RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer (download)

Subject key identifier:   15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
CA Repository:            rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 138605
    1: IP: 103.134.72.0/24
    2: IP: 103.155.205.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65941 (0x10195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 10 03:22:42 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:60:50:67:06:b7:28:ce:01:c7:8e:d5:44:
                    28:1a:2e:7b:e8:a6:eb:25:bc:07:2a:4e:46:7c:31:
                    67:78:66:55:e8:93:ec:eb:96:fa:cc:31:17:5f:11:
                    af:62:fd:b0:92:c5:45:21:a7:85:68:d0:59:e0:b6:
                    23:02:3f:b7:ba:c0:4b:4d:37:90:69:c9:c8:55:05:
                    25:c4:64:58:56:b0:c5:83:c3:05:77:95:10:93:46:
                    3d:79:bd:1b:7e:27:35:c9:1c:a4:16:f2:8b:3c:c5:
                    24:b3:f4:00:a9:c3:ef:3d:53:89:db:97:14:b3:d5:
                    37:a4:d0:8e:d7:41:c1:73:0c:77:65:cc:b2:e7:a8:
                    5b:1d:34:2c:c2:42:12:8b:46:48:7a:79:ac:30:4f:
                    88:a5:57:6e:10:b1:84:2c:6d:1f:5d:d1:aa:7c:e1:
                    b9:85:58:85:95:5e:a3:9f:f4:1b:51:c0:8e:57:a2:
                    ed:f2:fc:fa:92:39:f3:26:9a:7f:81:5c:34:13:fd:
                    1b:04:22:e9:41:1a:43:0c:30:15:6c:6a:c4:9e:01:
                    e7:fa:8f:92:d3:29:fe:b9:f3:52:d8:34:21:d1:07:
                    ab:8f:9e:be:7d:84:54:ef:78:02:5e:34:22:93:9a:
                    b1:79:c4:b3:20:27:0c:d3:13:2c:90:0d:55:0c:6d:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138605

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.72.0/24
                  103.155.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:2a:95:31:70:21:a5:27:c0:a7:a8:8f:30:26:90:67:ab:d1:
         34:03:9f:ad:3d:11:47:86:92:60:f3:04:b8:44:ca:71:6d:a1:
         2d:9d:39:fa:db:b9:b6:5f:c6:43:1f:0b:f0:e8:10:f6:9e:73:
         82:10:fa:d1:33:7d:8a:b8:b2:83:84:8b:59:db:ca:c1:e6:b9:
         0b:b8:39:99:d4:ce:81:06:57:77:67:88:21:67:60:96:a3:a4:
         d7:76:8d:9c:03:c9:41:ef:a8:c6:05:30:30:c6:3a:c8:4f:a8:
         ab:d5:7b:0b:c1:6d:4a:e9:3c:4a:04:76:ff:0c:34:f7:ad:57:
         3c:3b:a1:64:74:35:84:c0:0e:84:32:9f:c2:0b:1f:e8:b1:fb:
         f5:22:20:84:77:da:87:6c:93:fc:ab:f8:ab:32:1e:61:7d:d7:
         e5:69:0b:e6:83:22:5a:16:df:77:ad:87:3b:b7:08:da:fd:ce:
         f1:cf:38:db:04:db:95:e1:53:cb:be:4b:7f:6b:78:51:93:c5:
         58:f0:8f:4a:a2:72:d9:e9:89:fd:ab:a7:ed:69:22:69:3c:4e:
         43:a4:9c:3d:20:21:46:8f:23:1a:d2:8c:69:58:44:24:a2:85:
         27:0e:ef:83:4c:1a:f5:b6:c6:70:a9:85:ce:b2:62:96:10:d8:
         af:2f:30:ed
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAQGVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDIxMDAzMjI0MloXDTIyMDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0
RTQ5QTM4QzlENjlCQzJGMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC33mBQZwa3KM4Bx47VRCgaLnvopuslvAcqTkZ8MWd4ZlXok+zrlvrMMRdfEa9i
/bCSxUUhp4Vo0FngtiMCP7e6wEtNN5BpychVBSXEZFhWsMWDwwV3lRCTRj15vRt+
JzXJHKQW8os8xSSz9ACpw+89U4nblxSz1Tek0I7XQcFzDHdlzLLnqFsdNCzCQhKL
Rkh6eawwT4ilV24QsYQsbR9d0ap84bmFWIWVXqOf9BtRwI5Xou3y/PqSOfMmmn+B
XDQT/RsEIulBGkMMMBVsasSeAef6j5LTKf6581LYNCHRB6uPnr59hFTveAJeNCKT
mrF5xLMgJwzTEyyQDVUMbUtRAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUFY+z7+6O
9vuaWnxOSaOMnWm8LzQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE4MjU5LzUxQkI2MjVDMUM5QTExRUFBQjE4RkMxNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02
Tzl2dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh1tMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ4ZIAwQAZ5vN
MA0GCSqGSIb3DQEBCwUAA4IBAQCWKpUxcCGlJ8CnqI8wJpBnq9E0A5+tPRFHhpJg
8wS4RMpxbaEtnTn627m2X8ZDHwvw6BD2nnOCEPrRM32KuLKDhItZ28rB5rkLuDmZ
1M6BBld3Z4ghZ2CWo6TXdo2cA8lB76jGBTAwxjrIT6ir1XsLwW1K6TxKBHb/DDT3
rVc8O6FkdDWEwA6EMp/CCx/osfv1IiCEd9qHbJP8q/irMh5hfdflaQvmgyJaFt93
rYc7twja/c7xzzjbBNuV4VPLvkt/a3hRk8VY8I9KonLZ6Yn9q6ftaSJpPE5DpJw9
ICFGjyMa0oxpWEQkooUnDu+DTBr1tsZwqYXOsmKWENivLzDt
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:18 2021 by LibreSSL & rpki-client.