Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xpicBtyaVfOD1h9ycbit5qPMJqU.cer
File:                     xpicBtyaVfOD1h9ycbit5qPMJqU.cer (raw, json)
Hash identifier:          287N6JQohiVTxX5gzFX6m7X6acBS/LkyejkUAVf5gyI=
Subject key identifier:   C6:98:9C:06:DC:9A:55:F3:83:D6:1F:72:71:B8:AD:E6:A3:CC:26:A5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       93C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/xpicBtyaVfOD1h9ycbit5qPMJqU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 17 Feb 2023 02:47:05 +0000
Certificate not after:    Sat 17 Feb 2024 02:46:59 +0000
Subordinate resources:    IP: 103.208.44.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37827 (0x93c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb 17 02:47:05 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=C6989C06DC9A55F383D61F7271B8ADE6A3CC26A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:07:91:7b:05:42:7a:f1:45:63:79:e2:43:
                    09:41:e5:55:1c:b9:5c:9e:e5:90:28:67:b0:af:5a:
                    ed:97:e0:79:a3:0d:39:d7:f6:74:32:66:20:a7:44:
                    63:4b:cb:e5:6d:8c:e0:22:54:a4:59:f7:f2:25:27:
                    c8:69:ad:d0:5f:db:3b:18:56:11:90:ff:e5:cd:0f:
                    c7:0b:b9:61:af:9e:3d:b9:21:ef:7e:80:d3:15:eb:
                    e8:f5:20:10:62:a7:46:5b:82:af:bb:07:97:77:35:
                    ca:64:5f:d6:6d:b4:11:21:9f:10:80:c8:ad:9d:09:
                    bd:97:70:36:c9:28:b1:d1:2d:ea:fc:5c:f5:4d:34:
                    57:bb:ab:d4:31:f6:d9:b1:38:b2:3c:47:5a:78:e0:
                    57:4a:a1:ce:2a:0a:0e:0a:c3:87:ce:1b:a5:96:a7:
                    52:5e:38:5e:ff:c2:76:65:3c:b5:b0:fd:b3:ea:19:
                    89:87:1f:6e:97:38:43:0f:53:3b:25:f3:6d:d3:9f:
                    72:c8:24:b5:4d:e6:19:86:57:5f:0e:f7:5b:0a:ae:
                    9a:a8:04:78:fd:99:82:60:6e:bf:60:6c:a6:3b:57:
                    8c:84:0d:57:f1:f8:56:b8:15:3c:6b:2a:b8:49:35:
                    e3:d1:be:f1:80:39:05:23:1c:5c:09:69:45:cb:82:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:98:9C:06:DC:9A:55:F3:83:D6:1F:72:71:B8:AD:E6:A3:CC:26:A5
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/xpicBtyaVfOD1h9ycbit5qPMJqU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:1f:9d:9e:9e:81:fc:02:4f:0d:20:56:bf:48:c8:87:25:a4:
         4f:2c:22:da:83:4d:43:1a:6a:1c:1f:00:fa:4e:0f:07:a6:be:
         63:01:0e:f5:44:e7:0d:0b:5c:f1:bf:5f:bc:1e:cd:aa:eb:ae:
         44:ed:1f:65:45:f0:53:9a:79:74:f8:c3:37:ff:dd:d4:6e:1b:
         65:49:d4:2d:7d:7b:87:a0:f9:78:b7:7f:ee:ad:11:e6:57:dd:
         fb:4f:6e:b3:37:e7:5f:2e:c6:81:0d:6e:e1:71:28:c0:6b:3f:
         97:7f:7d:a9:83:2c:d3:4b:74:8a:ad:fe:bf:15:50:8a:64:85:
         e8:bc:2a:40:1f:a2:49:93:dd:26:38:48:11:b2:36:9d:e8:0b:
         3e:d1:7c:99:af:77:5b:d0:81:0a:ef:6e:9c:79:c8:4a:d0:b9:
         0d:fb:70:f3:3c:12:94:56:d6:da:61:d7:6c:67:09:e0:2f:17:
         37:92:27:d0:31:61:5c:7d:77:12:5a:ba:22:22:29:3d:6a:12:
         f0:f9:f6:c1:8c:bb:c0:47:3e:d1:43:03:23:75:b7:be:39:25:
         29:2e:16:38:ad:88:5f:7e:24:3e:d2:4b:18:ed:ea:bf:2b:1a:
         62:41:97:6a:e5:a3:e6:50:be:eb:07:85:97:61:f3:58:c9:35:
         7f:59:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----