RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer (download)

Subject key identifier:   4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
CA Repository:            rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 9236
    2: AS: 9281
    3: AS: 9439
    4: AS: 9537
    5: AS: 9560
    6: AS: 23754--23755
    7: AS: 23904
    8: AS: 23977
    9: AS: 24318
    10: AS: 24384--24388
    11: AS: 38178
    12: AS: 38189
    13: AS: 38329
    14: AS: 45279
    15: AS: 45585
    16: AS: 45633
    17: AS: 131110
    18: AS: 132001
    19: AS: 132040
    20: AS: 134954--134961
    1: IP: 103.23.16.0/22
    2: IP: 110.173.160.0/20
    3: IP: 202.7.0.0/23
    4: IP: 202.7.4.0/22
    5: IP: 202.8.44.0/22
    6: IP: 218.100.21.0/24
    7: IP: 218.100.23.0--218.100.26.255
    8: IP: 218.100.56.0/24
    9: IP: 218.100.65.0/24
    10: IP: 2001:4410::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65378 (0xff62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 29 02:18:02 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:57:15:de:21:a8:31:b9:a9:5c:1b:ab:f3:
                    e9:32:42:d3:f2:cc:06:2f:34:d5:0a:60:50:c0:ce:
                    79:f5:df:36:f0:f4:6c:46:a3:4c:8f:59:06:91:9a:
                    9c:2e:2d:b8:f2:36:69:6e:dc:2d:6b:64:6b:ce:4a:
                    73:8f:24:fa:a1:42:df:65:41:5e:34:ae:4b:58:6a:
                    4e:f5:db:e7:89:a9:49:8c:03:46:a4:64:be:1e:39:
                    80:f0:bf:54:fa:83:e8:1d:b6:ca:83:ac:ce:59:38:
                    b1:95:cc:cf:b5:60:b2:f5:c3:93:3d:4a:1e:04:d4:
                    60:65:9b:d5:c5:af:46:e1:e6:06:09:df:c3:76:1a:
                    ba:92:26:18:7b:0c:23:7d:ec:a8:f6:18:fa:6f:1c:
                    21:44:95:7d:ec:16:82:24:d7:c4:c3:95:e3:e7:d0:
                    f5:35:ed:24:50:ea:20:62:5d:b7:3f:2d:92:14:d5:
                    dd:42:af:0e:21:51:5b:88:f8:68:05:1b:37:b9:82:
                    a1:47:64:d8:ea:66:f6:8c:ab:b4:d0:b5:e2:85:9e:
                    65:cc:40:0f:83:fd:fe:ef:3d:5e:89:3e:34:4d:3e:
                    86:57:75:52:6c:9a:b4:21:51:3c:e7:32:e7:65:e3:
                    75:c2:4a:96:f7:68:87:86:7e:dc:9b:62:c1:6a:69:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9236
                  9281
                  9439
                  9537
                  9560
                  23754-23755
                  23904
                  23977
                  24318
                  24384-24388
                  38178
                  38189
                  38329
                  45279
                  45585
                  45633
                  131110
                  132001
                  132040
                  134954-134961

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.16.0/22
                  110.173.160.0/20
                  202.7.0.0/23
                  202.7.4.0/22
                  202.8.44.0/22
                  218.100.21.0/24
                  218.100.23.0-218.100.26.255
                  218.100.56.0/24
                  218.100.65.0/24
                IPv6:
                  2001:4410::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:bc:3c:cf:af:5e:56:57:57:80:55:83:94:71:b4:36:e8:8b:
         6b:d8:ef:89:0b:5b:7d:07:90:95:d7:fc:5e:12:25:ff:34:7d:
         87:46:7f:a1:27:1c:f7:98:0c:0c:5f:03:99:c6:2a:b8:86:4e:
         3d:81:20:a1:52:8c:a1:67:41:26:6a:ac:87:f7:90:15:91:7d:
         b3:6a:5a:dd:0a:5e:85:af:27:d3:ee:7d:44:c0:c0:b5:87:b7:
         79:82:8f:a3:5f:96:f7:97:6f:21:e3:13:92:36:91:41:a7:55:
         cf:7d:65:3e:59:50:a4:87:1d:be:0a:14:fa:f7:4f:7e:0d:5e:
         9c:9b:8c:79:ef:7c:70:cd:0e:d5:e5:dc:e7:21:3f:e8:10:c1:
         fa:0f:6f:06:6e:fa:ba:32:73:48:31:78:bc:0b:7d:73:43:c1:
         94:be:95:af:a7:fb:46:cc:98:f1:27:50:6e:ab:ac:d3:a3:21:
         ae:ec:20:39:5b:05:11:8c:ee:b5:d6:47:5b:01:1e:d3:d5:cf:
         a4:f7:22:18:7c:f2:2a:bd:48:2f:78:97:da:30:f0:08:a0:bb:
         16:ba:20:29:4a:34:80:4d:69:c6:44:09:bf:7a:4a:53:33:3e:
         46:8b:a7:64:d9:87:ca:4e:b7:b5:23:48:18:b7:f0:9c:bd:44:
         c1:ae:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:19 2021 by LibreSSL & rpki-client.