RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer (download)

Subject key identifier:   06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
CA Repository:            rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 133926
    2: AS: 137999
    1: IP: 43.225.100.0/22
    2: IP: 103.44.60.0/22
    3: IP: 2407:880::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67430 (0x10766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 17 04:06:06 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:24:3b:e0:ea:c0:1d:13:23:bb:ad:65:48:
                    e8:b2:a7:3b:13:13:bb:d1:cc:86:cf:7e:ae:00:e0:
                    d2:85:52:ea:e5:50:71:3a:89:e4:d8:ed:40:03:2c:
                    85:8a:07:85:9f:a4:da:0f:14:95:34:36:cd:b6:e1:
                    2f:c6:bc:00:9f:e3:5c:0a:48:0b:92:ae:c4:76:42:
                    c6:f1:ea:89:0e:8b:53:4f:08:0a:28:0d:7d:94:48:
                    29:a7:93:14:06:2f:21:ef:02:cd:b1:0c:26:25:cb:
                    57:c5:fb:90:a9:f1:c4:1b:86:27:6c:3d:45:de:e6:
                    c9:6d:12:e2:10:c2:6a:49:b3:ed:10:df:29:24:fe:
                    ef:b7:01:d3:15:cc:a9:3a:70:24:c9:64:56:c6:a5:
                    55:ea:28:96:ce:d0:29:6f:af:4b:57:a9:d8:06:64:
                    8a:e6:69:65:5f:35:ba:df:ca:1e:46:cb:46:dc:bf:
                    ba:ca:92:79:cf:82:46:b8:3c:0c:c5:a5:76:a0:cf:
                    e2:65:8a:fc:c4:75:c5:90:d3:c8:c6:01:1d:64:c7:
                    33:07:67:bc:f9:3c:22:f9:d9:b7:83:c5:52:11:f1:
                    fe:cb:e5:ac:f6:81:25:60:7b:de:de:3f:e5:12:fe:
                    03:f5:c7:2b:9a:92:ad:04:e1:fe:fb:2f:ef:f4:f0:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133926
                  137999

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.100.0/22
                  103.44.60.0/22
                IPv6:
                  2407:880::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:3b:1a:22:29:ea:27:ba:3e:e2:07:75:98:3e:4d:df:0a:0a:
         95:3f:1f:72:45:d7:49:52:b0:d1:c1:3c:fc:3c:19:40:41:bb:
         97:63:79:6d:7b:c0:08:36:4d:85:6e:b5:a5:eb:d6:50:5e:1e:
         06:e7:5d:bc:a6:59:53:b9:8c:e2:8d:fd:12:fb:80:f9:69:70:
         f4:80:99:f1:6f:1d:9c:0a:04:15:b4:96:8c:22:ad:db:e7:0a:
         3e:12:16:8a:6d:f6:b6:ee:8f:65:89:5a:8f:bc:00:5d:b4:f3:
         86:31:04:b2:66:31:4b:d0:9d:92:80:40:90:90:eb:64:6b:2c:
         15:67:c2:a5:f4:f2:c2:00:0a:12:00:0d:ba:41:e7:ce:46:cd:
         9d:ee:e6:6a:9c:4b:64:63:12:26:a1:09:73:51:27:8a:f5:c5:
         12:c7:42:cd:87:d1:5b:55:fd:aa:6e:58:e2:e5:07:07:d9:06:
         98:c0:ba:1e:c0:f2:04:5f:94:f4:33:c4:90:ba:9f:7f:13:d4:
         2c:1c:bd:e2:3c:04:9a:7f:de:49:9d:61:13:ed:81:96:c1:a5:
         f5:0c:4a:75:81:b7:8f:fd:29:10:e9:09:bd:9f:cf:e1:b5:ea:
         51:8b:db:37:af:63:22:07:31:48:de:2c:08:22:93:f7:25:9d:
         6f:3e:04:e4
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgIDAQdmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDMxNzA0MDYwNloXDTIyMDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEz
Mzk3REM2MTQ3MkFDMTFCMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMuiQ74OrAHRMju61lSOiypzsTE7vRzIbPfq4A4NKFUurlUHE6ieTY7UADLIWK
B4WfpNoPFJU0Ns224S/GvACf41wKSAuSrsR2Qsbx6okOi1NPCAooDX2USCmnkxQG
LyHvAs2xDCYly1fF+5Cp8cQbhidsPUXe5sltEuIQwmpJs+0Q3ykk/u+3AdMVzKk6
cCTJZFbGpVXqKJbO0Clvr0tXqdgGZIrmaWVfNbrfyh5Gy0bcv7rKknnPgka4PAzF
pXagz+JlivzEdcWQ08jGAR1kxzMHZ7z5PCL52beDxVIR8f7L5az2gSVge97eP+US
/gP1xyuakq0E4f77L+/08Ay5AgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUBhgYSeLF
+TE+pgozl9xhRyrBGw0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgzQkJDLzE0MEMxNzU2ODZENjExRUJCN0IzOUM2MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4M0JCQy8xNDBDMTc1Njg2RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VM
Ri1URS1wZ296bDl4aFJ5ckJHdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAgsmAgMCGw8wNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIr4WQD
BAJnLDwwDQQCAAIwBwMFACQHCIAwDQYJKoZIhvcNAQELBQADggEBANM7GiIp6ie6
PuIHdZg+Td8KCpU/H3JF10lSsNHBPPw8GUBBu5djeW17wAg2TYVutaXr1lBeHgbn
XbymWVO5jOKN/RL7gPlpcPSAmfFvHZwKBBW0lowirdvnCj4SFopt9rbuj2WJWo+8
AF2084YxBLJmMUvQnZKAQJCQ62RrLBVnwqX08sIAChIADbpB585GzZ3u5mqcS2Rj
EiahCXNRJ4r1xRLHQs2H0VtV/apuWOLlBwfZBpjAuh7A8gRflPQzxJC6n38T1Cwc
veI8BJp/3kmdYRPtgZbBpfUMSnWBt4/9KRDpCb2fz+G16lGL2zevYyIHMUjeLAgi
k/clnW8+BOQ=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:03 2021 by LibreSSL & rpki-client.