RPKI Certificate
Location: rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yEQAA-l2LTXdeNTUHfUk5_1J1o8.cer (download)

Subject key identifier:   C8:44:00:03:E9:76:2D:35:DD:78:D4:D4:1D:F5:24:E7:FD:49:D6:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 nostromo.heficed.net/repo/1123986/0/C8440003E9762D35DD78D4D41DF524E7FD49D68F.mft
Subordinate resources:
    1: IP: 103.141.68.0/23
    2: IP: 2405:9240::/32

--
$ openssl x509 -text -inform DER -in rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yEQAA-l2LTXdeNTUHfUk5_1J1o8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59184 (0xe730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 28 01:01:49 2020 GMT
            Not After : Oct 31 00:00:00 2021 GMT
        Subject: CN=A91857810000/serialNumber=C8440003E9762D35DD78D4D41DF524E7FD49D68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:57:b3:b1:c0:b1:8f:62:1e:e4:dd:35:a0:4e:
                    48:ed:0c:60:de:05:e8:0f:39:e4:47:dd:d0:93:72:
                    3b:75:5b:a7:e1:c5:31:d3:31:39:3f:84:e9:97:93:
                    d7:70:be:3f:3f:20:aa:0c:5b:25:b2:95:d7:f9:4b:
                    df:66:79:25:bf:0e:ce:11:c8:89:d2:4c:b7:c6:58:
                    60:88:c3:48:a1:6f:79:72:10:a5:6f:8a:b0:45:8d:
                    85:91:2d:f9:24:2e:73:b8:e6:0e:52:1d:5e:b9:9e:
                    16:fd:bf:a7:2c:74:f8:89:06:06:b7:ac:9d:01:ce:
                    07:82:34:fc:a7:da:a2:24:87:80:4c:3b:7f:b4:02:
                    60:30:22:07:fd:b8:a8:6d:a2:66:29:b6:5f:09:49:
                    79:15:43:2b:ea:cf:25:f9:29:6d:2a:6b:b8:da:e1:
                    3b:ad:9c:54:95:e8:3c:d6:91:0a:21:46:09:db:19:
                    dc:6b:e8:15:fd:e2:18:0e:16:84:57:a5:58:8b:de:
                    36:2e:eb:01:f5:40:99:9f:7c:ca:b5:45:6b:2a:f0:
                    c1:e4:3b:69:f7:34:c6:a2:69:61:da:72:21:e6:1b:
                    61:12:e8:93:07:12:71:80:1b:41:80:50:99:31:d9:
                    9f:d4:59:05:61:22:06:d9:0c:1d:a5:02:63:e6:a1:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123986/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1123986/0/C8440003E9762D35DD78D4D41DF524E7FD49D68F.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                0.0.....0....g.D0
....0....$..@
    Signature Algorithm: sha256WithRSAEncryption
         59:e0:5a:09:aa:e2:fc:82:79:fe:68:6c:c8:50:22:72:46:41:
         2f:46:ff:c7:16:af:81:44:22:14:f9:07:b0:6a:4e:d1:80:a9:
         fd:76:58:4c:8d:b7:3a:36:b2:15:d7:29:61:2e:cf:96:bc:ba:
         81:eb:81:c5:fb:ef:ca:39:f2:25:2b:67:85:5a:a2:8a:19:a1:
         0f:10:7c:c3:0b:6c:b0:1d:50:9c:5c:b0:54:54:8e:68:5e:46:
         4b:0d:71:e9:13:41:ba:61:64:08:44:cb:89:bc:05:48:c3:34:
         b5:19:74:04:3b:42:37:ec:82:a7:0f:d5:ed:87:1e:13:f7:a7:
         88:b6:bd:74:11:9a:cd:4f:d9:57:62:4e:86:81:de:22:24:aa:
         e0:0b:9a:56:57:8b:9e:bc:0f:33:80:59:40:3c:56:5e:b9:17:
         5d:77:c6:00:34:4d:a7:cf:ef:a2:27:89:57:1e:92:8f:fe:49:
         39:3e:3c:44:42:ef:e5:46:26:6b:c8:06:9a:97:8a:bb:c2:bf:
         c2:20:af:60:58:27:55:34:3c:b7:d2:7d:ef:7f:16:fb:68:a2:
         83:e5:fc:cc:1b:43:ca:8f:bb:a6:8f:c5:89:54:d2:97:6f:a3:
         f3:aa:00:25:ba:86:0e:a3:91:23:93:9d:ec:53:41:65:39:09:
         6e:f2:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 03:31:59 2021 by LibreSSL & rpki-client.