RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer (download)

Subject key identifier:   27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
CA Repository:            rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-30T00:00:00Z
    Resources:
    1: IP: 91.109.216.0/24
    2: IP: 91.109.218.0/24

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14043 (0x36db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Oct 30 13:23:18 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:3f:2a:39:37:28:05:68:32:f6:62:3c:20:
                    58:cc:dc:e9:a9:d8:da:70:a7:19:a2:4f:b7:7e:49:
                    a6:21:2f:a4:34:c6:96:11:09:7c:1b:86:c6:8d:72:
                    75:63:93:1d:3a:84:e9:da:6a:10:f4:aa:9d:84:e2:
                    b2:fd:92:d3:b2:57:15:10:14:c9:f3:4a:64:d2:b9:
                    93:f2:52:6d:c8:38:fd:ff:41:12:de:71:06:48:18:
                    31:98:3d:bd:37:70:f8:a8:ab:73:dc:e8:33:1a:41:
                    82:e1:13:b2:58:1b:96:98:e8:58:19:eb:91:21:0b:
                    c2:c6:60:68:05:50:19:87:38:b7:c8:99:fa:11:26:
                    f0:62:60:50:3d:54:4a:00:48:58:5a:6e:eb:5d:5f:
                    98:78:40:d3:c7:a4:ee:f2:63:4e:67:ae:7d:64:36:
                    09:95:5e:8c:8f:89:f1:d9:88:b1:80:29:d7:69:14:
                    8f:b3:ef:5c:5e:6f:a1:4e:0b:90:90:28:7b:48:89:
                    5c:08:fd:e9:cd:1f:82:22:85:1f:d0:ef:14:aa:be:
                    7f:7b:21:f5:63:72:38:6c:e6:d3:ef:65:42:9e:c3:
                    d0:6e:60:11:e6:91:4e:23:9f:51:84:83:d8:8d:6a:
                    d0:7f:5f:5f:7e:28:9b:4e:48:0f:c3:a1:1e:9b:d3:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.109.216.0/24
                  91.109.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:29:36:5b:67:c8:5c:fa:e5:fe:3f:d5:62:d3:96:ba:4a:0f:
         c7:7c:bb:ef:5b:97:0d:e6:1e:66:e8:e9:68:1c:75:de:b2:a5:
         1c:8d:22:8b:22:3b:5b:81:60:c1:c1:f4:ac:b7:92:7f:d0:88:
         47:98:92:b5:f4:56:a4:7d:67:cc:fc:24:36:4e:a6:24:e9:a8:
         0a:d5:96:be:cb:2c:ea:b2:aa:e0:33:3e:74:cf:ba:cb:62:87:
         a2:82:04:2e:ee:48:22:0f:84:be:ac:ad:bb:6b:8f:de:5f:a3:
         29:d0:bb:b4:d8:de:dc:ee:a1:87:d8:a3:fd:8c:a6:ce:f1:bc:
         95:01:4c:3c:c8:5f:33:0d:c6:f1:dc:1d:5b:d3:d8:c8:1f:2e:
         df:c4:de:55:e1:9c:8a:57:54:0f:41:3a:97:f0:f9:3c:81:44:
         b2:0b:89:47:5c:e7:f8:f9:4e:36:c7:06:83:aa:7e:0f:e1:71:
         53:fc:e2:b6:e8:b9:f3:de:39:a2:bb:f9:b0:60:72:ab:9f:bb:
         d3:23:65:b4:a7:3d:f1:e7:a9:fe:c4:92:08:11:36:a6:33:95:
         73:22:a2:71:f6:00:44:a1:5d:18:3e:c1:69:b6:40:ee:82:07:
         3f:3c:66:80:90:82:bf:e2:98:23:88:b0:a8:a0:32:34:47:5f:
         51:57:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Oct 30 14:53:47 2021 by LibreSSL & rpki-client.