RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer (download)

Subject key identifier:   E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
CA Repository:            rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 138464
    1: IP: 103.126.20.0/22
    2: IP: 2405:7840::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64322 (0xfb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 08:39:19 2020 GMT
            Not After : Mar  2 00:00:00 2022 GMT
        Subject: CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:7a:19:4d:e4:07:f0:2c:79:a5:cc:d3:a9:
                    f3:56:c8:d5:0d:8c:e3:e8:57:ec:42:38:7a:3a:c0:
                    7a:58:1e:a8:84:41:fb:8f:5b:ec:41:3d:88:6a:d5:
                    52:90:12:97:b6:2c:ac:97:12:77:91:80:01:bb:e0:
                    93:5e:60:42:20:b5:a8:3c:49:fc:af:08:1d:d1:8c:
                    db:ef:07:a1:f7:b3:00:3d:64:66:c9:a2:3a:44:d1:
                    49:f9:e4:2d:37:34:c9:3f:7b:73:e7:97:76:db:2f:
                    41:18:c2:8f:bb:2a:86:cc:46:b9:64:c2:dd:7c:33:
                    ad:85:89:77:0a:a1:42:b0:39:38:6e:69:4a:50:1a:
                    5a:f7:bb:44:19:4e:97:0d:53:99:33:3c:f0:44:d3:
                    17:4f:28:52:c6:22:56:38:df:82:a9:54:01:ab:4f:
                    fc:48:37:6b:42:be:9d:92:78:9a:14:12:9f:ab:17:
                    93:61:e2:b7:cf:fc:f7:1d:ad:96:e5:d0:24:ce:25:
                    b6:cc:3d:05:fa:1e:a6:3c:c4:b2:62:91:04:3e:19:
                    81:ac:eb:bf:53:20:34:c5:05:5d:9c:99:5b:0f:71:
                    7e:f8:eb:30:f9:64:5f:dc:e8:2c:d8:f6:f6:59:4f:
                    71:62:72:9d:0b:b3:cc:4a:27:2d:e6:70:4d:da:29:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138464

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.20.0/22
                IPv6:
                  2405:7840::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:ae:e2:72:9a:83:6e:8b:c5:68:b6:f0:a6:e7:d2:b6:ad:
         b9:00:11:10:7a:8a:b7:e6:af:14:cd:42:6d:29:5b:f3:93:31:
         60:96:dc:b1:eb:08:86:33:3a:ff:69:55:69:d2:9c:98:cd:64:
         fe:c4:54:c5:ca:b1:80:bd:34:41:f6:79:fa:ec:54:26:91:ac:
         23:5e:d9:84:bf:f9:a5:36:6e:ff:a0:b5:65:85:f4:86:8e:01:
         2b:3d:e9:2f:bf:76:59:a5:a1:2e:71:e7:80:a6:ab:56:ff:a3:
         a2:9e:62:7a:c5:35:df:cf:d2:5c:05:10:50:cc:69:2e:f2:40:
         45:31:18:97:b4:46:e9:03:a5:d6:82:13:68:64:9d:be:cd:86:
         8a:66:48:52:91:df:30:ca:6f:31:c5:4d:17:b5:04:73:bf:ac:
         37:cc:53:e4:a8:8c:8b:aa:f6:5e:c3:d8:71:d2:0b:74:4f:8a:
         54:a3:ad:fe:c1:e9:e8:1a:b9:fb:64:a0:3f:c8:ea:af:35:07:
         b0:de:4a:f5:46:fc:87:8f:5f:b4:01:6e:b4:1e:8c:c1:57:22:
         75:23:42:44:a6:45:ee:6f:1f:d1:89:4e:28:74:d4:fd:6e:77:
         74:7e:44:fe:ab:e9:da:0d:a9:7a:cf:9a:be:7f:68:12:ab:3a:
         8c:9f:6d:d4
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAPtCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIwMTIzMTA4MzkxOVoXDTIyMDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQy
QzdDQ0M2REQxOTM1MTA3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCp5XoZTeQH8Cx5pczTqfNWyNUNjOPoV+xCOHo6wHpYHqiEQfuPW+xBPYhq1VKQ
Epe2LKyXEneRgAG74JNeYEIgtag8SfyvCB3RjNvvB6H3swA9ZGbJojpE0Un55C03
NMk/e3Pnl3bbL0EYwo+7KobMRrlkwt18M62FiXcKoUKwOThuaUpQGlr3u0QZTpcN
U5kzPPBE0xdPKFLGIlY434KpVAGrT/xIN2tCvp2SeJoUEp+rF5Nh4rfP/PcdrZbl
0CTOJbbMPQX6HqY8xLJikQQ+GYGs679TIDTFBV2cmVsPcX746zD5ZF/c6CzY9vZZ
T3Ficp0Ls8xKJy3mcE3aKU3/AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU4kSeMSIg
Ex4udsQsfMxt0ZNRBwcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRDQkYzLzFCQzZFQjIwMTFFNzExRUFCOTAzQUE3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJ
Z0V4NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhzgMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ34UMA0EAgAC
MAcDBQAkBXhAMA0GCSqGSIb3DQEBCwUAA4IBAQB/Lq7icpqDbovFaLbwpufStq25
ABEQeoq35q8UzUJtKVvzkzFgltyx6wiGMzr/aVVp0pyYzWT+xFTFyrGAvTRB9nn6
7FQmkawjXtmEv/mlNm7/oLVlhfSGjgErPekvv3ZZpaEuceeApqtW/6OinmJ6xTXf
z9JcBRBQzGku8kBFMRiXtEbpA6XWghNoZJ2+zYaKZkhSkd8wym8xxU0XtQRzv6w3
zFPkqIyLqvZew9hx0gt0T4pUo63+wenoGrn7ZKA/yOqvNQew3kr1RvyHj1+0AW60
HozBVyJ1I0JEpkXubx/RiU4odNT9bnd0fkT+q+naDal6z5q+f2gSqzqMn23U
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:34 2021 by LibreSSL & rpki-client.