Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zSfbH1Sku1l1NhsRfLG6liayfGc.cer
File:                     zSfbH1Sku1l1NhsRfLG6liayfGc.cer (raw, json)
Hash identifier:          ctCzA7pSY0KE27uGqxDMcy/K4MW+Vp3gO6kaf4BxLCY=
Subject key identifier:   CD:27:DB:1F:54:A4:BB:59:75:36:1B:11:7C:B1:BA:96:26:B2:7C:67
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7C5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/zSfbH1Sku1l1NhsRfLG6liayfGc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 12 Nov 2021 20:15:36 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 63629
                          IP: 103.75.152.0/22
                          IP: 2407:5380::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31836 (0x7c5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 12 20:15:36 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=CD27DB1F54A4BB5975361B117CB1BA9626B27C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:39:3b:8f:80:50:c1:a1:e5:cb:92:eb:b5:
                    8e:42:dd:04:56:b8:94:36:98:6a:2f:2d:b0:11:bf:
                    7f:26:a0:38:58:4e:23:2e:7e:c6:55:aa:19:85:72:
                    3f:65:3f:33:5b:f6:10:2f:3c:20:ab:18:9d:96:39:
                    e8:90:5e:85:55:4c:b5:ae:8b:93:73:5f:56:75:0d:
                    ba:2e:85:ef:9e:cd:07:b1:7a:d4:b1:c6:9d:00:2d:
                    8e:b8:d6:99:f0:9d:c6:68:75:29:c4:47:e9:ef:6b:
                    26:b8:8d:6c:cf:3a:33:54:ab:76:90:b9:4f:46:03:
                    95:2b:de:c1:1c:b5:aa:75:82:39:95:20:e3:29:f8:
                    d3:a6:90:54:5d:94:6e:f4:40:7c:c7:ce:c8:ce:dc:
                    4e:84:c4:f3:23:4a:06:1c:b6:a7:c2:ff:24:9a:98:
                    e0:d1:75:67:b6:cc:ab:ed:cd:62:0c:20:5a:7f:35:
                    31:3d:98:1f:04:b6:e8:d0:d8:d6:3d:6b:fe:81:99:
                    98:a5:80:06:69:0e:bc:db:c3:97:df:c4:68:f5:41:
                    a0:dc:02:02:f5:c3:33:97:80:d9:74:0a:71:c0:e1:
                    8c:c1:bf:97:b5:91:f4:f8:ff:bd:68:25:e2:02:62:
                    9b:0b:8b:9d:9f:c0:ac:e1:ba:82:24:ae:98:41:4d:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:27:DB:1F:54:A4:BB:59:75:36:1B:11:7C:B1:BA:96:26:B2:7C:67
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/zSfbH1Sku1l1NhsRfLG6liayfGc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63629

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.152.0/22
                IPv6:
                  2407:5380::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:7d:b8:d4:ea:a9:84:01:ef:34:0c:1b:b2:b1:4b:b6:ca:82:
         02:b2:93:eb:79:b8:00:3c:84:43:72:f5:30:1f:f1:db:42:a4:
         00:6d:3d:3f:66:16:e5:7f:a1:0f:02:ca:ba:26:c6:c6:7d:99:
         30:05:ab:0e:7d:bf:4e:4a:b4:73:05:8b:3c:3c:94:66:1d:21:
         ab:a1:d4:bf:e2:f9:dd:e8:bf:b8:bc:ee:57:56:da:8c:6b:30:
         4d:64:71:e5:b6:7b:e1:54:80:98:10:51:0b:0e:ff:4f:70:b4:
         f4:48:4d:b5:be:54:b2:27:aa:0d:6e:0c:46:79:cc:dd:10:1b:
         4f:25:cd:95:eb:53:8f:f1:15:ac:01:ad:b2:4a:5a:14:9a:5d:
         15:04:15:6b:7b:de:f3:8f:24:37:ec:23:de:9c:88:a9:76:48:
         b9:14:c2:bb:2c:b4:43:7d:b5:fc:a8:3b:a6:bc:32:a1:09:bd:
         e9:33:0d:91:c3:71:de:2d:8f:1e:c3:2e:e9:dc:a6:35:44:44:
         a4:46:77:59:ec:c0:6d:55:e6:8b:13:37:7c:aa:bb:c9:dd:32:
         3b:fc:a4:6b:46:68:f1:15:7d:06:b5:6d:75:7f:3c:ac:3c:4d:
         5e:a8:c1:18:35:1d:84:47:0e:f3:86:37:22:57:4a:43:f7:ce:
         07:43:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----