RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer (download)

Subject key identifier:   22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.mft
CA Repository:            rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-30T00:00:00Z
    Resources:
    1: AS: 24245
    1: IP: 111.221.56.0/22
    2: IP: 202.58.136.0/21
    3: IP: 2406:3800::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78708 (0x13374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  5 15:01:57 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:8b:a5:66:b5:b1:72:00:ec:44:a6:a1:fc:
                    29:9b:22:5e:0f:be:9b:e7:f2:f4:71:8e:b9:d7:1a:
                    cf:6b:88:27:e5:96:74:73:3d:4f:43:6f:e1:84:1c:
                    ca:9b:04:8c:7d:24:1d:4e:e6:b6:d8:12:92:8a:7b:
                    7c:2e:b7:9a:48:7d:8a:37:1c:88:98:cd:81:46:4e:
                    2e:d2:00:93:cf:8a:f0:d9:18:5a:0c:45:dd:7a:02:
                    d7:5f:e4:d6:b1:e7:93:6b:de:b1:cf:1a:d7:19:1e:
                    c4:55:36:e7:48:eb:d7:2b:cc:d5:3a:c7:f3:7a:de:
                    cf:e4:07:e5:a1:d1:90:f5:6f:57:9e:a5:8e:da:55:
                    d1:39:32:ff:1e:42:f4:ad:e7:54:12:7b:9d:dd:91:
                    20:a2:d6:41:0e:b9:68:aa:cc:a6:fd:fe:4f:21:93:
                    3e:b5:ba:e0:e5:94:2e:f7:29:4e:2e:87:fc:7f:64:
                    ff:b2:76:24:a9:31:df:29:3a:79:81:40:e8:18:b5:
                    7e:a6:04:ac:b7:63:53:50:f1:84:53:a2:40:75:b8:
                    00:3f:d1:90:70:33:31:e4:c1:42:df:27:65:b6:50:
                    a5:45:f5:00:2c:7e:8b:70:f1:02:06:56:fc:d2:96:
                    96:3f:11:73:59:41:5b:87:53:05:67:43:12:f4:8d:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24245

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.221.56.0/22
                  202.58.136.0/21
                IPv6:
                  2406:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:7f:56:fa:57:1c:88:8a:7f:a2:0b:d8:a0:d2:22:85:8d:04:
         2c:c5:49:ae:2d:fc:11:2d:c3:fd:fe:e0:5f:dd:41:a1:24:05:
         36:cb:36:ea:d3:f8:8a:77:63:0f:f9:b2:bb:e3:fc:f0:84:60:
         ce:ce:cd:be:5e:dc:40:6e:07:4b:f9:77:4c:d7:ce:4c:a0:f3:
         90:e3:6e:ad:3b:eb:cd:ad:a4:5f:75:88:f9:59:87:90:4a:e8:
         b0:13:c0:c3:5d:cf:a2:47:40:0c:cb:8c:ae:db:76:be:59:0b:
         b1:7a:21:6d:3c:a3:af:61:50:6f:ee:b5:c3:7e:e2:c5:5b:68:
         d2:03:f0:34:b7:72:82:fb:aa:47:5c:9d:d0:11:f9:ae:61:55:
         11:0f:0b:e4:06:18:1a:8e:e3:fa:97:d1:8c:53:58:6f:ab:cf:
         c1:84:c9:5d:3a:2f:a8:82:8f:f8:95:6d:a4:1d:66:1d:06:ea:
         66:b5:b1:6b:dc:97:04:28:b2:69:ea:a6:d6:1c:f0:77:f3:1a:
         b8:32:0f:ba:73:14:79:7a:bf:aa:92:3d:5d:c0:ba:44:45:9d:
         91:1a:d3:20:01:71:61:ad:83:7e:55:a7:90:50:3f:98:85:2a:
         d3:8a:6a:c9:44:98:6c:98:f8:c9:17:22:9d:cb:c9:da:68:2b:
         92:05:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Nov 5 17:14:29 2021 by LibreSSL & rpki-client.