RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer (download)

Subject key identifier:   6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
CA Repository:            rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 136029
    1: IP: 103.149.23.0/24
    2: IP: 2001:df3:a80::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66408 (0x10368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 23 09:57:07 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:ca:aa:be:eb:52:59:6e:20:a1:51:ad:07:
                    58:ad:59:18:30:27:ef:e0:04:00:0e:fe:ac:64:75:
                    13:03:fd:38:74:9a:d4:c8:ce:f3:2f:1f:7a:b0:bb:
                    56:05:b9:cb:50:a0:1e:15:58:59:ff:e7:4f:bf:d2:
                    d9:4e:6a:02:c6:b4:17:54:10:84:87:78:1d:c7:7c:
                    c6:f9:02:ea:26:46:8c:32:bb:84:12:9f:7c:9b:a5:
                    57:38:41:5f:fc:62:7c:28:2c:c4:db:79:df:f5:04:
                    ca:9b:5a:72:45:64:4d:dd:52:28:5d:09:07:fb:4e:
                    92:93:79:67:16:48:38:64:a5:89:9c:be:b0:6b:8d:
                    a9:da:e8:27:72:c3:24:9f:50:23:5e:e0:59:f0:ba:
                    4a:c0:14:9e:9c:0b:d3:f2:da:cb:5d:15:53:d3:42:
                    94:c0:80:f4:78:2a:ca:28:95:0f:34:30:d5:e9:8e:
                    2a:d3:8a:f0:44:cd:5f:23:df:15:e3:25:04:9a:ee:
                    75:7d:e0:19:ea:58:b1:97:7f:e7:21:82:3d:2f:84:
                    6e:40:ea:ad:2e:df:1b:2b:31:d2:10:a5:8a:c0:bc:
                    2b:6a:65:0b:c6:0b:30:6a:ca:3c:f6:af:85:87:60:
                    b2:9d:e4:ce:73:67:85:5c:b7:ce:58:36:0b:e5:d4:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136029

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.23.0/24
                IPv6:
                  2001:df3:a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:6f:0e:02:70:f1:1b:2d:7f:c6:bf:cf:9a:d0:8f:b2:5b:2e:
         c3:87:72:d7:8a:46:bb:89:5a:32:28:b2:f6:8a:5f:46:58:b0:
         8b:b5:e4:df:e3:c4:54:ea:1a:39:36:db:6f:30:9f:9d:be:f7:
         18:d6:5c:8a:53:bd:8a:61:aa:f3:31:3f:33:e7:a9:f4:76:2a:
         7b:bf:39:d6:b0:02:47:70:82:7c:3f:cc:29:9e:0e:2e:0e:1a:
         31:a5:6e:9e:ea:78:8d:72:30:92:c7:00:9c:21:d1:bf:e8:ce:
         29:b9:28:35:bd:0d:88:b0:fe:ad:aa:0e:da:44:9a:f5:e8:aa:
         60:d4:bc:a3:09:01:e8:d2:18:64:87:e4:e6:a2:cc:95:67:d5:
         7e:0a:cd:73:db:5c:a4:e5:38:6c:40:3b:4f:46:2a:74:7c:96:
         67:f8:1d:0b:9d:c7:72:59:d3:bc:51:f9:8b:a3:db:6e:00:75:
         b4:83:f9:92:23:23:0a:49:ee:c4:45:e6:30:12:46:14:36:2a:
         98:27:ef:b7:9e:9f:83:82:f4:c1:29:e2:1a:10:06:a3:79:92:
         41:2b:95:a7:f5:e2:86:4a:59:fb:b8:c8:77:0d:17:72:e0:5e:
         3f:da:60:2c:61:cc:34:a8:fb:1f:2a:bf:3b:15:59:1d:54:b4:
         a9:62:ce:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:51 2021 by LibreSSL & rpki-client.