RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40_o4NKMBZIoD4tyJ_XTPIVARdo.cer (download)

Subject key identifier:   E3:4F:E8:E0:D2:8C:05:92:28:0F:8B:72:27:F5:D3:3C:85:40:45:DA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91DE034/149E0EF61D6F11E2B69FE5B008B02CD2/40_o4NKMBZIoD4tyJ_XTPIVARdo.mft
CA Repository:            rpki.apnic.net/member_repository/A91DE034/149E0EF61D6F11E2B69FE5B008B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-03-30T00:00:00Z
    Resources:
    1: AS: 45932
    1: IP: 27.98.192.0/20
    2: IP: 43.243.248.0/22
    3: IP: 103.1.48.0/22
    4: IP: 116.66.232.0/21
    5: IP: 180.214.160.0/21
    6: IP: 2401:7600::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40_o4NKMBZIoD4tyJ_XTPIVARdo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79781 (0x137a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 30 14:20:42 2021 GMT
            Not After : Mar 30 00:00:00 2022 GMT
        Subject: CN=A91DE034/serialNumber=E34FE8E0D28C0592280F8B7227F5D33C854045DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:ae:1b:f1:9c:e1:09:64:b0:f7:68:8d:1f:
                    50:5e:5a:b0:e0:b1:ca:ea:1c:4d:67:a2:95:ba:4f:
                    41:dd:9b:d5:51:1c:05:18:26:88:4a:74:44:23:31:
                    7a:ef:34:cd:31:60:f2:06:0c:60:9a:12:1b:f4:d3:
                    39:2c:bc:cc:b8:6e:19:1f:79:d1:ec:a5:76:43:6c:
                    4f:7b:79:03:94:67:f6:3e:25:2d:9b:39:23:9b:f5:
                    67:b5:ce:a8:99:4b:4c:92:9c:9a:8b:4c:5b:56:08:
                    b1:0f:eb:57:2c:1a:01:6a:fc:fb:c7:71:47:e9:4f:
                    97:78:4a:01:21:17:80:91:6e:97:85:09:0e:23:22:
                    62:49:4b:f2:55:1f:e7:fe:4e:8b:43:cf:44:f1:5e:
                    69:67:13:f0:d8:19:6c:6a:ca:4f:de:d1:b7:83:c6:
                    39:e8:b7:07:5f:60:e8:e3:e2:97:d1:5a:14:86:1a:
                    f2:3b:03:45:73:98:a0:be:ec:15:f5:72:66:8a:a3:
                    96:31:61:ab:0c:2b:bc:54:3e:87:b0:06:32:9c:98:
                    d4:4f:23:97:62:23:f4:2a:2b:6d:c8:f5:0f:f3:a5:
                    af:9c:d5:4a:b5:d1:1f:c4:39:d4:f4:ea:78:42:50:
                    15:28:b7:8b:4e:39:1d:82:cc:94:af:9d:e4:e2:03:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E3:4F:E8:E0:D2:8C:05:92:28:0F:8B:72:27:F5:D3:3C:85:40:45:DA
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE034/149E0EF61D6F11E2B69FE5B008B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE034/149E0EF61D6F11E2B69FE5B008B02CD2/40_o4NKMBZIoD4tyJ_XTPIVARdo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45932

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.98.192.0/20
                  43.243.248.0/22
                  103.1.48.0/22
                  116.66.232.0/21
                  180.214.160.0/21
                IPv6:
                  2401:7600::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:10:17:ea:b5:cd:22:9d:3c:b1:38:a0:b9:81:27:d3:f0:
         d7:b9:06:31:3e:5e:6c:1a:91:28:72:92:e6:58:7f:88:52:70:
         d5:b2:a0:14:fa:2d:a3:f2:c0:7c:dc:9e:c9:73:70:99:b6:ec:
         a6:8e:8e:d8:68:62:ab:b5:52:74:c0:9a:fc:5b:c8:c7:f3:eb:
         8b:10:75:fb:36:13:47:c6:07:c0:d0:6d:6f:91:e9:24:22:3f:
         ee:b1:6d:88:e9:53:ce:fb:ec:08:ba:fb:33:e4:7e:ff:0f:05:
         54:77:e4:99:97:33:74:72:3e:01:d4:75:19:75:b8:52:b2:d0:
         ef:f4:bc:ec:4e:a7:54:5f:c4:fb:2d:d0:13:3d:6d:4c:d9:50:
         88:14:da:44:71:43:57:3e:72:4a:97:2e:2d:b1:44:1f:cd:c1:
         78:6d:67:54:60:ac:dc:5a:ab:7c:eb:c0:7d:2c:46:97:ff:aa:
         c2:23:ce:88:91:89:76:24:5a:f0:7f:b4:33:c7:be:d3:b5:a7:
         01:f3:95:f6:74:df:31:99:72:37:16:33:9c:5f:e0:43:43:4f:
         53:ea:98:68:e9:12:5a:08:66:33:cc:29:3f:bd:b8:a7:9c:12:
         5e:36:df:cd:ea:71:f5:f0:ab:ad:79:55:44:f2:b6:c2:76:ab:
         23:cf:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Nov 30 16:14:01 2021 by LibreSSL & rpki-client.