RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer (download)

Subject key identifier:   05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
CA Repository:            rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 137470
    1: IP: 202.3.0.0 -- 202.3.5.255

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81377 (0x13de1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  4 06:38:13 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:0f:9a:d4:8f:17:fb:38:ca:ab:f1:6b:e6:
                    1b:9f:5c:71:2b:d9:8b:22:b1:c2:d3:40:fd:af:3f:
                    60:c0:76:93:9b:ce:d6:2a:d6:a1:f3:2c:34:ae:0e:
                    46:30:31:2a:9d:81:9b:d0:6e:a2:df:6c:f3:1d:fa:
                    12:e4:b3:2a:d7:a2:22:06:92:ca:29:15:b4:16:83:
                    d5:dd:9a:95:66:84:7f:6c:19:2f:ba:22:6c:a5:b3:
                    24:45:5d:ed:cd:f2:4d:ca:45:6b:7f:fc:08:18:69:
                    d1:12:c1:c8:2e:2e:21:a3:65:f4:9c:7c:00:5a:d1:
                    d4:c8:c0:64:b9:88:bc:5f:46:40:13:bf:42:a8:9b:
                    21:ec:86:1d:fa:10:80:a2:2b:ce:96:c7:b7:40:12:
                    1e:3b:1d:e3:9f:87:fe:99:8c:d1:04:ca:f2:79:1e:
                    25:cb:a6:00:c3:63:e4:8d:55:4e:c0:9e:46:bc:72:
                    7a:e6:0b:4c:6b:0c:54:b0:69:d7:09:b3:79:c1:c8:
                    a3:72:58:9f:ad:ae:52:50:d4:36:a9:de:31:fd:d1:
                    46:0d:6b:3e:81:7f:e2:57:7f:a1:bd:f9:1d:d5:82:
                    49:fb:01:1d:1c:4c:f7:e8:48:79:0c:54:ab:41:b4:
                    87:d2:4b:c1:bc:d9:d8:61:aa:f5:30:14:0b:41:09:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137470

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.3.0.0-202.3.5.255

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:d2:a1:ac:69:8f:88:cf:6f:49:b9:87:cd:15:d9:91:18:
         e8:7f:07:27:ac:78:93:ec:12:bc:85:ca:b6:d9:74:6f:e6:d5:
         7a:6c:2e:3c:3a:8f:ea:8e:20:04:8c:f5:a9:04:42:3f:25:16:
         b1:ac:37:dd:1b:36:15:dd:e9:43:da:c8:12:ac:7e:8d:10:e3:
         ef:7f:59:50:4d:f4:68:51:fd:22:eb:46:31:e6:e1:49:f9:94:
         cf:3a:d5:ae:d2:77:53:79:39:5d:81:78:65:2e:f2:76:52:90:
         b2:cc:06:b1:89:5d:d0:c6:a2:f6:aa:e3:ef:39:6b:be:ea:a1:
         8b:d0:74:c8:74:1d:ec:35:3e:6f:ce:a4:1b:7f:29:04:64:8d:
         02:e8:24:fd:dc:b4:b3:c7:ad:66:77:86:14:91:b3:30:62:e5:
         08:84:d1:7a:29:c2:5e:c0:8e:85:72:73:71:27:c4:43:c4:1a:
         17:72:4e:fa:9b:17:df:85:05:d9:d0:89:22:07:60:b9:d2:09:
         65:93:8e:4a:0e:5b:73:79:3d:20:d3:dc:25:6d:64:ff:48:8b:
         82:d8:71:65:dc:64:e6:26:0c:78:5f:47:b6:64:a5:0f:0e:e7:
         8b:fe:39:66:f7:eb:59:3a:ea:55:bf:bf:57:0f:de:a4:03:f9:
         50:cb:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 4 08:13:35 2022 by LibreSSL & rpki-client.