RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer (download)

Subject key identifier:   DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
CA Repository:            rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 137570
    1: IP: 103.113.208.0/22
    2: IP: 2402:c2c0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70725 (0x11445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 27 20:56:28 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:86:18:89:58:9f:90:09:4c:20:78:90:5d:
                    c4:6f:c6:b7:9d:74:75:2d:15:6e:7c:ec:d9:1f:89:
                    f1:40:db:33:f2:35:80:7d:f5:ac:3f:d6:ff:92:5f:
                    71:5b:7c:e8:55:1d:a9:ab:2d:e9:04:48:93:23:a8:
                    67:dc:94:63:8b:ab:4a:d1:73:b8:30:8b:50:af:98:
                    a2:94:e2:46:b9:1f:d4:14:0a:e9:bc:15:31:2c:2a:
                    e2:79:a9:53:05:4e:1c:95:41:f2:ac:5f:9f:cc:d8:
                    bd:cb:c5:63:02:fe:db:78:59:78:78:1c:91:49:72:
                    b8:0c:18:92:c8:24:d4:32:e8:d4:09:f0:4a:79:74:
                    e4:6f:40:16:84:e9:7a:74:34:46:86:cb:a8:d1:f7:
                    c0:96:5b:4b:fb:34:f6:3b:6e:88:52:c7:22:8b:3e:
                    cc:cd:05:5a:1e:fc:17:99:fb:02:a2:d4:42:5c:87:
                    c3:51:8e:d0:0b:e7:28:e9:4e:e1:6d:66:2b:cd:a5:
                    0b:bc:93:9d:f0:83:01:0f:6d:1e:9b:9c:81:b7:2d:
                    4e:32:db:03:84:f5:19:88:af:b6:23:ac:c0:1f:56:
                    1b:58:4d:77:ef:b3:96:5f:8d:32:dc:11:7a:fd:cd:
                    bf:85:44:19:3e:f3:81:e0:d7:1f:50:da:47:3b:26:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137570

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.208.0/22
                IPv6:
                  2402:c2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:33:3c:00:29:19:8b:2c:28:07:bc:36:ea:e9:13:5f:df:
         0f:02:c7:1f:4b:36:a7:35:ec:ef:1c:48:a4:47:b0:82:f4:a5:
         e5:8f:5c:08:0c:1a:a5:5f:c1:74:a8:8e:de:4d:c6:98:82:b6:
         8e:a7:ff:95:cd:ce:77:89:51:cf:66:8a:3e:69:f2:62:41:92:
         bc:18:b6:44:ab:96:1f:33:75:9e:a0:1f:0c:bc:df:ef:43:02:
         f0:ff:3a:29:c2:18:11:5d:98:bd:c1:d8:2c:e1:27:17:53:73:
         fa:05:92:1a:5b:a0:7b:8d:9b:8c:f9:5c:49:86:42:b7:85:28:
         77:9a:72:b0:fe:84:62:de:a5:98:6b:62:73:44:06:e1:35:85:
         9f:42:ac:56:e5:c7:37:7d:ef:71:9a:a5:01:be:18:9d:86:c1:
         d8:07:4d:e8:8c:c1:ca:5d:63:3f:e6:0e:02:a8:97:3b:3d:8e:
         c7:28:06:0c:d8:d6:38:b2:28:4c:59:71:94:35:60:f2:a9:06:
         a1:74:06:0c:aa:59:19:95:c0:9d:c2:26:af:0d:63:07:d6:e6:
         40:fb:f2:da:88:05:86:b8:4d:ed:4b:6f:7c:74:ed:ac:59:a4:
         c7:92:b5:39:4b:12:b1:6f:8c:98:18:05:75:b1:e4:58:d8:c5:
         fe:83:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:29 2021 by LibreSSL & rpki-client.