Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zXCU6n-vRTkDaBtyTCAAEXoScSE.cer
File:                     zXCU6n-vRTkDaBtyTCAAEXoScSE.cer (raw, json)
Hash identifier:          kXwzUEVj9nMnreKYFuiXDaa37Gd7rbf4LVTH8hTBefo=
Subject key identifier:   CD:70:94:EA:7F:AF:45:39:03:68:1B:72:4C:20:00:11:7A:12:71:21
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7752
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zXCU6n-vRTkDaBtyTCAAEXoScSE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:03:19 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 24424
                          IP: 203.208.32.0/19
                          IP: 2401:3800::/32

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30546 (0x7752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:03:19 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=CD7094EA7FAF453903681B724C2000117A127121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:ed:d2:38:68:31:11:04:4c:90:bb:9d:ae:
                    11:ab:41:79:87:eb:d6:d8:a1:19:bf:a0:f5:15:16:
                    50:97:b2:bd:1b:47:9d:2f:42:04:a8:c7:fe:99:69:
                    58:cf:24:93:aa:ad:ea:b5:fc:05:04:82:8b:6b:de:
                    e8:0a:db:8f:20:35:0b:6e:88:d2:50:c5:13:61:58:
                    32:d2:db:1d:66:f4:de:e1:ea:74:85:af:2d:4c:2d:
                    fa:c3:00:e0:87:a8:aa:18:ca:94:d9:65:b6:08:d4:
                    d3:7f:a9:b5:44:7c:08:11:27:6c:cc:6e:8b:d2:7b:
                    7e:dc:c2:07:85:00:82:71:0b:a5:c8:70:87:f4:57:
                    88:ca:8b:6e:37:2e:4f:eb:bc:6d:be:e0:2b:52:27:
                    f8:c5:df:a3:6e:44:10:0c:5c:4d:19:b0:03:10:b4:
                    92:aa:e9:b6:46:db:a6:3d:9f:11:42:a5:17:58:2c:
                    b5:6c:d9:70:bf:cb:b3:d8:a5:30:05:31:57:28:f8:
                    30:a9:33:fa:29:18:4b:f5:dd:ff:b6:7b:93:b3:4c:
                    1f:f0:83:c5:53:12:af:45:0c:ba:de:18:1b:b9:dc:
                    aa:2d:a3:b0:56:59:6c:1e:b9:ea:13:c3:50:e2:d0:
                    fa:af:74:79:ad:30:f6:95:54:d9:f0:68:7e:e6:c1:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:94:EA:7F:AF:45:39:03:68:1B:72:4C:20:00:11:7A:12:71:21
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zXCU6n-vRTkDaBtyTCAAEXoScSE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24424

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.32.0/19
                IPv6:
                  2401:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:6d:35:9e:56:ec:96:57:9b:16:bf:9e:4e:64:c4:8f:59:
         25:d5:c7:c5:44:55:a6:12:d5:32:de:a6:72:a0:75:35:3d:f8:
         d5:9e:73:34:95:d8:aa:71:46:6f:b9:41:d8:63:a2:4c:c1:b3:
         89:4a:91:04:f3:b5:f1:58:43:49:b6:b6:f0:ca:63:9e:0f:a8:
         00:97:6d:ed:fb:6f:7b:6d:f4:38:b0:6f:75:37:e2:2a:14:ff:
         ee:7c:b2:d6:8b:98:69:db:c0:a3:b5:60:b6:ca:62:19:9e:d5:
         49:b3:b9:24:a7:bd:0f:82:50:3d:3f:ff:c9:65:dc:14:29:f8:
         de:4a:cd:7a:3a:30:b5:03:f6:33:c5:88:98:e6:f8:d0:0f:d2:
         01:00:ee:34:dc:7c:2b:35:56:ec:cb:ac:58:a3:f8:06:39:db:
         1c:a4:da:f6:9c:b1:e8:fe:6c:39:31:f4:eb:fb:e4:82:57:ff:
         c6:cd:5f:f0:45:5e:5e:37:ec:83:0b:a8:88:3a:41:28:76:93:
         67:5e:a8:06:fc:ee:d7:c0:6d:c8:9e:1d:c3:39:3c:75:4a:9a:
         9e:3b:d1:b7:56:f9:24:c9:58:37:6a:98:cf:fc:a0:4e:45:a0:
         f2:08:a2:fe:08:7e:7d:a9:81:ec:55:a7:44:0b:e1:7e:6c:80:
         b5:1d:9c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----