Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/y-GdTTCf4OYiZmgNjwNQKSfnLvY.cer
File:                     y-GdTTCf4OYiZmgNjwNQKSfnLvY.cer (raw, json)
Hash identifier:          AB4eg/1Mpgxqn4OtFFuwmPZR01hsXQ5+BLHwWcfR0GE=
Subject key identifier:   CB:E1:9D:4D:30:9F:E0:E6:22:66:68:0D:8F:03:50:29:27:E7:2E:F6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       773C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/y-GdTTCf4OYiZmgNjwNQKSfnLvY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:02:55 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131562
                          IP: 103.96.216.0/22
                          IP: 119.44.0.0/18
                          IP: 119.44.192.0/18
                          IP: 2401:7d40::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30524 (0x773c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:02:55 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=CBE19D4D309FE0E62266680D8F03502927E72EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:b6:9f:5d:6e:26:c2:c5:5a:a2:0a:50:40:
                    bf:5a:a3:ef:9e:93:93:69:6f:b6:f2:98:42:71:12:
                    8b:80:5c:2d:c6:6f:f1:37:e6:27:2d:9e:84:d3:11:
                    64:99:9b:b2:8a:03:b8:6a:e7:16:93:a7:7f:ed:28:
                    51:b0:18:c9:d5:18:75:9c:75:49:11:5e:75:41:f8:
                    1d:5e:93:8f:b9:b8:5c:52:52:de:f4:4e:e0:b5:4a:
                    c1:6b:a1:cb:b8:0e:da:19:71:3f:54:2b:1f:44:08:
                    a1:8c:b9:de:51:08:88:e0:c8:ab:d4:12:5e:0a:11:
                    52:a9:d7:2e:30:bb:e0:12:b4:b0:7e:08:7b:ad:5f:
                    f5:c3:83:57:79:da:90:60:34:fc:9b:1c:87:83:8b:
                    f0:d2:a9:42:2e:1c:2c:a5:8c:39:cd:ca:6b:d5:df:
                    a2:6c:01:d1:13:e4:6f:05:e3:91:9a:65:75:a6:d0:
                    0c:6b:30:a2:ad:00:86:62:0a:3a:64:be:c2:35:e5:
                    31:bc:3f:3d:58:ef:bb:8f:6d:70:83:fb:e1:8c:27:
                    2a:24:c6:b8:60:2e:9c:dd:9f:92:8d:a6:3a:6f:07:
                    ae:e1:bb:39:44:26:5d:51:f9:a0:2f:c6:c1:7b:7a:
                    6f:7f:df:39:73:75:d7:3d:3c:96:c2:9a:49:71:f0:
                    03:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E1:9D:4D:30:9F:E0:E6:22:66:68:0D:8F:03:50:29:27:E7:2E:F6
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/y-GdTTCf4OYiZmgNjwNQKSfnLvY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131562

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.216.0/22
                  119.44.0.0/18
                  119.44.192.0/18
                IPv6:
                  2401:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:83:41:72:39:7d:79:45:5e:88:ae:ae:3b:52:a1:27:ea:d0:
         47:76:19:6d:19:ab:01:9c:a0:4e:56:74:9c:ca:a5:bf:8e:68:
         b4:57:3a:07:ee:9a:3a:66:47:49:d9:6a:c6:cd:c4:30:41:c5:
         22:6d:87:56:49:63:f2:b7:9c:74:ea:85:ef:3e:75:6b:2e:e1:
         0e:b8:9e:9f:19:d7:e4:87:4d:1b:bd:06:96:a4:94:6e:33:33:
         22:fd:f4:00:36:1a:dc:27:b9:d5:ab:46:18:8d:9f:60:c5:5a:
         ee:b2:b9:c8:77:5c:bf:33:dd:d4:52:68:c7:b2:30:e3:79:b1:
         c6:82:34:95:ae:c2:b8:60:ec:67:85:40:32:11:a5:c2:73:ee:
         0f:ed:6c:74:3e:a4:20:b4:17:7f:8e:15:fd:24:f1:4c:54:6a:
         f0:00:76:c4:1a:ff:df:29:3c:89:d1:53:7c:a6:cf:8c:8c:ac:
         12:2d:ad:4c:58:0c:12:9c:0e:c6:16:78:62:43:a8:2c:0e:15:
         18:eb:dc:f2:53:18:cd:da:bc:74:11:88:0e:9d:a0:db:cf:7c:
         6f:4c:27:bb:55:1e:2c:88:41:3e:16:27:27:e9:ed:9e:f4:88:
         9d:a7:70:fb:89:2d:45:c0:16:86:b7:53:7f:2d:46:61:bf:a4:
         47:82:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----