RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer (download)

Subject key identifier:   68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
CA Repository:            rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: AS: 138333
    1: IP: 103.159.26.0/23
    2: IP: 2406:c8c0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81270 (0x13d76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  1 02:29:33 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:72:3a:f2:f4:f7:8e:2c:b5:27:44:75:5e:
                    88:39:f2:47:6f:c9:be:94:63:d1:fb:8e:05:2a:c1:
                    89:d0:9d:c8:14:47:07:90:55:2c:48:ef:80:46:74:
                    0c:7b:38:a8:a7:23:bb:d5:96:e9:86:fe:56:70:e4:
                    5f:a1:c9:47:9f:f5:7e:5e:70:5a:75:0c:bf:3a:14:
                    cf:b3:de:1d:84:ab:36:c0:3a:a3:e1:9f:8a:43:d5:
                    59:60:70:b0:4b:b3:64:28:ae:82:f9:5d:50:82:28:
                    cf:09:d6:6a:ee:bc:b5:9a:ae:df:6e:1f:d7:9c:01:
                    e7:f1:02:e8:82:ec:54:b5:e7:db:a7:d7:60:e7:8d:
                    c9:38:c5:e7:74:3e:a4:dd:b0:64:e5:4c:23:6f:e1:
                    6e:b5:2d:85:ee:b9:0a:46:b3:85:f5:ef:8f:25:71:
                    f2:06:fe:e7:05:e1:38:a7:54:7f:93:b5:f0:11:6b:
                    f3:3c:de:92:b3:08:de:c7:b3:3a:18:31:fe:d6:9d:
                    76:af:1d:ce:ac:96:5a:51:69:66:95:88:d9:72:fe:
                    8c:33:6f:b4:3a:22:4a:66:4a:3f:17:d9:95:d3:65:
                    6d:a5:7d:b4:4d:97:83:96:fd:05:4a:33:91:30:b6:
                    7a:1c:93:3c:a4:1b:bb:61:5b:67:ad:ba:2b:e5:56:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138333

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.26.0/23
                IPv6:
                  2406:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:80:2d:42:73:47:34:47:79:fd:a8:ae:82:d8:6f:79:1a:a8:
         d2:87:31:ec:57:e1:d0:fa:63:f6:90:53:9c:c1:b4:7d:cd:84:
         c0:34:95:ce:86:14:3b:c9:0c:e8:e0:4e:43:85:3e:35:c8:9d:
         f3:02:1e:ac:26:b8:37:b4:9e:07:c6:b8:6d:07:ef:da:4b:44:
         2f:ca:44:3a:78:e0:d0:88:59:3b:09:c7:5f:12:61:65:2b:c6:
         bb:f4:68:9d:c5:ed:51:8a:0d:8b:bb:28:aa:df:90:4e:e8:d3:
         1c:08:a6:62:52:c8:d4:03:ff:be:f2:aa:86:d6:89:f3:80:de:
         b9:0a:87:c0:8e:f7:08:5a:69:d8:8a:b4:b9:1b:6c:36:8c:c6:
         f7:2f:c2:da:51:08:a1:04:7c:07:c9:86:61:4d:02:36:bc:6b:
         34:74:27:0d:46:bf:cb:fe:cd:bd:3a:f2:05:6e:38:c8:9d:0c:
         70:c3:39:32:e6:a5:77:06:e7:41:f4:48:89:33:27:ea:0c:46:
         2c:df:ce:97:c0:1e:cf:4f:98:0e:bd:c1:ba:ae:5f:16:81:cf:
         93:ba:04:47:36:30:28:dd:4b:09:76:1d:c0:fc:37:07:19:19:
         c4:df:bb:3c:bb:2d:8a:5c:ce:91:02:91:4e:9d:ff:90:d1:f6:
         21:03:76:44
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAT12MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDEwMTAyMjkzM1oXDTIzMDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlD
Q0EyMTFDQ0I0MjY1QTI2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCt2nI68vT3jiy1J0R1Xog58kdvyb6UY9H7jgUqwYnQncgURweQVSxI74BGdAx7
OKinI7vVlumG/lZw5F+hyUef9X5ecFp1DL86FM+z3h2EqzbAOqPhn4pD1VlgcLBL
s2QoroL5XVCCKM8J1mruvLWart9uH9ecAefxAuiC7FS159un12Dnjck4xed0PqTd
sGTlTCNv4W61LYXuuQpGs4X1748lcfIG/ucF4TinVH+TtfARa/M83pKzCN7HszoY
Mf7WnXavHc6sllpRaWaViNly/owzb7Q6IkpmSj8X2ZXTZW2lfbRNl4OW/QVKM5Ew
tnockzykG7thW2etuivlVt4NAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUaJtDtI4R
Hmnx33nMohHMtCZaJnswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY4OEM0L0Q4OTQ3RUI4MzBEOTExRUI4N0UwOTM1M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0
UkhtbngzM25Nb2hITXRDWmFKbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhxdMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ58aMA0EAgAC
MAcDBQAkBsjAMA0GCSqGSIb3DQEBCwUAA4IBAQB6gC1Cc0c0R3n9qK6C2G95GqjS
hzHsV+HQ+mP2kFOcwbR9zYTANJXOhhQ7yQzo4E5DhT41yJ3zAh6sJrg3tJ4Hxrht
B+/aS0QvykQ6eODQiFk7CcdfEmFlK8a79Gidxe1Rig2Luyiq35BO6NMcCKZiUsjU
A/++8qqG1onzgN65CofAjvcIWmnYirS5G2w2jMb3L8LaUQihBHwHyYZhTQI2vGs0
dCcNRr/L/s29OvIFbjjInQxwwzky5qV3BudB9EiJMyfqDEYs386XwB7PT5gOvcG6
rl8Wgc+TugRHNjAo3UsJdh3A/DcHGRnE37s8uy2KXM6RApFOnf+Q0fYhA3ZE
-----END CERTIFICATE-----

Generated at Sat Jan 1 05:00:22 2022 by LibreSSL & rpki-client.