RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer (download)

Subject key identifier:   43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
CA Repository:            rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 136214
    1: IP: 103.83.204.0/22
    2: IP: 203.89.120.0/22
    3: IP: 2401:5740::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66177 (0x10281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 16 20:19:58 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:ff:eb:c7:76:7c:0e:c6:16:e9:a0:31:43:
                    fd:0c:b6:a0:29:4d:15:84:37:2a:f9:0d:d1:c8:ad:
                    e0:a9:c3:a1:8e:06:36:67:0a:fa:15:d5:22:50:47:
                    25:35:d1:f4:19:9a:e8:a2:2a:62:44:03:fc:87:d6:
                    8c:c6:ee:ac:79:d6:ce:4b:c3:ec:ca:f4:78:0f:0e:
                    2d:2d:e2:e4:dd:23:69:6b:42:b8:38:ee:50:91:c9:
                    5c:57:ba:68:b3:b5:2d:96:0a:54:60:84:cf:23:fa:
                    7f:75:00:b2:95:9b:16:59:74:7f:8e:74:06:61:15:
                    0a:fc:50:76:13:94:3d:23:ee:df:fa:8b:ac:14:7d:
                    c1:dc:df:88:06:d6:44:b0:b9:cd:94:50:92:9f:dc:
                    20:d0:99:78:cc:82:00:99:51:fe:f0:92:b3:94:2d:
                    55:6f:d3:21:9b:a9:a9:29:57:40:e5:2b:44:22:a2:
                    f7:ac:11:ab:93:51:ad:5f:ca:ba:65:4e:ef:0b:ae:
                    02:ac:6f:f8:09:f6:d1:b2:07:fc:b6:0c:5c:bc:43:
                    f1:f8:bc:0a:95:81:2f:16:2e:fa:f0:73:91:82:3c:
                    bb:54:82:ed:d7:b9:47:c4:99:bd:b0:fb:b7:5d:1e:
                    99:6b:b0:b6:07:20:2c:2e:0f:a8:41:6c:b1:7e:2f:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136214

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.204.0/22
                  203.89.120.0/22
                IPv6:
                  2401:5740::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:36:33:22:0a:c7:4d:f0:2d:58:21:47:4f:97:f7:71:3a:70:
         7f:d6:b2:77:50:bb:f0:58:2a:1e:d8:6b:11:19:8b:f5:9f:3c:
         38:6b:e5:c5:25:9a:78:64:57:87:9f:b5:ca:5b:29:e6:41:67:
         8d:de:46:27:d4:00:1f:65:e2:c3:5d:c0:97:ac:69:30:f8:38:
         0d:9f:d6:e4:74:c7:44:61:26:23:17:9e:e2:62:52:8f:5e:5f:
         34:20:61:c8:30:bc:ab:52:66:27:de:09:23:fb:30:ef:a3:a4:
         35:03:7f:b3:98:a6:99:50:82:cc:2a:ab:85:b8:f2:22:f4:0a:
         ad:ee:d2:96:79:d1:c4:6d:3b:67:39:8f:f1:bd:1c:84:82:e2:
         7a:65:8c:0d:84:f5:69:db:be:d5:11:0a:3d:7c:65:17:46:8e:
         33:7f:e0:da:5c:83:e7:c7:02:61:56:31:d2:3a:f1:20:a6:4d:
         8f:2a:71:01:5d:02:dc:72:64:43:a6:d3:9e:f2:a0:55:62:d3:
         06:14:6a:4d:dd:35:2e:ab:eb:34:14:11:98:be:99:1a:d7:7e:
         9d:ae:de:2c:1d:8a:49:62:a8:10:8f:e8:8b:a1:bd:42:54:ab:
         3a:c7:4e:2a:1e:2d:e1:69:57:c9:ae:6d:02:53:b2:e1:04:69:
         05:92:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:04 2021 by LibreSSL & rpki-client.