RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgNBjl0erIFKLdVj5EPNwTOv6Lw.cer (download)

Subject key identifier:   2E:03:41:8E:5D:1E:AC:81:4A:2D:D5:63:E4:43:CD:C1:33:AF:E8:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/LgNBjl0erIFKLdVj5EPNwTOv6Lw.mft
CA Repository:            rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: AS: 137254
    1: IP: 103.106.24.0/22
    2: IP: 2402:3840::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgNBjl0erIFKLdVj5EPNwTOv6Lw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81221 (0x13d45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 14:53:03 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A919610F/serialNumber=2E03418E5D1EAC814A2DD563E443CDC133AFE8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d1:75:cb:17:0c:22:c5:39:2c:26:e0:44:9a:
                    bd:e0:7a:99:a7:b9:70:5b:82:19:72:f4:d8:c7:75:
                    0f:64:f0:5d:da:a7:b3:4a:df:d8:c7:be:a1:a8:86:
                    8f:45:fd:b4:c8:80:22:4f:df:78:34:2b:c4:44:14:
                    0b:c4:c6:58:ef:e4:02:ff:ab:d6:51:48:64:6e:ec:
                    2a:93:93:fd:9b:fa:41:b9:0b:20:0f:19:62:fc:7e:
                    30:43:2b:a9:e9:10:1b:16:70:9a:74:dd:94:bc:fe:
                    01:24:a3:51:ef:80:60:68:ce:93:b9:66:38:6c:4b:
                    1f:76:34:61:01:31:a7:4b:53:b5:03:99:8c:56:2f:
                    5c:96:27:96:ab:8d:e3:97:6a:1f:69:f6:8d:d8:44:
                    d8:97:db:1d:e4:2c:ca:32:d7:8f:2a:8b:05:33:ee:
                    da:5d:d2:24:98:6e:7b:10:87:f6:99:54:c1:02:4d:
                    e0:18:d4:81:c9:80:07:ad:c9:d4:96:f6:46:50:ca:
                    e9:cf:d1:a7:05:aa:b6:6a:bc:9b:12:8b:1a:d6:e1:
                    18:9f:af:ff:74:ef:10:69:d6:79:9c:0f:d9:24:b0:
                    d0:12:9e:a4:29:f1:fb:50:4e:9e:e9:5a:be:d7:57:
                    60:bc:14:bd:4f:e5:76:c8:5d:e8:af:5a:58:c8:cc:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2E:03:41:8E:5D:1E:AC:81:4A:2D:D5:63:E4:43:CD:C1:33:AF:E8:BC
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/LgNBjl0erIFKLdVj5EPNwTOv6Lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137254

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.24.0/22
                IPv6:
                  2402:3840::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:5b:85:6c:7f:2b:f8:5d:ee:4a:e1:ea:42:a5:7a:0e:83:aa:
         1b:47:dd:8f:c7:3c:5f:48:69:12:27:b1:20:eb:d3:6d:62:f8:
         b0:e3:46:10:2d:cb:06:63:12:df:a7:78:ce:48:5c:88:fd:7b:
         e7:46:57:ed:dc:6d:dd:6c:bd:66:1b:71:37:7b:19:44:3d:93:
         72:60:e8:7f:b1:95:a8:a9:a6:9c:d9:52:80:e6:f1:c8:01:b1:
         c1:13:e4:7c:a1:83:e3:15:e3:60:52:b8:ba:76:73:eb:b3:3f:
         a4:5b:90:2b:92:dc:23:cf:67:29:5a:87:47:ba:31:64:d7:58:
         b6:3e:bf:86:2f:c6:af:78:82:d8:9f:35:f2:57:35:53:e9:11:
         df:33:28:d5:86:20:6b:8a:83:2c:61:a3:87:4d:40:3e:7f:6d:
         e1:09:86:f5:cb:ed:33:4a:d3:8c:34:e0:95:24:27:61:0f:eb:
         40:f7:9f:8d:40:5d:03:33:0d:10:e7:f3:16:7c:6f:3b:ff:81:
         e7:74:2c:64:b6:76:64:e4:4a:d7:48:ec:cc:97:c0:b0:71:5b:
         16:82:8a:96:fe:6c:10:14:82:0d:8e:64:26:73:72:53:be:f6:
         4e:1a:a2:ee:5a:c2:e0:8b:c0:ab:ce:ba:37:31:04:e4:f2:1b:
         2f:38:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Dec 31 17:45:16 2021 by LibreSSL & rpki-client.