RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer (download)

Subject key identifier:   1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
CA Repository:            rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-07-01T00:00:00Z
    Resources:
    1: AS: 59332
    2: AS: 141396
    1: IP: 45.116.248.0/22
    2: IP: 103.228.0.0/22
    3: IP: 2400:dc80::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79701 (0x13755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 29 14:43:19 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:88:92:1f:b1:7b:04:ff:aa:db:b0:12:a1:c9:
                    bc:b5:b1:09:c7:83:f0:25:83:7e:22:f2:a1:1f:d9:
                    88:a8:b3:93:02:87:c4:2e:23:e6:dc:78:4d:2b:01:
                    24:7c:f4:bb:ee:1e:a3:de:31:4e:df:d1:ec:cf:97:
                    dd:c4:7e:54:73:8c:bc:93:cb:34:a6:4e:ab:76:2c:
                    cc:f1:a0:23:dd:f9:5c:79:45:2c:52:f9:96:a7:96:
                    1c:a7:6a:91:19:f8:aa:ff:f3:e8:a5:b4:13:e8:4e:
                    24:f0:c5:06:34:f3:a1:13:38:95:9a:d9:3b:27:17:
                    68:b9:9f:04:28:26:ce:26:de:bf:e3:73:64:b0:fd:
                    23:35:d3:35:41:f3:50:c4:f3:d8:02:28:b8:c9:39:
                    30:0d:3c:d6:99:c7:e8:66:b0:27:b3:91:89:58:57:
                    06:39:3a:2d:d2:dc:1a:23:67:04:08:3f:74:41:79:
                    7e:ac:35:fd:c2:6b:db:ee:f6:57:54:3a:b9:66:6c:
                    e7:63:e3:60:1f:a6:fa:ae:22:6a:a2:f9:20:93:c5:
                    83:05:df:75:e6:0d:38:e1:36:89:c2:06:e2:0f:9f:
                    20:d8:19:64:39:b2:c0:65:86:97:c5:d4:74:28:2d:
                    90:5a:27:2d:ad:b4:fd:64:17:dc:89:23:ee:e6:f7:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59332
                  141396

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.248.0/22
                  103.228.0.0/22
                IPv6:
                  2400:dc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:af:ef:9e:9b:80:26:e6:34:52:02:bb:df:5f:af:61:fe:b3:
         ca:8a:b0:40:d2:3e:90:d9:67:e5:e0:cb:de:9a:bc:b0:6c:dd:
         02:fd:5d:22:84:89:a7:e2:6d:32:1d:83:fe:c1:ce:a5:5e:41:
         0f:e4:0d:27:9a:ce:ed:1b:de:b1:91:59:de:d8:a6:e8:45:77:
         7e:5d:e2:47:e2:05:05:5c:62:fb:1e:c0:f7:21:08:df:5a:cf:
         ef:7e:58:bc:e9:96:38:45:f3:10:bc:90:31:be:16:53:0f:d6:
         62:67:b8:46:69:03:2f:6b:b6:31:7a:d5:e7:42:bf:be:04:8c:
         1c:79:6e:5e:b1:bc:87:3d:b3:a0:ce:e8:c8:49:d9:0e:b5:f8:
         e0:77:65:c4:cb:e5:54:01:5f:a4:fc:d3:c0:e9:30:96:18:08:
         2f:b4:aa:52:10:e2:96:6e:d7:9a:cf:ed:c9:43:70:1a:8a:35:
         cd:06:c2:c3:3a:25:da:46:7c:92:6f:59:85:62:65:c0:55:46:
         e1:d6:a1:2c:2a:3f:f9:b7:7d:5e:e9:a1:61:1a:2f:93:b7:b3:
         86:a5:00:c3:a2:a3:f2:aa:d5:d9:c1:25:dd:fd:d4:6c:1c:4c:
         2f:c6:52:66:52:04:00:bf:c9:4f:22:78:aa:36:08:b1:16:64:
         e8:76:bd:6b
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgIDATdVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMTEyOTE0NDMxOVoXDTIyMDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQz
NERFQjU3OTNDRjZBMDFBMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuiJIfsXsE/6rbsBKhyby1sQnHg/Alg34i8qEf2Yios5MCh8QuI+bceE0rASR8
9LvuHqPeMU7f0ezPl93EflRzjLyTyzSmTqt2LMzxoCPd+Vx5RSxS+ZanlhynapEZ
+Kr/8+iltBPoTiTwxQY086ETOJWa2TsnF2i5nwQoJs4m3r/jc2Sw/SM10zVB81DE
89gCKLjJOTANPNaZx+hmsCezkYlYVwY5Oi3S3BojZwQIP3RBeX6sNf3Ca9vu9ldU
OrlmbOdj42AfpvquImqi+SCTxYMF33XmDTjhNonCBuIPnyDYGWQ5ssBlhpfF1HQo
LZBaJy2ttP1kF9yJI+7m95bXAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUG0PzVWVt
EI4w0YQ03rV5PPagGjAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZCMEVBLzREOEU0OUIwMEI3NDExRUFBNTg0MDAxQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldW
dEVJNHcwWVEwM3JWNVBQYWdHakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAOfEAgMCKFQwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAItdPgD
BAJn5AAwDQQCAAIwBwMFACQA3IAwDQYJKoZIhvcNAQELBQADggEBANGv756bgCbm
NFICu99fr2H+s8qKsEDSPpDZZ+Xgy96avLBs3QL9XSKEiafibTIdg/7BzqVeQQ/k
DSeazu0b3rGRWd7YpuhFd35d4kfiBQVcYvsewPchCN9az+9+WLzpljhF8xC8kDG+
FlMP1mJnuEZpAy9rtjF61edCv74EjBx5bl6xvIc9s6DO6MhJ2Q61+OB3ZcTL5VQB
X6T808DpMJYYCC+0qlIQ4pZu15rP7clDcBqKNc0GwsM6JdpGfJJvWYViZcBVRuHW
oSwqP/m3fV7poWEaL5O3s4alAMOio/Kq1dnBJd391GwcTC/GUmZSBAC/yU8ieKo2
CLEWZOh2vWs=
-----END CERTIFICATE-----

Generated at Mon Nov 29 16:36:53 2021 by LibreSSL & rpki-client.