RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer (download)

Subject key identifier:   1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
CA Repository:            rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 9347
    2: AS: 24391
    3: AS: 38015
    4: AS: 38174
    5: AS: 38461
    1: IP: 120.29.232.0/21
    2: IP: 123.242.240.0/20
    3: IP: 202.60.60.0/22
    4: IP: 202.61.8.0/22
    5: IP: 202.91.136.0/21
    6: IP: 203.189.176.0/21
    7: IP: 203.191.34.0/23
    8: IP: 2406:37c0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67539 (0x107d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 18 14:48:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:08:4f:3c:06:74:d9:00:f8:6d:b4:d2:e1:
                    3c:79:93:b7:5c:f4:b1:5f:b3:a3:ed:ec:ac:2c:fd:
                    1f:d6:29:87:7d:bc:dc:b0:a0:b0:99:99:e4:3c:9d:
                    25:af:11:23:b1:97:21:6d:c4:87:b5:93:c0:3a:2c:
                    8f:66:8e:27:08:78:c6:fc:a2:2c:e6:32:a4:f2:fa:
                    15:3b:6d:43:ea:a8:ed:99:7a:62:61:dd:de:de:0b:
                    df:ca:8a:8d:f7:64:b8:a4:3c:c1:3f:33:ec:b2:1e:
                    3c:69:70:cf:af:8d:69:34:01:89:58:96:ae:b8:f9:
                    63:6a:fa:77:3f:99:5f:59:50:06:62:04:b7:ff:1c:
                    c6:77:49:1b:ff:92:39:a3:77:00:0f:f5:4a:df:cc:
                    09:b4:e3:0b:25:c3:a9:64:ff:0a:a3:f0:ca:9f:f0:
                    fa:01:1a:7f:9a:75:57:5a:57:48:e2:66:72:56:79:
                    00:48:3e:ea:8b:04:cb:0c:1e:d2:e3:54:17:8d:30:
                    3e:ff:cd:5d:4c:5f:e2:e1:09:9f:b6:9f:36:08:09:
                    80:33:aa:89:73:a2:54:82:df:0f:b2:19:a2:7a:bc:
                    21:60:b9:13:54:2c:c2:17:98:e8:ec:35:15:3a:bf:
                    df:ab:5d:84:10:a7:19:c4:b3:3f:eb:a2:06:91:47:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9347
                  24391
                  38015
                  38174
                  38461

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.232.0/21
                  123.242.240.0/20
                  202.60.60.0/22
                  202.61.8.0/22
                  202.91.136.0/21
                  203.189.176.0/21
                  203.191.34.0/23
                IPv6:
                  2406:37c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:0d:e9:fc:3b:5f:cb:c9:76:d5:4d:34:55:ad:f0:0b:68:e8:
         2f:28:cb:8a:7f:eb:e3:82:6f:2c:e2:c1:6b:5f:38:5e:23:03:
         c2:53:91:5e:a9:a5:7d:91:0e:d8:0c:4e:61:e9:21:53:68:58:
         d9:af:5d:19:a2:c3:c6:db:f9:26:74:e3:ab:aa:37:3f:67:31:
         7d:86:e0:96:8f:da:fc:01:12:6f:d6:2d:85:d8:91:30:cc:15:
         04:8b:af:93:d5:de:70:bd:52:ed:49:60:6b:e6:0f:da:ba:1b:
         6c:0a:e9:b9:4e:7f:17:96:1d:a1:d1:39:56:ff:d9:bd:54:c5:
         6a:58:0a:0f:2c:47:49:c5:87:80:87:ef:dd:13:87:12:1b:01:
         98:72:16:96:65:3e:4d:58:55:2f:6a:99:7e:85:db:8e:be:70:
         8f:af:c5:4c:5a:2e:ab:bf:9a:05:b2:df:3e:d2:d0:bc:aa:73:
         57:ff:f3:0a:98:9b:e2:a7:d8:fc:9f:1c:85:64:67:4d:ad:aa:
         32:41:49:89:08:44:72:00:83:82:56:05:3a:7b:60:8d:0d:57:
         ff:a2:e2:6f:35:62:20:de:67:17:52:fd:d2:af:88:bc:85:fb:
         d8:97:35:22:53:75:f0:1e:01:11:6b:9f:6c:47:13:bf:4b:9f:
         9b:71:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:28 2021 by LibreSSL & rpki-client.