RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer (download)

Subject key identifier:   4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
CA Repository:            rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: AS: 133191
    1: IP: 103.133.213.0/24
    2: IP: 103.133.236.0/23
    3: IP: 103.255.30.0/24
    4: IP: 2001:df1:5800::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81508 (0x13e64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  6 16:35:25 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bd:bf:d8:45:8f:7e:42:b2:21:0e:55:70:c7:
                    03:69:b4:7f:7b:94:a5:7b:ff:80:26:a9:cd:eb:01:
                    23:17:8f:9b:29:11:d8:65:58:fb:6e:79:39:60:cb:
                    89:e0:aa:d9:11:e4:40:e8:40:58:bf:6f:8f:48:90:
                    6a:c5:ab:8f:c2:15:d2:2f:f3:50:c1:19:71:84:97:
                    db:c9:f0:87:9a:de:a5:0b:51:dc:3b:7a:5c:3d:60:
                    21:2d:b3:22:d2:af:c3:1b:80:ba:b2:df:a5:70:79:
                    f9:a1:ed:36:c6:64:5b:22:35:0a:0b:dd:dc:95:90:
                    79:3b:bd:ea:a9:c4:63:fb:c2:13:01:4e:40:09:b4:
                    72:7a:1f:a4:a0:05:60:82:47:78:12:9e:e2:b6:5b:
                    78:16:13:73:05:9b:3b:5b:d2:f6:cb:a7:32:de:d3:
                    5e:3a:49:08:bd:1d:70:9c:a4:2d:4d:ad:62:e4:ff:
                    99:27:c0:69:33:be:1b:86:ae:87:b3:4f:58:71:7e:
                    0a:b9:a2:5f:e8:fc:fa:a1:55:08:a0:82:d9:c2:19:
                    0a:d9:e4:c3:65:e1:66:af:f1:d0:b8:98:d1:78:74:
                    a2:84:04:2e:36:e1:fd:5c:ee:68:5e:cb:bb:36:0e:
                    db:ec:ba:b7:d9:0b:99:fc:85:ff:4e:9b:26:4e:29:
                    85:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133191

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.213.0/24
                  103.133.236.0/23
                  103.255.30.0/24
                IPv6:
                  2001:df1:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:f5:af:1f:05:62:ce:e1:ee:41:b7:2c:c2:56:e7:1f:f7:
         27:0b:a4:3d:bc:7c:de:93:c7:c1:29:26:04:f6:4c:32:36:b5:
         e3:4f:ff:d5:03:b9:ec:b5:ba:51:15:14:c1:f2:cd:dd:21:10:
         7f:0a:2f:55:2c:31:74:9a:7c:38:d2:d2:07:b3:a0:a4:31:4a:
         41:a7:59:81:9b:53:b1:96:b2:e6:02:e9:46:02:2f:c5:a1:88:
         32:a5:69:69:b3:ea:8f:d2:0e:e3:40:0c:93:cc:6e:12:5f:69:
         21:3e:b3:70:07:94:2d:23:90:d6:da:11:79:e3:ed:57:70:11:
         ff:14:37:e7:aa:5b:b6:45:68:e1:cd:3a:b6:3b:5d:fd:58:58:
         17:1e:ee:29:b9:18:ee:0f:f0:2d:a2:cd:f2:d3:d1:9a:97:13:
         4e:09:bf:34:18:6c:56:70:36:6a:41:59:2f:ba:a2:7b:2c:40:
         c2:bf:59:16:c0:c6:0b:de:50:85:e7:92:d9:8e:c9:c5:08:ec:
         6c:3f:02:54:39:cc:2f:2c:c4:bd:6f:d1:31:6a:0a:a2:10:15:
         50:cb:d3:12:9b:35:92:11:ab:c5:67:a0:da:dd:4b:73:e8:b5:
         e4:64:06:32:67:ad:b4:b7:34:1d:0d:a7:a6:df:62:a9:ee:4f:
         88:c9:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Jan 6 18:28:58 2022 by LibreSSL & rpki-client.