RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer (download)

Subject key identifier:   1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
CA Repository:            rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: AS: 7654
    2: AS: 24299
    3: AS: 38168
    4: AS: 38889
    5: AS: 45254
    6: AS: 55802
    7: AS: 136947
    1: IP: 202.5.80.0/20
    2: IP: 202.6.16.0/20
    3: IP: 202.43.32.0/20
    4: IP: 202.57.128.0/18
    5: IP: 202.142.192.0/19
    6: IP: 203.153.160.0/19
    7: IP: 2406:400::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80363 (0x139eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 10 02:51:33 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:64:20:22:6e:b7:60:a3:cc:af:31:25:f8:
                    e9:1e:9d:4b:50:d6:a3:e2:9b:09:59:de:7c:be:a7:
                    50:cf:e1:f0:13:91:d3:d1:31:d4:f4:58:27:8b:8e:
                    26:29:1f:0d:c5:72:42:56:2d:ff:c6:f8:58:34:ff:
                    04:a9:b8:b1:e4:50:1d:4b:e6:a6:87:21:e3:19:1f:
                    16:9a:45:52:61:b7:1d:6b:26:91:f1:07:fb:82:3c:
                    2e:af:5b:cc:2a:f6:fd:ba:f1:c7:03:7d:3d:6d:8d:
                    ec:93:67:6d:96:d6:2a:f2:f6:3f:c1:c4:e3:b4:c3:
                    fa:b8:00:4c:22:8d:b3:8a:21:0e:94:80:d7:8d:31:
                    71:c4:ec:78:65:3e:e2:f2:d1:62:42:1d:2f:25:47:
                    61:d6:86:18:fa:ec:e7:f3:83:f6:90:5f:10:42:00:
                    96:c5:d0:c8:54:14:9b:67:43:4d:12:a9:9a:7a:8f:
                    8e:80:fb:3f:aa:ad:b9:56:89:6c:88:7f:9a:3a:a0:
                    42:62:04:70:31:9f:7d:07:93:11:52:f4:5d:42:f8:
                    cd:4f:6d:68:6e:9c:2a:48:a4:fa:e7:5a:67:96:a7:
                    51:41:21:5f:44:84:7d:7b:21:62:46:87:85:e7:85:
                    93:59:ca:c7:33:28:98:fc:fa:05:dc:42:94:d4:c4:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7654
                  24299
                  38168
                  38889
                  45254
                  55802
                  136947

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.80.0/20
                  202.6.16.0/20
                  202.43.32.0/20
                  202.57.128.0/18
                  202.142.192.0/19
                  203.153.160.0/19
                IPv6:
                  2406:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:d8:c8:36:89:d3:11:ba:3a:22:d0:88:39:cd:09:8a:90:a1:
         45:c7:90:d2:28:30:79:d3:01:eb:6f:42:65:cf:22:ca:fe:6f:
         9a:50:42:f6:b7:58:59:f7:49:9c:c3:9b:df:d5:9e:84:ae:76:
         be:73:ad:28:5e:b9:c7:3d:a1:52:b5:7e:ad:b9:54:e3:6b:5d:
         14:0d:bb:42:08:55:53:1a:4b:d8:b8:5d:0b:3e:24:89:0f:0a:
         da:fe:09:25:ee:c6:a4:0c:d4:b7:6e:0c:60:36:0d:cc:f9:66:
         95:07:60:b5:28:3d:c4:ab:b9:07:5e:64:ef:db:96:b0:4a:29:
         22:bc:0d:ea:a1:9a:79:bc:d3:de:02:aa:02:69:54:bc:6a:3a:
         66:95:53:3c:a5:f1:60:72:2a:be:e3:2d:d9:04:e0:81:8b:10:
         c9:b2:8e:52:ed:80:32:88:dd:a5:79:b0:17:67:9d:78:e2:bb:
         2b:15:b2:0c:2a:14:b4:52:37:92:ac:46:8a:cf:97:d9:7f:65:
         c3:94:21:18:07:66:ef:20:73:70:e1:eb:f7:c1:ab:37:4f:b9:
         90:d2:73:77:16:6d:e5:f0:77:ca:a8:be:bc:c9:7c:2f:88:d9:
         9c:4d:70:dc:8e:77:77:a3:92:43:58:cd:c2:0f:0f:23:4b:72:
         6f:29:3d:0f
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIDATnrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMTIxMDAyNTEzM1oXDTIzMDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0
NTlDRTIxMEE3NDAwMTA0RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0Z2QgIm63YKPMrzEl+OkenUtQ1qPimwlZ3ny+p1DP4fATkdPRMdT0WCeLjiYp
Hw3FckJWLf/G+Fg0/wSpuLHkUB1L5qaHIeMZHxaaRVJhtx1rJpHxB/uCPC6vW8wq
9v268ccDfT1tjeyTZ22W1iry9j/BxOO0w/q4AEwijbOKIQ6UgNeNMXHE7HhlPuLy
0WJCHS8lR2HWhhj67Ofzg/aQXxBCAJbF0MhUFJtnQ00SqZp6j46A+z+qrblWiWyI
f5o6oEJiBHAxn30HkxFS9F1C+M1PbWhunCpIpPrnWmeWp1FBIV9EhH17IWJGh4Xn
hZNZysczKJj8+gXcQpTUxFKXAgMBAAGjggNYMIIDVDAdBgNVHQ4EFgQUGu+1HeyO
sHlip15FnOIQp0ABBPswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQzREFFL0ZFRkJDQzhFMUQ4RjExRTJCNTRBN0RFRjA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEM0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5
T3NIbGlwMTVGbk9JUXAwQUJCUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQgBAf8EJzAl
oCMwIQICHeYCAl7rAgMAlRgCAwCX6QIDALDGAgMA2foCAwIW8zBMBggrBgEFBQcB
BwEB/wQ9MDswKgQCAAEwJAMEBMoFUAMEBMoGEAMEBMorIAMEBso5gAMEBcqOwAME
BcuZoDANBAIAAjAHAwUAJAYEADANBgkqhkiG9w0BAQsFAAOCAQEA0NjINonTEbo6
ItCIOc0JipChRceQ0igwedMB629CZc8iyv5vmlBC9rdYWfdJnMOb39WehK52vnOt
KF65xz2hUrV+rblU42tdFA27QghVUxpL2LhdCz4kiQ8K2v4JJe7GpAzUt24MYDYN
zPlmlQdgtSg9xKu5B15k79uWsEopIrwN6qGaebzT3gKqAmlUvGo6ZpVTPKXxYHIq
vuMt2QTggYsQybKOUu2AMojdpXmwF2edeOK7KxWyDCoUtFI3kqxGis+X2X9lw5Qh
GAdm7yBzcOHr98GrN0+5kNJzdxZt5fB3yqi+vMl8L4jZnE1w3I53d6OSQ1jNwg8P
I0tybyk9Dw==
-----END CERTIFICATE-----

Generated at Mon Dec 13 14:48:02 2021 by LibreSSL & rpki-client.