RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbXCwBT_Lc3ANQKomVyj6zs23l8.cer (download)

Subject key identifier:   5D:B5:C2:C0:14:FF:2D:CD:C0:35:02:A8:99:5C:A3:EB:3B:36:DE:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/XbXCwBT_Lc3ANQKomVyj6zs23l8.mft
CA Repository:            rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 138640
    1: IP: 103.135.44.0/23
    2: IP: 2001:df3:9180::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbXCwBT_Lc3ANQKomVyj6zs23l8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68044 (0x109cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 29 13:33:59 2021 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=A916155A/serialNumber=5DB5C2C014FF2DCDC03502A8995CA3EB3B36DE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:8c:c8:87:1e:eb:ab:84:1c:1c:2d:61:e0:
                    95:88:21:ad:55:e8:dc:62:f7:fc:50:fb:ed:50:4a:
                    a9:79:de:d1:0d:48:00:e0:14:42:45:37:83:b1:ca:
                    a1:79:49:cc:f7:e3:80:11:24:84:49:bc:a3:e8:be:
                    71:04:2b:50:3c:f7:cc:41:4b:3a:15:be:d4:27:30:
                    f2:87:82:7b:ca:d3:ac:34:02:bf:4e:fd:29:55:a4:
                    81:3e:81:f9:dd:d2:72:d6:52:fb:ab:9d:2f:89:21:
                    5a:b2:79:55:ae:f1:26:07:9d:f8:a3:07:20:ad:5b:
                    7a:9a:63:b8:71:6a:92:bf:40:18:2e:d5:41:b6:f9:
                    3d:d0:74:53:e6:99:7c:48:7d:3d:41:c8:57:ab:eb:
                    64:df:4a:41:e9:9e:f4:9b:24:98:00:ae:89:29:89:
                    04:6f:0b:2c:32:22:6c:a5:1a:d2:4e:5e:e7:09:e8:
                    a3:7d:74:94:30:ee:c0:2f:30:d8:ff:45:c3:ed:69:
                    db:63:ef:0e:19:79:79:f0:f1:1f:da:73:c6:f9:6a:
                    57:4d:50:68:c9:b3:5b:d7:65:87:3b:cc:09:3c:9b:
                    fc:7e:de:13:93:2b:73:d0:db:5b:07:76:96:33:e2:
                    3c:57:dc:1e:a8:92:66:c0:f1:fa:a1:51:df:be:c8:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:B5:C2:C0:14:FF:2D:CD:C0:35:02:A8:99:5C:A3:EB:3B:36:DE:5F
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/XbXCwBT_Lc3ANQKomVyj6zs23l8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138640

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.44.0/23
                IPv6:
                  2001:df3:9180::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:c2:dc:61:0e:d4:3d:3f:85:3b:13:2d:98:48:f4:a8:cb:46:
         4c:9a:c9:78:72:a7:0a:6c:be:9e:51:b6:78:08:48:8d:27:35:
         97:4b:ab:8c:ff:45:45:e6:ff:3b:c5:ba:bb:2e:88:93:53:d0:
         1c:4b:e2:fd:3b:99:c9:9a:90:2a:5c:41:5b:1e:72:72:93:2c:
         13:74:12:ca:8d:6d:fa:b1:29:6c:20:65:d0:d2:fc:de:3d:cf:
         cb:4a:fd:17:e7:97:c3:d4:60:b0:da:1b:5b:66:5a:4f:5d:e3:
         53:3f:07:27:eb:21:3d:30:a3:05:30:8a:db:96:df:45:66:72:
         ca:5b:0d:56:4a:98:cf:3c:cb:89:36:20:6f:42:2e:67:66:40:
         2e:d1:cf:24:4c:41:2e:33:86:31:f5:ad:39:47:b8:87:c4:9e:
         62:8f:8c:d1:15:23:36:ce:23:62:e0:49:24:b1:51:38:52:2d:
         16:92:7c:25:34:c9:1c:b1:90:a7:9f:a3:31:94:36:9b:ee:62:
         4d:58:a3:fd:fd:b8:df:08:b5:7a:f7:49:ee:62:e5:09:a9:dc:
         a1:25:e5:af:f1:3c:06:f9:f0:a7:f2:c8:da:85:45:8d:be:24:
         da:f8:2f:f9:8e:4b:58:d0:32:64:db:8e:f5:39:eb:19:42:c1:
         10:1f:d1:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:35 2021 by LibreSSL & rpki-client.