RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer (download)

Subject key identifier:   FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
CA Repository:            rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 142565
    1: IP: 103.169.66.0/23
    2: IP: 2407:9c40::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73249 (0x11e21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 13 16:37:07 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0e:80:72:fd:1e:61:11:96:0b:05:dd:85:f0:
                    26:cd:66:04:9f:f0:1a:fc:7e:43:15:c1:e7:2d:c5:
                    65:26:9d:be:ad:96:cb:1e:db:34:18:43:13:27:74:
                    6d:1c:06:41:b0:b1:75:14:e3:4a:75:e5:f6:fa:f8:
                    35:06:10:96:5b:b9:06:9b:3f:ab:d8:f2:02:4e:dd:
                    30:47:c8:76:3e:59:6a:27:c1:06:03:31:a7:d8:bb:
                    0c:e8:fd:9c:54:0b:c7:7a:9b:14:c3:14:51:94:23:
                    fc:55:f5:05:dd:66:78:c4:ef:ef:22:2c:75:7e:00:
                    d5:a4:d0:27:07:12:a5:aa:08:51:a1:40:17:2d:a4:
                    15:b7:3a:d8:9e:6b:60:c3:d2:33:e7:25:e4:1d:45:
                    4e:62:32:cc:ba:01:75:24:94:6f:33:20:bb:7f:98:
                    76:a4:49:ce:5b:1a:f1:fd:f6:81:3f:7a:ea:88:9c:
                    12:a2:f5:75:b0:f9:de:fe:00:41:e9:5e:c5:e0:55:
                    26:8c:c6:81:4d:4a:57:1f:3b:5c:0c:81:3d:67:82:
                    36:cd:0b:e8:33:47:9c:0f:2d:3a:42:1c:8f:86:dd:
                    50:2c:76:7c:77:04:31:e5:00:cf:9f:6f:4a:c3:e9:
                    27:3a:f3:f7:18:2a:37:ca:ff:23:fb:3b:05:d1:2f:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142565

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.66.0/23
                IPv6:
                  2407:9c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:a2:0d:19:58:e8:30:0b:af:75:41:ad:52:31:b4:f5:f6:f0:
         9d:c8:a7:cc:84:0e:19:69:37:5f:a8:c9:00:4b:3f:f9:1e:7e:
         fc:79:fc:71:79:39:4b:f5:97:e1:b4:7e:6c:ca:0b:c2:d3:c4:
         1b:8b:73:d7:b6:db:ef:a4:5d:de:cc:aa:5f:4f:53:45:35:20:
         8e:9d:49:96:1d:6a:65:74:38:b8:c7:a6:9e:11:c7:89:0e:27:
         b7:14:08:5c:0c:36:8d:b0:f0:65:91:90:94:c6:28:b0:aa:66:
         94:da:89:52:0c:0d:12:e0:cf:5a:e2:13:e8:28:7e:3b:9c:dd:
         81:af:88:49:f7:40:b9:c3:81:94:49:60:fd:3e:dd:c3:3b:5d:
         96:62:a5:73:b4:ab:b4:12:ce:1a:69:72:95:1e:9a:a0:f4:17:
         b3:26:f9:8c:13:92:b7:80:52:aa:9a:b9:bc:88:18:18:06:21:
         a0:c3:6a:dd:b2:6d:e0:7b:4c:c1:0e:67:db:da:b9:5b:d7:7f:
         34:0f:dc:b4:35:29:c8:80:25:48:36:51:9a:a5:0c:80:a7:2f:
         6a:27:a6:fa:eb:97:f9:39:bd:a5:28:06:e2:61:9b:6b:ed:81:
         1a:8f:4c:26:66:9a:e6:63:09:fb:d4:06:f3:37:34:33:e5:3e:
         1c:14:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:14 2021 by LibreSSL & rpki-client.