RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer (download)

Subject key identifier:   20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
CA Repository:            rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 135347
    1: IP: 103.214.206.0/24
    2: IP: 2001:df0:4b00::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70271 (0x1127f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 17 02:30:38 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A917B44D/serialNumber=20E881FB3E3C0953C14F88BFD2DFA69308340B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:da:a4:37:f5:f7:18:84:dc:22:d7:21:5d:
                    df:85:06:f5:3b:14:66:b6:cd:42:51:e5:19:7d:dc:
                    a7:d3:2c:f6:be:57:cc:47:2e:68:07:ac:2b:8a:ba:
                    3e:22:60:0f:7a:bf:5c:40:21:6c:dd:2d:ee:08:5b:
                    5c:1e:57:da:82:05:4c:08:cc:30:02:ca:2f:91:d5:
                    6b:3b:b9:d5:da:1b:7c:1a:3b:76:26:5d:8c:36:6d:
                    18:98:97:64:8b:2e:8b:b4:28:99:70:e5:81:46:c5:
                    75:81:41:b0:97:3c:29:d6:db:f3:91:50:02:23:e6:
                    67:85:7d:18:b8:c9:ed:5c:65:d5:3b:58:7a:5d:60:
                    78:32:54:67:b8:6f:76:74:5c:ce:14:55:1f:78:3c:
                    f9:7b:62:5c:78:01:55:c9:02:63:10:d6:38:ba:8c:
                    c0:c1:4f:13:37:00:5d:a3:3f:7b:f8:1f:8e:9c:54:
                    29:51:90:04:96:21:4d:bb:c5:f6:1f:65:d1:89:ba:
                    91:7a:b4:75:8c:37:95:56:27:ea:f0:b5:7a:e2:f0:
                    35:c4:9f:c7:1b:eb:a6:83:b4:a4:91:c4:f3:68:d8:
                    36:5f:f3:d8:d3:44:64:ec:7b:1d:02:3f:93:c3:45:
                    75:73:1f:85:65:5b:11:85:94:63:c7:97:4f:ec:ed:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135347

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.206.0/24
                IPv6:
                  2001:df0:4b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:f3:d1:c3:a9:52:eb:1e:0f:b8:4e:5d:c0:93:4a:9f:c9:3a:
         c4:05:d2:6b:29:5f:7e:9c:65:03:af:33:c4:d0:9c:9f:62:f4:
         22:92:ed:94:f0:8a:c1:95:67:a1:b9:47:bd:76:da:c1:aa:a1:
         f1:ec:71:b9:64:a9:99:12:f8:ff:36:93:fc:85:93:20:49:e1:
         b1:ff:d8:4c:71:1d:1f:ed:1a:e0:14:b4:67:8e:10:20:7e:b3:
         f5:92:54:63:e8:9f:88:e3:1a:c5:12:e0:d6:10:a9:9f:11:0f:
         23:de:8a:8b:1e:69:52:37:70:a7:fe:c0:bc:41:b2:25:c5:2d:
         94:d2:38:d6:e5:ff:32:4a:31:9b:15:06:1b:12:5f:9c:17:a4:
         15:7a:b0:89:37:d9:e9:60:87:e6:99:02:37:09:ea:6e:33:37:
         e2:8b:18:70:d3:d5:3c:83:ba:aa:0e:55:7e:cf:fc:2b:dc:f1:
         42:81:f5:67:8e:aa:c6:cf:79:70:5f:bf:d5:dc:e6:4d:b3:00:
         ea:21:15:2d:c1:ca:16:15:18:70:4b:32:b4:be:8b:6d:6c:90:
         34:72:3d:23:23:aa:fb:21:f4:0a:06:d3:a4:83:cf:ca:6a:46:
         b7:13:04:29:96:89:a2:11:06:81:60:6b:eb:1f:b0:59:14:d0:
         41:39:c2:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:31 2021 by LibreSSL & rpki-client.