RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer (download)

Subject key identifier:   F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
CA Repository:            rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 133410
    1: IP: 103.117.228.0/22
    2: IP: 2403:21c0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75405 (0x1268d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 30 12:52:36 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:1b:1b:b4:d0:a3:9c:3a:10:87:f0:13:5a:
                    4e:65:f4:d8:03:d5:b0:6a:be:5d:93:62:5b:b8:6f:
                    50:c0:f9:8a:88:9e:f9:01:f4:90:22:e1:bf:34:37:
                    9a:f8:96:70:a0:8b:2e:9b:b6:9a:e0:36:b3:ec:89:
                    38:31:4a:fc:67:f2:d4:4e:d1:aa:a7:19:bc:fe:5d:
                    94:e0:33:bc:fe:7c:61:70:e2:1e:c3:11:8e:3e:b5:
                    e8:71:9a:c7:ef:20:58:35:a3:0c:80:1e:ba:f7:ca:
                    31:67:2f:3e:79:82:2f:e6:0c:a8:ff:47:f9:ee:3e:
                    88:3c:a9:41:b7:77:cd:43:55:8c:32:42:c4:ea:55:
                    8d:4a:d3:b0:92:c1:86:7e:30:60:51:f1:f0:04:03:
                    0a:f5:fd:d7:b0:27:86:7e:76:77:df:c9:60:61:23:
                    a4:a2:c7:7d:ed:53:48:f3:6f:58:be:63:91:fa:44:
                    d5:19:4c:7f:64:51:42:93:f7:3b:ae:9e:1e:cb:c7:
                    fd:67:39:14:bb:24:0f:ee:4f:d5:cf:69:7b:ca:db:
                    99:a9:39:dd:14:be:a0:6a:f0:ff:41:e4:b3:3c:d6:
                    2c:f0:f4:a8:37:55:6c:b5:e7:ea:71:2d:3f:3a:bf:
                    82:fc:59:55:42:da:08:d0:3e:ee:db:77:ef:d8:76:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133410

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.228.0/22
                IPv6:
                  2403:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:c8:36:1d:34:ba:81:47:54:d6:66:15:63:79:97:d0:8b:f7:
         31:aa:cd:b3:5a:74:4d:ac:3e:b0:7a:b8:cf:53:9e:3e:99:90:
         4b:99:10:9f:22:a7:80:02:4e:4a:59:79:42:a9:b3:16:48:ea:
         8f:0e:b2:37:11:aa:d3:75:c4:24:94:05:42:f3:b8:68:87:3f:
         c3:ce:b4:37:34:f4:d6:a5:0f:2b:7a:97:e4:64:2f:04:fe:1e:
         34:c1:eb:1a:8f:29:ff:26:79:95:92:83:b2:df:4a:67:9b:e5:
         b4:1c:90:a1:cf:a4:aa:5a:b2:52:16:e9:b4:8c:50:c2:c0:80:
         c2:5f:ba:28:2c:14:5b:44:2f:35:59:1d:d7:db:12:71:2f:f6:
         78:12:06:21:a4:3d:77:f6:19:29:53:4f:3a:03:bd:fb:71:f4:
         50:c8:8d:51:ca:ec:fc:85:b3:44:84:ad:a6:95:d6:83:ad:1a:
         4d:c3:a6:08:41:83:36:9d:06:f3:07:e4:11:15:b4:06:10:02:
         fc:96:fb:0c:a0:c0:b5:0c:19:a1:f2:b7:12:05:0f:de:19:da:
         26:0a:e7:96:1b:42:ec:3b:aa:41:f2:b4:52:e3:85:87:f1:ac:
         2e:22:38:04:ee:e4:45:98:c6:38:29:e9:5c:06:3e:07:bd:a8:
         8f:90:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:52 2021 by LibreSSL & rpki-client.