RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer (download)

Subject key identifier:   2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft
CA Repository:            rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 131476
    1: IP: 43.245.168.0/22
    2: IP: 103.4.236.0/22
    3: IP: 202.81.4.0/22
    4: IP: 2001:df0:23d::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74546 (0x12332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  9 13:14:59 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:7e:76:30:6b:72:2a:9e:65:d9:ab:63:a2:
                    52:3b:ec:b1:1a:70:ed:f6:8e:b2:16:67:5e:1b:34:
                    d9:d1:a6:e9:37:3c:40:74:35:d6:da:90:01:b0:d4:
                    d3:84:11:73:e5:83:fe:31:1c:ec:15:83:1c:ab:7c:
                    e6:ad:62:c6:d5:33:fc:84:63:96:64:63:bd:dc:d2:
                    81:3d:a2:12:c3:72:98:bf:2f:67:ba:94:d0:1d:21:
                    22:4f:51:f8:52:04:97:89:9a:cd:6b:05:8b:c2:b4:
                    f7:b2:7a:3a:68:df:53:d9:9e:4d:00:45:87:1a:6f:
                    60:97:c6:42:f9:50:eb:6b:d8:c9:05:64:0c:70:fd:
                    8f:99:ff:c8:10:2c:2f:9d:23:89:be:ee:23:e0:57:
                    c3:b8:a6:f1:b1:99:57:e2:55:a4:ad:4e:88:41:6f:
                    ab:d7:77:66:1e:98:ac:06:55:a3:19:9a:19:61:95:
                    e1:af:af:89:3a:4a:e9:cb:71:ce:92:4c:7d:bb:c3:
                    78:19:2e:d0:c9:b7:6c:4b:64:31:19:7a:56:a6:90:
                    f6:28:f6:73:29:3f:e2:7a:0c:6d:53:ac:65:a2:c8:
                    6f:ec:55:ca:ca:de:be:3c:52:09:32:9c:f3:dc:0f:
                    1a:b7:db:11:d0:01:c7:13:6d:2c:83:4d:47:53:f9:
                    05:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131476

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.168.0/22
                  103.4.236.0/22
                  202.81.4.0/22
                IPv6:
                  2001:df0:23d::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:3e:c6:8b:7b:67:62:19:71:c7:a8:1d:6c:4e:4f:26:26:
         02:9d:45:c6:94:88:c4:a0:a3:6a:c2:9c:4e:f6:3a:5f:d0:06:
         5b:f9:79:1f:be:61:cc:d7:3a:39:34:d2:a2:ab:00:02:fa:ce:
         37:5d:22:fe:95:5e:5f:0c:53:c7:65:27:1d:3b:91:db:8f:e1:
         89:f9:c9:9b:22:ed:19:8a:93:1a:14:1c:bf:9f:00:c3:a4:75:
         ef:a5:c2:95:5b:e5:20:1c:29:e8:a3:c6:e3:7b:41:6d:1f:62:
         32:3c:1a:af:4a:ad:b6:40:5b:0c:a9:55:d9:58:60:5f:cf:18:
         f8:2c:bc:7d:54:ee:14:fe:a5:4e:01:ef:96:ad:38:6b:4b:ca:
         fc:7c:31:69:87:74:4b:d8:d7:d2:39:98:c4:ab:94:75:e7:ae:
         04:71:83:45:0d:98:6f:e8:7f:e7:72:c4:da:18:cd:6a:ff:ce:
         75:93:95:41:3f:6b:39:f2:42:3f:98:e8:f4:3d:11:bf:f9:7f:
         4d:46:5a:08:32:19:05:71:1d:14:2e:fb:ae:7a:64:0c:b3:e3:
         c4:17:75:ba:35:8c:6e:ea:7b:c5:ce:2f:c5:ae:a0:23:f8:06:
         6b:a2:3c:b3:4e:3e:3a:f9:58:de:e9:14:58:6b:53:bb:2d:12:
         97:b8:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:44 2021 by LibreSSL & rpki-client.