RPKI Certificate
Location:                 ./rsync/rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer (download)

Subject key identifier:   3E:88:7E:85:68:14:83:31:41:F8:D0:F6:64:AC:AF:6C:4A:30:5D:43
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Manifest:                 rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
CA Repository:            rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 328242
    1: IP: 102.23.168.0/21
    2: IP: 154.115.156.0/22
    3: IP: 2c0f:f1f0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5982 (0x175e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:07:50 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=F36F18B8AF/serialNumber=3E887E856814833141F8D0F664ACAF6C4A305D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:1e:e4:6f:9e:3d:d3:fc:d0:a7:33:32:77:74:
                    08:2b:8d:ea:21:a1:15:ee:85:a2:9d:ef:db:a3:64:
                    1d:ee:c3:3b:e6:c0:cd:1d:ff:65:75:45:84:a4:27:
                    d5:a1:c6:cf:b1:9b:95:6d:77:12:63:7e:ec:da:02:
                    9a:43:ef:2a:b2:9c:d1:f2:6b:e3:b4:24:8b:6e:c0:
                    59:cf:e6:5d:be:76:62:23:1e:21:e5:c3:f8:45:90:
                    17:93:6e:ca:e8:bf:6e:48:c0:b9:86:17:75:72:a8:
                    5c:aa:d0:e6:b6:0f:a7:28:2b:9c:57:89:b8:50:cb:
                    ed:d2:9c:3d:39:3e:7b:e7:c8:ba:2a:38:f9:a2:d5:
                    a3:b1:5e:a7:b4:23:4d:49:cc:0d:41:95:8e:19:ea:
                    75:90:a5:06:28:40:a9:23:bf:3c:38:75:f9:9f:0a:
                    0b:63:f5:c4:ae:f3:ef:c9:cd:db:cc:f0:4b:c9:c5:
                    80:47:23:ea:b4:06:04:ff:ea:30:b8:0a:6c:cc:bc:
                    37:a7:55:0f:a1:c1:5b:85:0c:d8:af:7e:43:0e:38:
                    f0:9e:c0:a7:a2:df:9b:a8:06:1d:d1:76:cd:7c:ae:
                    4b:5a:58:fb:12:55:65:86:c4:0d:5c:7d:da:f3:86:
                    6b:46:88:19:6d:d8:c8:d3:de:42:23:01:ed:4e:2f:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3E:88:7E:85:68:14:83:31:41:F8:D0:F6:64:AC:AF:6C:4A:30:5D:43
            X509v3 Authority Key Identifier: 
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328242

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.168.0/21
                  154.115.156.0/22
                IPv6:
                  2c0f:f1f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:dd:a6:fe:56:66:32:89:5d:95:b1:d1:71:1e:94:ab:b8:ac:
         48:07:4c:f6:80:ae:e1:b6:1c:a7:02:e2:30:5c:14:31:0f:e4:
         64:1c:6f:b6:21:ec:70:7f:5e:49:6d:19:db:03:b5:90:11:ad:
         ac:fb:7c:8e:e2:1e:58:7a:ac:b6:cf:9b:67:47:54:55:5d:24:
         69:a2:c7:98:ec:47:74:d2:36:3c:28:bb:e1:42:72:f8:6e:1d:
         e2:c6:0d:d2:77:a3:e7:2c:9f:22:24:fd:7e:67:af:be:6c:62:
         2d:0f:da:7c:70:1f:54:f7:0f:b1:76:6b:51:a3:d0:fc:2e:6c:
         d5:60:64:e8:44:75:b7:d8:0e:5c:a3:b0:64:6b:eb:65:b9:9b:
         53:b4:f6:a7:f2:46:af:3e:ca:50:6c:f4:9e:d6:18:51:45:25:
         1f:07:b8:5c:72:78:cf:b9:89:d6:e2:45:b5:73:24:bc:cd:32:
         3f:55:c2:83:d2:6b:eb:d2:8c:63:f4:e7:2c:59:51:70:4b:4f:
         64:db:c0:30:bc:99:7a:da:3f:e0:da:55:5a:a1:14:78:87:81:
         cc:e9:df:a0:19:21:33:0e:95:db:df:10:b3:76:0d:54:aa:04:
         44:67:32:cf:dd:29:70:6c:f4:e4:98:27:fd:80:cd:1b:29:6b:
         43:29:ca:d1
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICF14wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yMjAxMDEwMTA3NTBaFw0yMzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMMCkYzNkYxOEI4QUYxMTAvBgNVBAUTKDNFODg3RTg1NjgxNDgzMzE0MUY4RDBG
NjY0QUNBRjZDNEEzMDVENDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD+HuRvnj3T/NCnMzJ3dAgrjeohoRXuhaKd79ujZB3uwzvmwM0d/2V1RYSkJ9Wh
xs+xm5VtdxJjfuzaAppD7yqynNHya+O0JItuwFnP5l2+dmIjHiHlw/hFkBeTbsro
v25IwLmGF3VyqFyq0Oa2D6coK5xXibhQy+3SnD05PnvnyLoqOPmi1aOxXqe0I01J
zA1BlY4Z6nWQpQYoQKkjvzw4dfmfCgtj9cSu8+/JzdvM8EvJxYBHI+q0BgT/6jC4
CmzMvDenVQ+hwVuFDNivfkMOOPCewKei35uoBh3Rds18rktaWPsSVWWGxA1cfdrz
hmtGiBlt2MjT3kIjAe1OLwmtAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUPoh+hWgU
gzFB+ND2ZKyvbEowXUMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGMThCOC9FMjFCRjM1NDQ5ODQx
MUVBQUM0MkFBNTJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjE4QjgvRTIxQkYzNTQ0OTg0MTFFQUFDNDJBQTUyRjhBRUEyMjgvUG9oLWhX
Z1VnekZCLU5EMlpLeXZiRW93WFVNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAjIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBANmF6gDBAKac5wwDQQC
AAIwBwMFACwP8fAwDQYJKoZIhvcNAQELBQADggEBAMHdpv5WZjKJXZWx0XEelKu4
rEgHTPaAruG2HKcC4jBcFDEP5GQcb7Yh7HB/XkltGdsDtZARraz7fI7iHlh6rLbP
m2dHVFVdJGmix5jsR3TSNjwou+FCcvhuHeLGDdJ3o+csnyIk/X5nr75sYi0P2nxw
H1T3D7F2a1Gj0PwubNVgZOhEdbfYDlyjsGRr62W5m1O09qfyRq8+ylBs9J7WGFFF
JR8HuFxyeM+5idbiRbVzJLzNMj9VwoPSa+vSjGP05yxZUXBLT2TbwDC8mXraP+Da
VVqhFHiHgczp36AZITMOldvfELN2DVSqBERnMs/dKXBs9OSYJ/2AzRspa0MpytE=
-----END CERTIFICATE-----

Generated at Sat Jan 1 03:21:59 2022 by LibreSSL & rpki-client.