RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer (download)

Subject key identifier:   D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
CA Repository:            rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 136428
    1: IP: 103.172.14.0/23
    2: IP: 2001:df7:5b80::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75065 (0x12539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 21 07:54:59 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:e2:64:26:03:32:47:fc:05:2c:d4:9a:05:
                    7d:d3:aa:28:30:98:f5:26:ab:00:27:86:c8:82:b7:
                    74:b0:8c:a8:5e:2d:3e:fe:f8:70:5e:ba:b7:dc:6f:
                    76:bc:59:7b:63:fc:42:8f:f7:a8:ef:d3:96:e7:3f:
                    a7:8d:4f:cd:56:2a:99:44:c0:d2:4a:78:d3:1e:49:
                    63:64:b1:8d:62:4a:ca:db:b3:0e:ac:0e:9b:26:19:
                    6d:ee:08:e6:57:ab:c7:cb:3e:b1:2c:4c:ee:ea:ad:
                    c8:52:9d:c5:3a:91:93:31:ca:c6:8e:bf:0c:37:53:
                    f8:7b:0a:7c:ea:60:f1:dd:1e:35:44:95:b9:c4:83:
                    e4:93:50:ec:0d:95:a4:52:d3:ad:ca:0b:b9:4d:38:
                    8a:52:89:f0:81:0d:42:48:ce:fb:5f:07:0e:c4:8b:
                    39:9e:39:6e:54:cb:12:84:0b:81:40:86:18:b8:b4:
                    05:24:7e:f0:6a:de:aa:19:a9:f2:0f:c5:4d:6f:cd:
                    c0:07:38:da:be:5d:e2:52:98:94:d1:2f:3b:e7:71:
                    32:76:a7:c6:7d:f0:9e:4a:fe:6d:9c:f7:b4:86:7b:
                    2b:93:3a:a0:21:94:c9:be:ec:3a:b3:a2:b0:ff:38:
                    6c:8c:b2:3e:96:a5:97:9a:e7:2c:c3:f2:4f:95:b5:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136428

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.14.0/23
                IPv6:
                  2001:df7:5b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:3b:bc:33:a7:5f:92:f7:60:39:a8:6c:94:60:b4:11:a0:
         c0:ac:a7:f4:db:5b:2c:b4:9b:11:9f:20:6c:48:61:fc:e5:d2:
         8d:35:e6:14:d1:c6:22:b9:f5:27:b9:62:5a:fb:42:3f:77:5b:
         62:1b:f3:d1:5c:4e:1b:f0:55:5e:fb:46:c8:ba:ad:ba:e3:29:
         6f:bd:93:50:59:d7:8d:f1:78:87:7f:5d:d7:d7:bd:3b:4d:7e:
         e7:c0:d3:c9:f4:36:bb:fe:bc:dc:26:c2:38:eb:56:98:61:81:
         ed:5b:f3:06:3c:8d:de:e4:c3:ee:10:d0:c1:7e:cf:ef:48:16:
         50:42:c3:33:78:7a:7d:d7:b4:76:78:df:99:7d:9d:5b:4a:99:
         ef:3a:90:45:24:57:9e:26:93:97:53:df:85:7b:db:c5:f3:e3:
         3e:a4:4f:55:a3:4b:38:75:00:2e:33:ca:fb:52:a1:4a:8a:7e:
         c5:aa:1d:ab:a5:a9:9c:bf:99:7a:9d:6d:17:63:77:bd:d3:1d:
         28:49:ce:a6:e2:e2:65:3a:6c:57:ad:d6:63:d3:d1:9d:8e:53:
         2c:88:d2:f9:df:2f:c1:26:13:81:4d:88:6f:0b:11:62:5f:4b:
         69:2e:70:9e:b8:3e:56:38:d5:f0:7e:3f:8d:78:ca:f6:30:45:
         95:c3:19:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:21 2021 by LibreSSL & rpki-client.