RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer (download)

Subject key identifier:   5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
CA Repository:            rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 136012
    1: IP: 103.150.82.0/23
    2: IP: 2001:df3:6480::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68223 (0x10a7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 31 12:23:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:df:3d:92:51:06:b9:7c:62:81:3f:9f:ba:
                    a2:86:a2:fd:1f:4d:7a:bf:1f:2d:9a:a7:1a:83:36:
                    18:4a:dc:a7:7f:79:3e:db:03:59:79:d1:14:cb:23:
                    c8:1c:4e:d5:17:ca:93:70:e9:3e:95:06:8c:23:2a:
                    9d:be:99:0d:1c:1d:1d:3c:ce:74:6e:c1:0d:34:87:
                    f5:f8:36:6d:82:87:4c:c8:39:e7:14:fc:a6:6c:c3:
                    f5:6f:c2:e0:ef:da:dd:fa:23:d6:3f:54:a3:36:41:
                    64:91:bb:b7:63:51:05:4f:9c:3d:ea:e2:6c:56:ac:
                    60:60:71:b4:63:d1:26:32:37:3d:62:fd:52:55:88:
                    e5:e5:db:38:6f:67:5e:4b:90:f2:40:18:49:b5:8d:
                    6d:3f:5a:ab:9e:3b:cc:c4:58:12:01:65:95:c1:43:
                    37:68:b9:2e:52:33:3f:d3:6a:a5:ce:36:ae:dd:a3:
                    19:f7:3c:39:5e:6b:ab:d8:3c:8b:eb:ee:3a:8e:38:
                    eb:5e:9c:60:1b:84:ee:7a:fb:5e:dd:c5:2f:da:14:
                    ef:64:6f:02:ab:ce:52:c2:ac:d2:11:d5:06:5b:61:
                    00:7a:60:a4:ed:14:13:53:a8:42:96:96:c9:51:06:
                    24:89:7a:93:1c:bf:97:b8:11:74:60:60:95:a1:fb:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136012

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.82.0/23
                IPv6:
                  2001:df3:6480::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:0e:ac:27:1d:fc:6d:57:ff:64:97:65:f7:d8:be:dd:e9:
         5f:f8:9f:1b:21:2d:d8:a7:fe:a5:4b:a2:fe:87:9f:a8:cf:ae:
         11:c6:43:a9:c7:58:fd:ff:76:b9:f3:e8:aa:11:6d:18:51:59:
         46:7e:1c:8d:22:94:86:bd:fb:38:39:ee:56:c4:5d:c6:8e:dd:
         77:6b:49:05:9f:3c:cd:4c:c0:28:dc:4f:ff:8c:6e:0c:cc:2b:
         0f:6f:66:f4:12:b6:1c:2d:71:92:6d:7c:46:fc:77:2d:1f:c9:
         77:73:38:e2:72:17:37:f0:6a:d6:8f:9e:64:1c:9b:03:e8:99:
         44:71:17:df:2f:1a:4e:f9:b2:37:17:ac:df:a4:e9:58:43:eb:
         4e:ac:3c:8a:ea:f8:80:fb:99:f5:ee:42:29:4f:cf:dd:52:58:
         4d:ff:59:83:27:fd:e9:ae:1a:93:7a:f4:68:29:8d:d5:b5:35:
         2c:97:ae:0a:c7:98:0a:cf:4c:fa:a4:43:64:42:9b:84:3a:0c:
         e4:05:97:b8:5f:5a:26:6b:b7:ed:0c:af:1c:2b:cc:23:51:1f:
         3a:7f:22:d2:ea:75:dd:32:31:1b:76:e0:c0:f3:3c:e5:86:d6:
         df:68:5d:1d:23:43:19:4a:7f:0c:48:22:6e:82:3d:98:93:f6:
         c9:f6:e9:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:32 2021 by LibreSSL & rpki-client.