RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer (download)

Subject key identifier:   21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
CA Repository:            rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 45410
    1: IP: 202.168.64.0/20
    2: IP: 2401:b780::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66647 (0x10457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 12:02:09 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:f2:48:65:47:d5:2c:38:58:b8:b7:14:b2:
                    5e:a6:35:ca:d9:f7:b6:ed:cb:a4:b6:31:74:27:6e:
                    4f:4f:7d:28:99:b1:32:59:32:2f:bc:0b:47:98:5e:
                    90:36:a5:02:2c:a0:59:a6:8b:e8:33:92:eb:d4:91:
                    08:65:1a:27:50:02:11:43:63:74:80:c2:93:23:30:
                    ba:a9:16:b3:51:e6:b9:f1:f5:a9:09:31:b8:6c:75:
                    eb:6f:cf:e3:9f:01:63:32:01:e5:71:b3:58:af:cc:
                    ca:0c:f2:f8:dc:6b:35:32:85:24:01:93:44:21:a6:
                    b7:42:7f:26:a9:c3:80:b5:39:6d:25:71:4d:3e:c0:
                    4c:6e:8e:4a:e7:ce:a4:43:ee:87:0c:be:3c:46:12:
                    d2:f5:cb:50:fe:6f:67:0d:5e:e0:77:6c:a2:6c:c1:
                    94:66:19:d4:37:34:85:09:69:e5:81:5a:c8:dd:4d:
                    5a:b5:4b:71:6b:dc:01:32:81:33:53:69:5a:81:f9:
                    33:6c:71:e7:88:42:cd:d2:fa:f3:7b:23:60:cc:2e:
                    d4:94:b5:84:92:9a:2d:4d:ee:97:5d:64:8d:b1:82:
                    7a:dd:0e:e8:c4:cb:a3:6d:c4:f4:59:b3:03:86:7a:
                    42:24:3f:6f:28:44:39:6a:ab:dc:c8:da:15:af:eb:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45410

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.64.0/20
                IPv6:
                  2401:b780::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:5b:3e:e3:53:6b:12:9c:e0:d7:bc:36:2f:fa:47:c0:97:b2:
         31:86:c3:d0:1e:7f:ba:8b:fa:fc:d1:86:9d:77:c5:9e:e2:b2:
         9a:b7:82:36:99:25:cd:d5:11:17:ec:db:6d:90:4f:f8:d2:b0:
         16:3f:cb:ac:00:25:78:fa:5e:d3:fc:23:5b:dc:d5:27:fd:68:
         26:47:b5:8b:14:56:29:a0:93:e6:e2:b5:84:cd:94:86:0a:36:
         4c:d3:58:87:ad:60:e9:d3:74:46:f6:2b:4a:2d:3d:dd:4a:e7:
         34:0e:13:78:0a:bf:9e:23:4d:03:09:b1:5b:a9:b6:00:64:c4:
         18:46:e7:91:10:1c:9a:4e:13:86:25:b4:b6:74:11:4a:e7:a4:
         96:d1:c5:8b:9d:2f:d5:cf:31:5b:20:af:bd:05:af:b6:ef:20:
         19:47:72:5a:d9:90:7f:25:3e:48:01:9a:c0:81:f0:8f:6e:ed:
         f5:17:f7:cc:29:36:c2:f3:21:6d:6f:a0:9a:cb:e6:25:91:e8:
         54:53:aa:cc:6b:46:fc:01:5c:7b:d7:7b:17:d9:f1:d7:61:48:
         fa:c0:eb:0f:4c:f0:2c:55:53:9e:de:89:15:32:7c:2c:9c:1c:
         4a:cb:aa:e5:51:a4:f1:94:fa:7c:54:f4:f1:eb:55:5f:ea:a4:
         65:ab:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:32 2021 by LibreSSL & rpki-client.