RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer (download)

Subject key identifier:   F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft
CA Repository:            rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 137071
    1: IP: 103.83.124.0/24
    2: IP: 103.166.145.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76348 (0x12a3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 20 03:19:41 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A91A38BD/serialNumber=F8B1969E7A20980F88EB10856F9A2A5A1913DD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:eb:c3:9d:9a:d5:f3:78:9e:62:49:68:75:
                    65:62:1d:8c:12:2d:b7:7b:55:93:1a:1b:6e:84:56:
                    97:88:78:21:9d:b4:58:78:ea:ae:e8:79:85:98:30:
                    e1:97:4c:74:38:e1:e2:28:ff:c3:7e:1d:31:82:25:
                    74:91:5f:62:5b:4f:f6:48:b5:ac:b6:b7:5c:58:b7:
                    36:50:99:b3:f1:2c:d6:16:d9:a6:cc:c0:57:c1:37:
                    f0:d6:20:13:8b:6a:b7:34:c1:d8:30:fd:e9:02:4f:
                    dd:79:c9:37:5e:a1:96:3b:9d:c5:c9:2e:22:7b:e4:
                    5a:1b:de:89:f0:37:2c:a2:9d:84:f1:dd:a5:54:07:
                    c4:16:71:44:ec:e4:37:42:76:3f:df:83:c9:69:81:
                    de:c6:46:ca:54:a1:df:c9:f5:81:0c:cf:57:c9:50:
                    7f:ea:ce:3d:0c:cb:1e:c3:ae:61:d7:d8:5a:2f:a4:
                    a6:a4:0c:e2:f8:9d:8b:d3:5e:9e:1b:1d:d7:b5:50:
                    e2:3c:94:ab:e5:d8:9b:5f:6f:bd:6d:36:cf:7f:99:
                    ea:cb:87:21:62:90:53:79:38:fb:b2:32:d0:44:8b:
                    0c:05:98:c3:fd:cf:dc:13:18:c8:e2:a8:be:2b:43:
                    e2:61:f7:4e:d8:bf:ef:f2:7d:61:82:bf:e6:10:5f:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137071

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.124.0/24
                  103.166.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:2c:0e:c2:e8:00:7f:45:81:7e:a1:59:67:a3:fa:19:2b:
         94:33:42:e0:36:83:9a:c5:a6:e9:28:08:1c:69:57:c4:5e:50:
         e6:94:17:ed:19:8b:e9:7f:df:1f:51:f3:96:8f:8d:b1:07:db:
         23:e5:12:69:dd:8a:05:02:44:11:42:7f:ff:2a:d9:7d:99:0d:
         21:9d:95:e2:31:45:6e:3b:15:c0:0f:51:71:8c:0a:60:be:86:
         ea:72:b5:cd:33:8f:c3:7b:8f:ff:f7:35:4b:0d:f1:6b:b2:fa:
         43:6d:14:dd:bc:1a:43:27:eb:10:a9:4a:b8:93:44:15:2b:4c:
         13:90:b5:c9:60:c5:49:8d:8e:53:85:f6:f0:cb:21:4a:3d:4a:
         10:e3:f5:a4:88:4c:fd:64:3f:fe:16:15:a2:08:20:67:a4:c2:
         84:6b:90:36:48:d1:80:c7:c1:86:08:d9:9d:fb:5e:0f:79:77:
         72:71:5c:c3:d2:e8:af:2c:64:d2:ff:ff:20:66:aa:4b:ed:46:
         3d:b4:41:04:0e:4c:6e:23:c1:11:ac:8d:4d:49:ca:37:55:66:
         c7:e3:6c:d0:a4:17:1a:56:7b:ef:3a:3c:ab:78:48:79:91:c4:
         5d:95:43:b6:c9:07:4f:48:0a:4e:ad:14:09:47:1e:c3:04:37:
         53:43:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:11 2021 by LibreSSL & rpki-client.