RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer (download)

Subject key identifier:   01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
CA Repository:            rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 133092
    1: IP: 103.65.200.0/23
    2: IP: 103.233.182.0/24
    3: IP: 103.255.126.0/24

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81664 (0x13f00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 12 04:28:26 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e5:60:70:86:25:f0:d1:26:ca:ed:3b:e0:bf:
                    55:c7:29:37:f7:f8:b0:db:e4:f7:2a:ae:ef:7a:46:
                    1a:38:3a:c0:88:d0:6a:34:b9:20:de:49:50:47:af:
                    f2:0d:86:69:2e:ed:49:8c:12:66:b4:62:92:0d:35:
                    1d:a1:a5:12:15:5b:bf:b0:2a:3c:45:93:2f:52:7a:
                    8a:03:42:c9:d0:b7:32:b7:4c:45:1f:89:1a:12:d0:
                    a2:da:52:ed:50:24:ea:df:db:3b:4b:34:64:d9:ea:
                    78:1f:6a:63:0d:1d:95:7a:5f:5a:d4:86:8e:c1:16:
                    22:33:a4:08:ca:bd:f9:83:f2:f0:c1:e4:1f:da:80:
                    64:f5:ed:85:e4:96:62:36:cb:3b:e1:2c:2b:90:c3:
                    08:29:1d:19:1e:80:91:1b:71:3b:3c:cd:f8:0f:16:
                    6f:f0:b8:6d:87:52:18:ea:57:5c:2d:a6:37:3d:44:
                    b4:dd:c3:7e:8d:bb:86:37:15:37:ee:bc:0a:84:60:
                    50:33:14:76:72:b9:af:71:8b:77:5c:65:9a:6c:42:
                    0f:58:40:10:be:ad:9f:f0:a9:16:b5:7e:b4:92:c0:
                    32:24:2c:67:4f:1a:f7:49:d8:15:a4:23:86:69:33:
                    f1:75:b5:d8:f1:5a:a4:74:52:cb:94:13:5b:a6:14:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133092

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.200.0/23
                  103.233.182.0/24
                  103.255.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:24:77:8f:6f:1d:41:3f:e4:8f:5f:5c:fb:d5:b3:48:9b:2c:
         0a:18:0f:c8:d0:cf:61:70:53:55:15:c4:20:03:36:c6:ac:a4:
         f4:b7:4b:63:81:f2:a6:0e:e6:c4:24:6a:37:a7:d3:52:fa:bb:
         cf:f7:b0:ba:fb:fb:2f:f2:9b:b1:c9:04:c8:0b:9b:ea:14:c1:
         7a:fa:fc:8d:f3:79:e4:28:c7:7f:d7:04:58:2d:23:70:c4:31:
         8f:cd:f4:79:1a:3e:0f:0b:31:a7:fb:ba:1b:69:36:93:bc:c2:
         a7:15:34:86:0b:03:24:3f:bf:14:bb:04:9e:ac:34:9b:ff:36:
         12:62:9d:a8:2d:77:dd:59:59:82:93:6a:ab:26:b4:c6:48:f7:
         7f:e9:c6:07:19:3a:95:cb:a9:b9:29:f1:67:4e:8e:e1:6a:b5:
         a9:35:dd:2e:93:a7:0e:0d:b0:36:27:da:c7:63:67:27:0a:06:
         d4:6c:92:97:a8:e0:1f:30:af:07:ba:0e:f2:fd:46:77:a8:da:
         6e:e9:57:e2:f2:84:4c:88:db:a1:24:56:f3:de:3f:ad:6b:6d:
         0b:08:ff:ed:4a:2b:16:e2:44:03:26:49:8b:dd:78:8a:82:c9:
         6f:44:49:98:f9:84:89:f0:e5:17:ea:b9:bf:af:73:7c:0b:67:
         48:3d:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jan 12 07:00:19 2022 by LibreSSL & rpki-client.