RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer (download)

Subject key identifier:   26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
CA Repository:            rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: AS: 131183
    1: IP: 103.103.239.0/24
    2: IP: 103.111.34.0 -- 103.111.36.255
    3: IP: 2402:9dc0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81445 (0x13e25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  5 12:56:40 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:17:4c:5a:26:c7:50:8a:fd:3f:0d:4d:ab:
                    11:bd:90:92:99:67:df:5a:a8:72:cd:db:d1:33:79:
                    6c:ed:ee:19:16:9f:c7:a1:ac:cd:8f:57:10:2b:4e:
                    82:ab:13:98:34:ae:b0:82:76:4b:9a:5f:2a:ae:5b:
                    fd:98:4f:b2:37:0e:7d:6d:cf:e7:d6:bb:24:15:fb:
                    8b:d2:35:22:d3:81:ec:a5:18:6b:23:4e:77:e8:53:
                    65:9b:fd:2b:e2:50:a6:48:80:8d:5e:df:95:e7:01:
                    26:72:fc:a7:76:ca:d1:12:d9:59:cc:d4:3d:a0:b7:
                    9e:08:72:a3:8c:88:af:b7:c7:0e:1d:da:8a:c0:50:
                    13:ab:c5:d2:8d:8c:2f:42:0d:d0:b6:65:c2:be:08:
                    e2:57:4b:36:ee:66:8e:f2:18:3e:fc:2f:c4:b0:2e:
                    a9:7d:fc:52:99:e8:48:f5:86:88:3e:31:b1:82:16:
                    34:fb:00:65:03:23:8e:6a:df:9b:56:0e:44:37:3c:
                    5e:d8:8f:b4:e9:19:f8:88:b3:d0:8e:e1:4d:9e:74:
                    d8:ce:1f:8f:43:ae:b0:79:c5:0d:b2:19:9a:51:10:
                    3d:b3:a6:d7:fb:ad:7e:34:60:bb:bf:06:1e:09:55:
                    1e:1f:8c:cf:bb:f5:c6:ca:62:aa:aa:8d:93:dd:28:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131183

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.239.0/24
                  103.111.34.0-103.111.36.255
                IPv6:
                  2402:9dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:9b:2c:88:e3:ed:c8:04:65:6a:10:61:e3:63:b6:f8:e3:dd:
         e4:b5:aa:c5:79:96:31:82:85:bd:d1:96:f6:4b:a6:69:60:59:
         39:69:e1:ce:7a:31:e2:07:35:7b:a5:bb:22:d6:ee:d7:43:00:
         6d:66:4a:4b:96:43:96:f0:5b:48:6e:db:8e:f8:7c:74:ed:65:
         5d:02:35:72:0a:28:bd:04:28:a3:7f:76:78:b8:3c:14:4d:fb:
         0b:0f:19:ef:17:a5:93:d3:80:37:15:be:67:f8:74:2b:fb:c4:
         fe:26:63:47:75:25:72:88:2b:fd:1e:9f:9d:57:fa:c5:50:3c:
         47:e0:66:c0:8f:81:10:b0:6d:b7:62:b4:8f:44:8e:06:78:c1:
         89:bd:37:2b:ef:94:12:25:ed:6d:68:6b:55:db:f8:96:ab:c8:
         b9:fb:6e:97:ac:80:9f:20:13:95:70:34:1e:e2:62:d5:2b:b3:
         41:c7:2a:bb:72:cf:1b:a8:51:29:64:a2:41:eb:38:63:98:02:
         8d:b5:90:5d:39:13:98:84:6b:f1:be:83:a8:ca:29:31:35:3b:
         75:ac:6f:06:69:8d:24:b0:60:66:f7:bd:21:81:f8:4f:c1:2a:
         6a:41:da:72:bf:b9:fe:67:98:ca:45:2e:5f:b2:a4:51:00:8d:
         7e:f3:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Jan 5 14:52:48 2022 by LibreSSL & rpki-client.