RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer (download)

Subject key identifier:   EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
CA Repository:            rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 17806
    2: AS: 56121
    3: AS: 58420
    4: AS: 58732
    5: AS: 58778
    6: AS: 58911
    7: AS: 58918
    8: AS: 132608
    9: AS: 138157
    1: IP: 103.248.204.0/22
    2: IP: 114.130.0.0/17
    3: IP: 114.130.192.0/19
    4: IP: 114.130.248.0/22
    5: IP: 2403:ec00::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76333 (0x12a2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 19 23:49:10 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:2e:ac:61:6c:cc:ff:53:d7:ae:04:cb:5d:
                    24:34:78:79:6c:e8:ab:d6:a4:eb:51:15:33:3f:c9:
                    09:49:6c:a2:cd:9f:00:fe:46:f7:08:51:a9:98:5e:
                    71:b0:77:9a:9d:8a:44:94:30:12:69:64:d7:2a:95:
                    b0:9f:2c:e6:d2:5b:81:b5:08:c5:e6:e5:b6:12:13:
                    09:d3:67:68:c6:f3:c4:40:0a:04:96:e9:7c:5f:c7:
                    60:67:fc:06:7e:f8:1c:20:e3:13:ff:79:ca:4d:86:
                    23:cc:ec:84:0b:ec:af:f8:dd:b4:a9:77:e5:d9:21:
                    8c:33:11:12:90:8d:30:f7:10:cf:38:ec:92:8b:3a:
                    45:92:ef:35:12:31:39:35:0f:69:21:3e:0e:49:6a:
                    45:03:42:03:f5:52:5c:ab:06:39:d7:a5:41:e0:63:
                    2e:93:69:48:fe:6d:4a:30:ff:08:b5:3a:a1:2f:bc:
                    c9:69:cf:8f:ad:1f:79:58:f4:ef:44:f7:87:30:12:
                    ec:29:2d:13:a3:e1:2e:8e:96:5b:0e:b8:e7:00:cb:
                    ae:23:a5:79:a6:1d:ad:3b:c9:c6:bf:22:e3:8e:b5:
                    a7:cc:ad:66:3f:87:d9:95:8c:ce:c3:b2:d8:cd:60:
                    2e:c1:0e:d0:64:16:51:3a:71:cc:02:42:67:1c:0f:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17806
                  56121
                  58420
                  58732
                  58778
                  58911
                  58918
                  132608
                  138157

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.204.0/22
                  114.130.0.0/17
                  114.130.192.0/19
                  114.130.248.0/22
                IPv6:
                  2403:ec00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:07:1f:1b:14:df:4f:db:32:12:35:f7:82:4b:ef:e9:2f:f1:
         9f:ff:31:5e:36:42:0a:47:a2:3b:64:cc:9d:5a:6e:8b:3d:99:
         5c:5b:fe:d9:c2:4b:46:26:d2:14:12:ca:b0:81:8b:ef:3b:54:
         2b:e7:ea:12:9e:77:4c:87:87:08:66:a5:02:b4:90:ee:cd:4d:
         ca:bd:d9:04:72:f4:f1:3f:c9:ad:a9:d2:3c:3c:27:c9:bf:fd:
         cf:d2:ca:1a:68:fb:83:01:13:09:fd:9f:96:ed:c0:19:9d:3c:
         df:9e:96:ce:2a:be:e4:46:94:7a:9d:d9:a5:4f:3b:c2:1c:70:
         05:dc:b4:6e:e1:ae:0f:27:24:8f:a0:41:af:2a:97:97:dd:a4:
         e5:68:f1:97:6c:2d:3e:b4:0d:89:21:08:15:88:0c:33:5c:97:
         4e:3e:85:26:b2:13:1a:a8:c6:63:d4:62:0e:0e:43:a5:a5:46:
         a3:b2:b8:4d:e8:c5:29:6e:08:f2:c9:30:e7:99:fd:f0:d5:1e:
         ab:24:b8:cb:58:cb:02:8e:37:e5:e8:d2:2b:1a:6e:fe:db:56:
         1c:26:b8:26:5b:cf:e2:bf:f9:09:6b:72:e1:44:59:b9:cf:1b:
         a0:d8:14:eb:62:75:43:f7:4b:d9:56:05:51:c3:69:c8:29:00:
         a7:b0:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:40 2021 by LibreSSL & rpki-client.