RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer (download)

Subject key identifier:   69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
CA Repository:            rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 137425
    1: IP: 103.108.60.0/22
    2: IP: 2406:ebc0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67371 (0x1072b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 16 09:42:51 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:02:57:14:78:35:67:fb:fe:44:05:e6:53:fd:
                    4b:79:19:d2:e6:c6:15:bb:f6:87:8d:32:49:63:24:
                    c2:a8:b3:79:fe:b4:a1:95:35:24:87:e6:27:a1:37:
                    ab:24:c3:a7:48:d4:65:7e:04:13:3d:fb:0c:fe:a9:
                    8c:03:6b:65:88:3f:97:0d:5e:c2:0e:72:4c:b1:50:
                    4c:50:3f:9b:66:42:61:45:e7:c4:4f:48:d7:b3:18:
                    f1:40:7c:34:5f:15:1d:56:72:b2:ee:4a:a9:4f:ab:
                    8b:da:b4:ee:de:d3:a0:0e:e6:8a:4c:8e:97:89:cc:
                    55:39:22:27:b1:27:3e:5e:68:e9:4b:44:ad:21:70:
                    61:5a:b5:54:fc:43:f5:9a:33:4c:0d:5a:b6:53:29:
                    3c:a9:f4:95:ba:00:af:dd:8a:8a:3a:8b:22:da:47:
                    af:5f:0f:46:9a:12:ef:1a:2d:3e:da:b7:67:b5:1f:
                    3c:8b:e6:2e:62:26:4b:29:95:20:7f:e2:b1:ec:c4:
                    bc:2a:ca:6f:5d:6a:8f:49:47:d9:30:d3:51:14:b4:
                    22:25:5a:ab:7b:48:99:1c:73:8e:4f:f4:5e:75:f3:
                    5d:ce:f6:0d:f6:8d:4c:97:ce:87:68:cc:5e:56:1b:
                    da:a1:23:39:0b:88:76:26:d6:f6:77:7f:f9:f8:4e:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137425

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.60.0/22
                IPv6:
                  2406:ebc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:e1:57:5b:6a:2f:9a:4a:8d:4c:ef:b8:0f:a1:3a:12:64:
         c5:95:ba:67:21:01:a4:73:1f:bd:dc:a2:c3:4d:f3:84:41:02:
         1a:78:34:1b:fc:ae:b5:94:4f:05:58:ed:c3:69:cb:83:19:00:
         ed:a3:2d:91:af:2e:9c:d3:6c:67:d9:1f:d2:ed:fa:82:3b:1d:
         20:b1:05:0d:c5:00:52:1d:40:3c:0a:52:2f:e8:d6:07:18:c2:
         9a:c3:7c:77:e2:4b:11:a2:f8:97:22:7d:81:48:a7:e3:9b:57:
         96:b6:7d:f2:1b:ea:29:5c:7c:75:f5:14:4d:51:98:43:f9:61:
         b1:67:e6:fb:8e:1f:9f:a1:e2:5c:b1:55:ce:34:07:86:fc:ec:
         e0:29:63:7d:ca:f4:8a:de:bb:8a:a6:d5:69:1c:16:b3:dd:ee:
         b9:7f:ae:a6:61:e7:45:ce:74:bf:ba:4f:15:23:a9:0b:8f:db:
         7c:96:e9:2a:d9:95:f0:14:01:05:62:19:0b:9e:3d:86:95:d9:
         69:50:35:0e:4c:95:cb:aa:79:a3:5a:29:20:42:7f:db:92:cc:
         9e:2d:29:c6:af:8c:a3:bd:74:c9:b0:56:b7:42:60:05:51:ab:
         89:b6:9d:e1:81:e0:8a:53:82:14:51:3c:b7:43:62:60:d4:26:
         df:f2:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:53 2021 by LibreSSL & rpki-client.