RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQpqqbUcPym3BOl10vsbsTCTL6Q.cer (download)

Subject key identifier:   65:0A:6A:A9:B5:1C:3F:29:B7:04:E9:75:D2:FB:1B:B1:30:93:2F:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ZQpqqbUcPym3BOl10vsbsTCTL6Q.mft
CA Repository:            rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: AS: 137189
    1: IP: 103.104.140.0/22
    2: IP: 2402:1340::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQpqqbUcPym3BOl10vsbsTCTL6Q.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80433 (0x13a31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 13 03:37:22 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A918D808/serialNumber=650A6AA9B51C3F29B704E975D2FB1BB130932FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:37:7f:1c:11:86:74:3a:f7:b4:75:5c:cf:
                    8e:0f:2f:3a:40:d4:a8:b2:d3:ea:4d:2d:b2:aa:7c:
                    64:30:80:9c:81:6b:9e:b2:43:02:08:c0:c2:ce:75:
                    c5:10:95:bf:62:4f:e9:97:a6:88:a8:ad:d9:1d:51:
                    66:ea:1f:df:cc:ce:0c:ef:f2:81:ad:08:99:1b:e6:
                    b6:4b:cd:da:e4:b1:66:fa:bc:b7:ad:0e:a9:e8:fa:
                    f5:ab:69:b0:2b:81:14:b6:3c:f7:f3:5a:21:1c:76:
                    b8:e5:70:94:db:3e:b4:54:1a:f6:df:d5:48:9b:4c:
                    df:3d:0d:42:87:79:c6:6c:01:b7:28:b0:a7:82:b9:
                    86:d6:b4:e3:7e:21:55:1b:25:a5:8a:94:51:36:1e:
                    1b:d4:eb:87:34:e7:c7:57:e6:7b:78:f5:76:15:9d:
                    09:88:ef:37:02:d7:dd:ea:94:ed:b2:c3:39:d2:1d:
                    49:32:1f:d3:0a:5e:dd:92:54:15:4a:ff:61:55:3e:
                    52:3e:67:59:2b:f6:3e:bf:65:32:20:8a:59:af:61:
                    7f:a0:64:5d:11:7b:86:1f:99:42:5b:9f:25:4d:37:
                    ba:4b:cf:25:ab:58:9a:2c:c4:5e:5a:2a:b3:6c:a1:
                    d0:c6:e6:7f:76:60:f3:d0:28:33:bc:bb:2f:30:bd:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:0A:6A:A9:B5:1C:3F:29:B7:04:E9:75:D2:FB:1B:B1:30:93:2F:A4
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ZQpqqbUcPym3BOl10vsbsTCTL6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137189

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.140.0/22
                IPv6:
                  2402:1340::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:61:59:6d:9c:98:13:7c:27:1e:d2:15:53:c3:1a:50:57:e4:
         f2:f0:96:ed:3e:62:b8:bf:3c:bf:21:21:db:2e:50:41:b4:27:
         fd:02:17:f2:80:5a:81:d1:f2:13:f5:2c:49:f5:49:3d:82:61:
         08:46:e8:41:1d:11:72:bf:a4:ef:09:df:f5:24:06:ef:f5:f7:
         4b:86:fe:fc:a5:e5:c3:f6:9d:21:c5:ed:c5:39:7b:a4:7a:8c:
         38:4f:1d:06:c7:60:8e:ba:09:19:f9:71:c0:8b:98:88:a7:13:
         b9:57:da:65:a0:79:5f:35:06:9b:a4:7e:27:cd:ee:e1:40:00:
         f1:12:94:b8:66:a2:5d:ff:2d:2c:f6:cc:e7:3d:38:e8:2b:d2:
         4c:08:31:8a:96:8e:00:f8:23:ff:0c:e4:56:8d:f8:33:0c:94:
         a6:e2:8f:dc:70:ea:2e:2a:dc:4d:59:88:e1:e5:ed:fa:4f:1d:
         af:c7:0d:dd:e5:b7:b8:e2:de:63:20:27:53:66:2f:71:df:67:
         8f:db:5c:63:af:c9:a3:a3:8c:e1:2b:78:2b:88:c4:2f:8d:ee:
         84:a3:a2:4d:18:1c:6c:95:00:18:23:4a:0a:b6:fd:8e:d8:16:
         c5:5e:59:68:19:f7:8b:9e:88:be:63:b4:1e:c3:97:a0:50:02:
         f1:b1:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Dec 13 14:48:03 2021 by LibreSSL & rpki-client.