RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer (download)

Subject key identifier:   F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
CA Repository:            rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 140090
    1: IP: 103.148.98.0/23
    2: IP: 2001:df2:f780::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67975 (0x10987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 27 16:41:55 2021 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:ed:70:7b:1d:6f:77:46:90:39:2b:cd:75:
                    cb:45:ff:9b:24:2e:40:6a:32:e8:35:66:a2:0b:55:
                    5a:32:5c:2b:29:0b:2e:7a:b1:61:62:9c:9f:1f:58:
                    dd:d1:3c:69:68:87:5d:12:2b:83:e4:52:83:2e:62:
                    64:f3:36:c1:d0:86:e6:40:e3:0b:ab:4e:35:77:77:
                    d6:d3:06:af:50:77:19:01:32:c2:8f:e0:a0:c1:b0:
                    99:e1:dc:6e:46:28:dc:81:ae:dd:47:8e:1b:22:a9:
                    25:25:da:ae:02:66:bb:a9:9b:f6:fb:01:c2:03:e0:
                    a1:a8:18:b8:39:7f:15:c1:c6:c2:05:70:6a:36:78:
                    0f:00:c0:74:49:65:c6:53:ea:3b:59:3e:f3:99:fe:
                    fa:fa:9a:95:f1:a7:34:d7:69:fa:36:62:a4:a8:38:
                    8e:c8:e2:55:ea:8e:3c:aa:cc:25:7c:5c:c5:b1:ba:
                    51:61:9a:ee:3c:e1:41:8b:6d:18:1f:5b:d2:8d:e8:
                    f0:34:30:2b:58:e2:02:1e:7c:cb:13:29:10:c0:64:
                    de:08:77:db:e7:67:f0:35:1b:8e:52:0b:b6:ff:14:
                    54:ff:01:ad:52:e1:7f:0b:f3:77:95:f0:99:f1:34:
                    e3:3d:99:d7:2b:ac:66:e4:4e:1e:64:24:f9:86:32:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140090

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.98.0/23
                IPv6:
                  2001:df2:f780::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:9d:bc:64:2b:07:95:1a:33:66:fa:a4:0f:32:91:9b:0e:c8:
         0a:6c:5f:2e:8a:e9:83:8f:c9:a6:36:38:73:a8:23:6e:7d:a8:
         3a:f1:7e:08:ee:62:00:a5:45:ec:ab:56:ed:00:39:08:8d:47:
         03:50:bc:da:78:1d:0a:48:f8:20:d5:84:c7:3b:c2:51:15:98:
         34:22:e4:55:17:b2:aa:c2:fe:2a:c7:28:61:18:5b:b5:ca:29:
         29:bc:c3:eb:15:d2:45:70:2c:0b:42:02:9d:5d:ad:ca:e5:55:
         3d:fe:05:24:1e:77:e0:ac:4d:04:78:a6:52:2c:e6:44:b9:d3:
         9d:32:1d:c5:89:2c:f8:c4:b0:d8:f4:4d:2c:18:3e:02:24:86:
         53:10:06:12:a1:40:60:7e:b0:30:2e:86:43:ca:92:b0:ad:ff:
         a8:b3:ea:d8:d7:6f:99:64:e6:4a:71:8e:c7:b0:8f:d1:ef:4d:
         34:18:39:f2:c3:b1:d8:fb:fd:92:2b:6c:ac:12:db:e9:f9:60:
         67:c6:63:65:98:ab:b4:ec:3c:b6:04:46:02:3a:02:ea:ed:8f:
         7a:9c:b8:98:03:13:e8:bc:aa:41:df:ee:38:3d:a1:98:0c:51:
         a2:7d:d3:74:08:88:00:f0:03:9a:f1:2e:7b:b9:67:1d:d3:d5:
         30:37:3f:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----