RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer (download)

Subject key identifier:   09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
CA Repository:            rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: IP: 103.176.58.0/23
    2: IP: 2001:df0:940::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79255 (0x13597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 18 06:13:21 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:e9:bc:bd:8e:34:31:a0:44:4b:a3:ee:8d:
                    93:e6:84:e4:34:4c:c6:d7:21:01:2b:ac:9a:f0:d2:
                    30:6a:14:33:5c:17:c3:f5:5b:ce:89:1a:2c:45:fe:
                    04:ae:66:f8:ee:8e:89:cd:14:ec:38:b7:be:46:2a:
                    dd:85:c2:0c:8d:fc:33:8a:54:e0:89:d1:48:6b:4d:
                    dd:3b:e3:c7:5b:08:4e:c6:d0:d7:f8:8e:b1:58:1b:
                    ce:eb:9f:b7:e4:be:12:cd:52:0b:12:16:08:be:0e:
                    95:d8:42:6e:a6:a8:aa:6d:78:e1:73:89:77:9e:18:
                    d4:6d:0d:c4:68:f8:ea:e2:4d:6d:e0:1b:c0:2e:0e:
                    dd:e2:a6:b4:8e:44:85:f6:f2:7a:5c:6d:f2:a6:48:
                    b2:47:eb:2f:cb:79:28:9e:52:3a:5e:71:34:d4:33:
                    35:83:de:16:69:47:b7:81:dc:8d:bd:4f:8d:67:ef:
                    2d:7a:1c:13:7b:58:8c:81:73:54:45:55:fc:06:d0:
                    d4:5a:10:54:b9:f4:82:da:0a:2e:3a:95:ca:25:99:
                    bf:b5:47:6f:be:e0:f1:fc:de:84:10:69:75:16:c9:
                    11:65:f1:63:c3:c9:12:7a:6f:56:08:f8:dc:42:1c:
                    1d:36:a0:f6:c4:86:d7:4b:7a:74:7b:f7:a5:f1:d6:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.58.0/23
                IPv6:
                  2001:df0:940::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:5a:1c:5e:32:fe:46:61:b0:b3:37:27:51:73:92:65:b9:
         69:12:98:47:b2:53:9d:2d:2b:95:66:aa:a1:3d:22:72:f4:f1:
         22:c3:0f:ab:89:63:e2:77:55:ca:8e:45:d2:7a:09:b1:f1:10:
         fb:07:0a:08:c6:f6:18:41:b8:22:43:08:05:44:b9:19:46:29:
         be:df:18:15:41:7d:55:47:22:06:d8:10:63:95:ab:4c:d2:7f:
         61:aa:3d:9c:7c:51:98:f9:83:56:97:cf:54:7a:6c:9e:b9:85:
         61:40:74:72:5e:b4:b9:c4:00:58:01:ec:00:75:cc:95:70:82:
         c1:24:2c:b9:0b:5a:73:46:78:5d:7c:35:57:a9:62:ca:17:4c:
         50:ad:d8:24:10:72:2e:54:ef:3a:a2:58:f7:6b:e1:fc:00:25:
         92:1d:68:ee:12:fe:d0:21:ee:07:13:7b:29:94:76:39:58:b5:
         3d:cf:f6:e3:11:03:34:6f:18:3f:68:ee:4a:b1:45:01:b3:41:
         50:38:06:1c:c0:b1:e8:97:1d:7c:84:26:09:c7:3b:a4:f3:bc:
         0e:ad:a3:4f:ed:77:55:3f:a1:51:6d:44:7d:c5:90:02:8e:8e:
         3f:5d:5d:aa:0c:c8:13:60:cb:45:b6:09:d8:4a:36:ca:97:0e:
         2f:16:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Nov 18 07:53:43 2021 by LibreSSL & rpki-client.