RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer (download)

Subject key identifier:   4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
CA Repository:            rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 138001
    1: IP: 103.153.230.0/23
    2: IP: 2406:64c0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75639 (0x12777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  1 11:55:22 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:9f:c9:63:42:8f:df:32:00:3a:5b:9d:4c:
                    bf:0a:4a:20:9b:d3:3a:b1:35:1f:23:21:e8:d9:e6:
                    a3:e0:67:f5:d1:35:92:92:7b:dc:d2:5d:16:c3:6d:
                    cc:b5:cf:c1:13:e5:f1:bc:54:52:1f:6c:e3:42:ec:
                    ec:06:bf:5b:dc:bf:d8:05:36:e6:88:9b:1e:06:56:
                    31:bd:37:ab:85:6b:d1:96:fb:2e:14:2d:9d:2f:11:
                    53:74:b6:5f:3e:d4:e8:ac:12:3d:04:ad:76:d6:e8:
                    b7:fc:31:54:ff:31:a7:a9:30:71:68:05:b9:8d:d5:
                    34:e7:98:ad:4a:29:a7:10:a5:f6:6b:ca:e2:f9:8a:
                    7a:65:88:e3:f6:70:e5:96:8d:69:75:55:1e:d2:13:
                    c6:d3:e1:9e:af:1f:c7:3c:b2:c4:df:bf:0a:a6:72:
                    3b:8c:6d:8c:15:ea:8b:c0:e3:56:cc:82:5a:3b:5a:
                    8d:5a:10:93:f4:13:5e:24:0e:f1:19:7c:95:92:7a:
                    d6:bb:0d:69:f7:99:27:84:8a:8f:27:45:4d:88:06:
                    f1:4e:16:62:7f:cb:41:3d:a7:4f:dc:cb:42:e7:66:
                    7a:73:2c:49:e6:4e:10:a4:95:69:a7:d4:e5:21:81:
                    f3:71:a0:d5:74:51:e1:a6:8c:3a:5f:fa:04:8a:d9:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138001

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.230.0/23
                IPv6:
                  2406:64c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:8c:c5:72:6f:a5:c7:c5:10:14:74:3d:94:cf:9b:7f:b7:
         88:17:20:05:f9:29:a3:61:8f:00:8d:35:77:a3:86:f4:36:70:
         7d:4a:b4:80:ca:58:0b:fe:07:fc:2c:04:97:10:f3:66:43:64:
         03:4f:14:4b:7c:92:57:f2:0b:38:c1:77:e0:7f:01:0e:a0:41:
         ab:1d:95:79:b2:be:82:f6:2d:15:af:d5:54:91:6c:b1:a6:54:
         7c:32:55:78:5f:1d:45:62:eb:b9:7a:52:6b:ab:60:10:3c:d1:
         cc:71:b1:f1:78:6a:42:7b:49:37:b2:7a:69:65:1b:a8:ba:9a:
         7b:d2:07:12:56:bc:85:26:19:08:a8:62:bd:61:4c:28:64:83:
         38:d3:03:e2:c2:de:d2:f7:14:83:ca:d8:16:56:8c:4c:96:5b:
         30:10:a2:07:e8:49:cc:d3:90:47:da:55:ce:71:8f:87:40:7f:
         77:0a:9a:d3:34:4d:79:a8:a2:bd:d0:21:98:d2:f6:58:64:c3:
         ec:01:ca:9e:63:21:03:35:93:ff:8d:7d:de:ed:a7:e2:0f:c2:
         73:f3:11:97:0e:b5:72:b1:07:1b:33:a6:fd:72:46:c0:31:96:
         bc:a6:af:12:3a:b2:8b:7b:f0:dc:dd:f0:7a:b7:8f:b9:46:51:
         1d:aa:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:18 2021 by LibreSSL & rpki-client.