RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer (download)

Subject key identifier:   50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
CA Repository:            rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: AS: 134980
    1: IP: 103.204.117.0/24
    2: IP: 103.210.154.0/23
    3: IP: 103.210.192.0/24
    4: IP: 2001:df0:1600::/48
    5: IP: 2406:3d40::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81064 (0x13ca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 29 02:47:58 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:c8:d7:77:99:75:a3:62:13:87:61:89:05:
                    8f:67:95:5d:57:34:f9:d1:93:12:28:d3:d5:03:20:
                    7a:f2:4a:c8:de:ed:09:85:0e:34:a5:61:32:19:80:
                    48:8f:2e:40:93:56:35:05:62:68:de:af:95:35:54:
                    00:67:7f:70:b9:09:e9:0d:3a:79:65:28:c8:e0:60:
                    55:5e:65:6c:e4:5c:8c:e5:a2:39:b2:a5:4d:08:48:
                    80:60:a4:82:75:a3:96:7d:0d:97:dc:df:35:1f:56:
                    0c:af:d0:56:af:b5:1e:7f:4d:2c:00:fc:10:28:a0:
                    b1:5f:e5:7b:dd:77:4c:c6:08:4b:12:88:34:97:a5:
                    c3:fc:15:22:9d:c8:d3:4f:51:a9:d2:94:e7:a0:cc:
                    da:db:3f:cd:59:2b:04:92:e9:e0:90:99:57:a5:ca:
                    94:23:74:69:11:70:48:1e:f2:c2:ba:32:98:e0:c8:
                    03:4d:bf:f7:69:0b:7b:9a:1d:ea:5a:38:a2:21:06:
                    fe:e0:b5:d5:5d:dc:09:de:2b:ba:b9:a9:c7:3e:87:
                    49:95:95:65:2f:9d:08:fd:44:d4:45:d7:48:5e:53:
                    8d:67:fc:32:eb:4f:64:de:26:1e:5a:e7:98:1f:c5:
                    d9:46:53:e0:b2:8c:6c:40:94:0c:41:b1:a7:ce:24:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134980

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.117.0/24
                  103.210.154.0/23
                  103.210.192.0/24
                IPv6:
                  2001:df0:1600::/48
                  2406:3d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:82:cf:98:fe:b2:38:1b:28:e8:66:95:e4:7b:28:8d:50:8f:
         02:11:38:d6:8b:78:a0:84:91:d8:fe:b7:d9:da:92:b5:53:4f:
         fa:97:ab:75:0f:e8:c8:1c:a0:ec:57:f0:a0:8c:e1:93:13:35:
         3b:7b:79:b1:4d:b5:dd:34:a1:79:55:a7:4b:e2:5b:e5:05:ec:
         9f:00:cf:d1:78:51:62:f4:d7:c0:fc:63:d5:f6:ab:15:b1:b7:
         b9:db:dc:92:95:96:b5:82:2e:b1:82:2f:59:cd:b2:8b:b3:32:
         48:88:1e:d4:d6:0d:63:19:0a:e3:6f:0f:01:b9:e4:8a:2c:32:
         f4:20:ba:eb:11:d1:1c:5f:a0:5e:46:3e:76:45:c0:b7:3a:f2:
         3b:bc:4b:2d:3e:4e:b1:b1:f1:10:d5:45:92:46:ba:65:1c:48:
         81:06:9b:84:fa:42:3e:07:2d:59:a7:76:38:da:d3:05:14:ff:
         11:77:f8:8c:ec:d5:5b:04:55:58:a1:8e:8b:c5:af:e5:e3:88:
         12:12:af:3b:ea:17:a8:2c:9d:90:ed:97:09:e9:1c:a3:f6:b9:
         60:34:b7:0f:d4:9b:fe:01:57:01:f9:14:cc:eb:92:6c:37:79:
         63:2e:f6:e1:e2:a5:62:1e:a2:60:c2:c8:80:f3:b0:a4:cb:60:
         54:07:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Dec 29 04:35:18 2021 by LibreSSL & rpki-client.