Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/yron7TLaoiygRWk4hw7hjnhSang.cer
File:                     yron7TLaoiygRWk4hw7hjnhSang.cer (raw, json)
Hash identifier:          QZFETqlW6wOhQzYWQGlobCF62rP8HcKdZnTIADho/Gk=
Subject key identifier:   CA:BA:27:ED:32:DA:A2:2C:A0:45:69:38:87:0E:E1:8E:78:52:6A:78
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7776
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2555/yron7TLaoiygRWk4hw7hjnhSang.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2555/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:52 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    IP: 103.98.40.0/22
                          IP: 2403:5ec0::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30582 (0x7776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:52 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=CABA27ED32DAA22CA0456938870EE18E78526A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:82:0a:51:dc:63:84:a5:8b:f0:11:5e:3c:
                    24:61:5d:eb:e1:4b:4b:83:b3:6c:11:7d:f9:2c:dd:
                    56:a6:db:bc:19:8a:35:19:78:0c:d3:96:c8:39:6e:
                    3b:45:ad:8e:97:64:8c:2a:36:17:44:d4:cb:bc:e9:
                    0f:7d:5e:dd:fb:12:2e:01:f0:e0:42:f0:cb:54:85:
                    7c:da:43:07:33:1e:ef:14:cb:b6:ac:41:09:a9:c0:
                    4c:aa:75:0c:d4:91:6a:3d:91:5e:6b:4e:c6:e1:38:
                    8b:eb:5d:9c:7e:38:25:36:40:5a:7e:2d:06:22:c1:
                    27:75:b3:a2:a3:74:a0:f3:10:b6:80:1a:13:34:4f:
                    83:62:ef:f7:38:cd:95:0f:44:54:ac:f0:eb:e5:90:
                    ea:46:74:58:aa:c1:ad:af:3a:8d:5a:fd:44:9f:a2:
                    49:18:03:67:98:2c:0b:c8:a0:00:e2:79:cf:b6:1d:
                    3d:8c:b3:38:d9:b6:af:a8:dd:a9:40:88:91:d1:43:
                    59:6a:f7:d0:ab:f9:4f:40:2c:a8:0a:0b:23:25:d0:
                    57:81:5c:98:d0:b1:61:90:3b:2b:38:e2:28:af:c7:
                    94:46:0c:04:ac:6b:a0:9c:5d:bc:74:fc:1e:f6:75:
                    a7:61:f3:13:fa:2f:43:c5:b5:a0:aa:56:8b:db:83:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BA:27:ED:32:DA:A2:2C:A0:45:69:38:87:0E:E1:8E:78:52:6A:78
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2555/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2555/yron7TLaoiygRWk4hw7hjnhSang.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.40.0/22
                IPv6:
                  2403:5ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:f2:d2:b3:46:da:23:36:5d:41:19:72:b6:8a:78:d3:d3:0d:
         fd:22:ec:0b:1a:d2:9c:d9:bf:f2:bb:3f:ec:db:c7:17:31:50:
         c8:c4:47:fb:07:93:ab:44:cd:75:7f:18:56:d3:e0:b7:4b:b9:
         8b:c5:12:3a:c5:75:85:45:61:1b:f4:fb:ac:39:1a:63:6c:9c:
         48:c3:13:bb:d9:1e:47:56:17:dc:27:cd:b8:5f:e6:49:71:cf:
         26:ca:a4:97:54:b9:ea:86:95:ef:b0:73:d4:26:8c:ad:83:a4:
         d1:45:eb:0c:64:a4:a1:21:9b:ea:93:35:94:5d:ba:83:26:9c:
         0e:46:2b:95:64:b9:17:6e:7d:c3:d1:0f:53:a6:4b:c2:45:71:
         43:2b:0c:cf:06:7d:af:3e:a4:69:a7:eb:58:1f:66:df:6b:b4:
         7e:73:fc:d4:be:bc:d2:5a:65:01:fd:90:f6:15:ff:97:5d:40:
         6c:36:66:12:cd:04:da:1a:e8:de:dd:55:db:1c:eb:72:51:99:
         ad:df:a4:19:d0:af:6c:ac:db:b1:5b:b1:d8:c4:9a:5a:c2:d9:
         cc:3a:d6:3e:c1:8f:0e:98:9e:8c:23:25:1b:c0:84:06:d3:82:
         4f:05:e5:2c:e5:8f:92:e7:ff:17:a4:61:0f:14:c6:ee:60:7d:
         a5:d6:f2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----