RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer (download)

Subject key identifier:   34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
CA Repository:            rpki.owl.net/rrdp/owl/0
Notification URL:         https://rpki.owl.net/rrdp/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: AS: 23959
    1: IP: 103.125.232.0/22
    2: IP: 2403:fbc0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81264 (0x13d70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 22:20:20 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:3c:f4:dd:42:d0:04:c1:b3:5c:46:6a:32:
                    76:35:c5:02:2c:44:c5:79:8d:3c:b5:c0:8b:1e:2f:
                    3e:48:cc:fb:9a:ce:e2:7c:1e:2e:fa:09:47:31:08:
                    96:ca:2b:7f:80:7a:29:51:98:65:1c:48:7c:31:c4:
                    e4:e3:bd:f9:78:21:2e:c9:76:34:40:4e:48:d4:d1:
                    da:3b:ea:db:9e:7e:18:1a:15:46:e3:1d:c2:59:a3:
                    f9:dc:13:2b:19:8d:5c:2e:1d:c6:29:27:d3:53:36:
                    21:8b:22:3d:ec:31:6c:82:bb:d3:7f:70:b0:1e:78:
                    10:8e:8e:f5:52:64:d0:8c:50:a0:fc:17:81:a6:b6:
                    9b:ab:95:af:c3:a7:48:4d:b0:6f:1e:4d:17:42:29:
                    ad:31:20:73:33:82:d8:6f:5f:88:61:92:40:0f:e2:
                    e5:dc:c9:7b:9b:85:99:14:dd:24:2b:ac:05:17:ac:
                    1a:84:10:b7:1a:bc:12:bc:29:c4:83:e9:b5:2d:3f:
                    db:5e:11:c7:bb:86:f1:46:53:26:a1:74:16:58:a3:
                    1f:d9:13:21:d2:56:31:a3:53:1d:f2:b5:af:e3:49:
                    65:2e:51:e2:8d:fc:c2:3e:09:1b:9b:4a:f0:20:9c:
                    b9:be:63:e1:55:70:f2:01:9b:44:b9:7e:38:4c:ed:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.owl.net/rrdp/owl/0
                RPKI Manifest - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                RPKI Notify - URI:https://rpki.owl.net/rrdp/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23959

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.232.0/22
                IPv6:
                  2403:fbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:62:d1:fe:5a:85:f1:d3:b5:ee:ef:13:30:9c:06:a7:b3:77:
         fc:a0:6a:97:b8:11:8c:d6:0f:e7:09:48:f4:c2:8d:33:b5:1c:
         5f:58:51:73:96:df:1e:4d:c5:d3:91:5d:b3:71:d2:2d:57:b7:
         70:9d:38:75:5b:96:67:1e:67:57:f8:4f:0b:64:04:51:a8:e8:
         1d:b3:b3:03:37:12:74:34:12:1d:df:e9:0e:73:29:2d:71:29:
         b8:64:a9:88:69:8a:49:24:bb:b3:43:36:f3:a1:ac:8b:a4:7e:
         d9:dc:06:28:22:e8:f7:24:d6:7c:6a:c1:b2:8c:b2:1a:bb:03:
         2e:7a:32:5a:f4:cb:e2:2f:b1:37:23:3f:75:13:d7:35:c0:65:
         81:4a:b5:70:49:46:56:b0:ff:9f:22:4d:73:a7:b0:93:01:91:
         8f:1d:fc:4b:62:97:7a:9b:41:de:8b:40:6f:21:07:2f:f6:74:
         d3:83:dc:ca:d2:8e:16:27:20:5e:1b:a4:68:8c:ca:dd:91:32:
         f9:f7:7a:d4:53:45:33:91:cd:ba:89:f6:f4:c1:2d:a3:65:58:
         13:e4:ab:2a:fd:1b:bc:1e:f0:c3:98:f9:64:d8:f5:f3:bc:b9:
         08:1c:e6:64:c2:00:b5:78:c5:ad:11:14:71:1c:5b:10:62:d0:
         34:ac:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 00:02:56 2022 by LibreSSL & rpki-client.