:2c:36:ef:42:db:46:fe:e0:
                    7d:3f:2f:67:7e:d8:65:ad:ab:7e:6b:43:a6:7b:b4:
                    20:be:85:4f:d6:ac:7c:c1:f1:d0:cf:61:7e:39:60:
                    c5:8a:46:bd:a7:ac:fd:a1:2b:f0:9b:5b:d5:d6:2f:
                    de:71:af:d4:9d:a4:2e:57:31:04:58:6e:56:e3:e7:
                    d2:49:9e:4e:9f:45:17:5f:43:9c:90:18:df:3e:9d:
                    45:d6:93:94:83:25:9e:1b:09:86:80:68:18:e9:05:
                    ab:0c:49:c8:33:a0:03:3c:6b:94:ab:32:62:47:64:
                    94:05:2f:3f:d0:10:09:47:95:28:c5:a0:2b:ac:e2:
                    62:f9:26:e0:0b:12:47:36:52:93:de:39:c9:df:11:
                    23:27:68:b2:6a:ba:4c:08:38:87:93:4f:92:a9:f1:
                    65:5b:89:f8:fa:b7:13:72:00:13:0c:5a:fc:06:6b:
                    07:fe:5a:5c:9c:4e:f0:40:a0:02:38:05:2f:f1:50:
                    17:af:61:53:55:ce:81:7a:5c:94:7e:77:6a:94:c9:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:8F:25:22:20:E7:CC:9B:EC:03:92:AB:D4:3C:92:98:83:79:FA
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/46/xWqPJSIg58yb7AOSq9Q8kpiDefo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38356
                  45058

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.56.0/22
                  117.79.64.0-117.79.255.255
                  180.188.48.0-180.188.127.255
                  218.240.0.0/18
                IPv6:
                  2400:c200::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:67:5f:64:49:af:67:fa:85:c1:0d:02:60:a5:b4:80:e5:56:
         37:90:06:a9:8d:20:86:eb:48:d5:b4:80:1c:95:40:9c:a4:88:
         1f:c8:71:95:eb:d4:1e:37:03:61:28:85:be:28:68:c0:fb:83:
         2a:ff:ac:48:bd:9d:e5:2f:49:55:0e:a2:b1:0d:06:68:f6:8b:
         96:d5:95:b1:7c:f9:e4:4f:7c:42:de:dc:20:19:b9:d6:c6:d6:
         04:88:8a:9b:65:88:ac:93:eb:1e:b9:82:6c:25:7a:50:b1:f7:
         07:c0:2e:d8:09:9b:49:55:f1:f4:35:b0:b3:7d:45:30:b6:ba:
         d6:7b:28:43:a3:21:a0:26:c3:99:87:ea:28:c2:2a:0d:6d:90:
         21:16:bd:4d:4d:99:ee:68:50:51:bd:b5:71:4c:91:09:bc:28:
         a5:97:2f:96:03:5c:67:84:12:0e:8d:65:f7:10:ba:c5:46:2e:
         37:6c:32:d6:ed:98:0b:f3:63:ab:aa:37:d7:41:d3:43:9c:e0:
         63:63:bc:f6:e8:82:57:d8:45:99:a6:c9:d1:04:d0:9a:b3:38:
         96:f2:ff:4d:5d:ff:40:da:fe:38:a7:2f:f6:51:d3:1e:ed:27:
         b4:9a:da:78:ed:b5:0e:b2:ff:b6:30:a6:26:05:7e:05:55:5e:
         8b:b3:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----