RPKI Certificate
Location:                 rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer (download)

Subject key identifier:   3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Manifest:                 repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft
CA Repository:            repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.236.188.0/22

--
$ openssl x509 -text -inform DER -in rsync/repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:79:a2:a5:e9:31:27:c6:97:88:7f:f4:03:1f:c4:46:77:73:5b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 25 07:43:24 2020 GMT
            Not After : Nov 25 07:48:24 2021 GMT
        Subject: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:67:0d:94:16:dc:05:ee:71:e5:4c:b4:72:1d:
                    a0:d7:11:ee:df:fa:ef:7c:87:1e:d6:0a:1d:c7:de:
                    8a:6b:2c:37:6b:f5:4b:6d:a7:c8:fc:23:4c:c3:d6:
                    a4:97:bb:cb:2d:c7:dd:f7:9b:c3:43:40:65:fc:2c:
                    c4:8f:88:d1:01:1b:36:6c:77:10:c7:96:36:90:b5:
                    a5:ec:87:99:52:0a:47:42:39:49:b8:f2:0a:50:c8:
                    fd:1b:a3:2d:93:bc:29:1b:c5:24:bb:e3:ab:1c:a8:
                    0f:0a:fe:f6:e3:86:17:d1:67:af:8c:d1:8c:e1:2e:
                    af:93:b3:bc:b7:36:9d:d7:40:34:59:be:eb:19:20:
                    49:b5:3a:60:0b:e0:26:3d:25:63:b9:4d:ac:69:3d:
                    50:4e:bd:0c:93:2b:b9:ed:8d:94:5a:30:00:b4:75:
                    20:f5:3c:7c:99:04:80:03:1b:5c:6c:f3:cb:46:6e:
                    28:84:83:48:04:02:85:e4:ae:00:d0:c1:a6:26:ca:
                    7e:23:ca:75:09:3f:88:49:de:9b:b0:92:fd:2d:92:
                    dc:da:dd:48:30:03:d1:b4:8a:f3:a0:44:7a:4a:79:
                    af:2c:9f:af:e6:13:f1:13:3a:cb:11:3d:75:5a:5f:
                    0f:73:5d:d1:f9:42:24:b5:bc:c8:b7:ee:f5:ee:94:
                    49:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2
            X509v3 Authority Key Identifier: 
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....g..
    Signature Algorithm: sha256WithRSAEncryption
         88:8f:5d:35:4f:19:fa:39:4f:7a:e5:d4:59:c7:86:d0:03:64:
         63:fb:c9:30:57:57:84:af:f7:97:e9:6e:97:a2:d6:fa:9c:e8:
         7d:97:6b:02:af:c4:22:39:c9:c7:7f:e8:bf:86:2b:1d:9f:ca:
         45:94:50:68:db:26:76:28:3f:74:e6:44:c9:94:d9:bb:53:49:
         05:04:20:39:83:96:8b:f5:69:0c:e6:5e:7e:54:cf:8b:82:8f:
         92:f1:b6:7e:46:e9:c9:9e:c4:c6:13:3e:ec:50:41:db:04:9c:
         bd:c7:d6:6d:c6:f5:a6:3f:ce:99:08:aa:3d:ec:ee:ca:e7:a7:
         20:08:b6:9d:c9:bb:12:55:e1:b6:59:ca:8f:2b:f3:24:e1:6e:
         d0:b3:68:61:fe:ed:5a:ed:7a:c4:fc:05:72:00:46:74:1e:7e:
         8e:d1:81:1b:9a:8b:32:20:13:df:87:2e:2e:a2:1f:02:02:e7:
         9d:55:4f:4d:80:79:b4:1c:48:3d:41:7c:92:9e:b4:f8:56:91:
         fc:ff:0e:25:78:f3:ed:cf:3a:6d:fb:21:1c:99:96:b6:e9:62:
         65:51:bd:3e:a9:d5:6d:88:da:fc:5b:cb:d2:e1:5a:b3:a4:d5:
         5b:b1:b0:89:1b:fb:31:11:c1:63:74:4c:62:8c:5c:57:af:88:
         0d:8a:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jul 27 12:29:06 2021 by LibreSSL & rpki-client.