RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer (download)

Subject key identifier:   74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
CA Repository:            rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 203.1.24.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67888 (0x10930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 25 15:02:26 2021 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:84:39:3a:4a:04:be:b8:59:04:5d:e9:8a:
                    b6:7d:f4:d8:b3:d7:e4:5e:26:7f:a4:60:48:8e:1d:
                    34:37:b6:e5:84:c7:17:ee:82:b5:d5:7c:ab:a7:05:
                    00:93:03:9c:ce:17:59:ac:4a:e4:a2:b6:21:be:00:
                    3b:6f:2c:7f:f3:05:91:04:26:e0:e5:d4:eb:b8:9c:
                    e7:f5:d8:bb:c0:5b:9e:29:c1:19:2f:70:bc:8e:06:
                    94:7e:3c:b1:28:35:98:63:53:2f:02:d8:c2:c6:a5:
                    eb:08:64:54:e2:2e:65:92:38:7d:5a:8c:d7:9c:dc:
                    28:d6:4b:29:cc:c3:fb:04:b2:00:05:e4:74:a0:97:
                    03:6a:41:5a:67:b0:62:c5:0e:68:31:35:b1:f4:fd:
                    82:44:0d:3c:d1:8f:3e:37:ee:e9:ee:ef:6f:d3:36:
                    4e:1c:d0:c5:25:99:fd:46:cf:d0:aa:f1:8b:0e:57:
                    9c:d0:06:8a:af:b7:1c:05:92:db:4a:a5:8e:8f:74:
                    d5:fc:70:1d:2e:18:29:5c:cf:7b:5a:1e:75:a1:11:
                    7e:9d:d2:35:62:fc:0f:d3:45:43:79:b0:c9:fb:41:
                    62:9f:95:01:71:e7:f2:73:02:6c:cf:f7:1b:44:fc:
                    33:7e:4f:5d:59:61:43:65:2e:ad:c2:fe:e7:1c:31:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.1.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:1f:ae:7d:d9:c6:8f:3d:60:45:73:db:32:57:7b:65:22:82:
         04:62:f5:8d:83:dd:82:9e:76:84:36:f2:c0:b0:64:c2:d7:e8:
         46:14:b3:e6:1d:b4:0a:8d:34:a5:0f:1d:09:27:f7:ad:86:5a:
         26:04:d3:52:f0:27:b0:87:d9:76:6b:28:9a:0a:6e:d2:9c:dc:
         25:58:38:f2:52:1b:57:8b:f6:36:29:fe:4d:b2:76:79:cc:ed:
         50:7e:80:43:2b:1c:3c:d6:48:65:b9:5f:a9:b9:f3:44:1e:e5:
         ce:1e:a2:6b:dd:b2:f2:38:05:ff:c9:9b:a9:d2:d9:e5:4f:7a:
         67:d4:04:bc:46:88:2d:c6:02:88:68:85:c1:61:4b:db:9e:a3:
         e3:63:1c:4b:09:19:01:2d:f7:7a:1f:89:ce:d0:3e:a4:52:26:
         b6:39:66:d8:16:a4:6c:75:19:fb:34:93:68:93:1a:f0:2e:85:
         19:53:c1:d6:6f:a0:2d:e1:8b:d5:c0:48:6a:8d:5c:44:d4:45:
         ac:cb:5e:5b:9d:e7:28:f5:9b:b5:7d:b1:71:60:26:90:29:3b:
         98:3e:09:ca:a3:3b:a3:d3:8c:70:fc:35:90:98:e6:c2:1d:5c:
         da:e5:71:ed:6a:2b:15:63:a4:09:d4:fd:4f:79:87:ad:26:b3:
         f5:9c:5f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:06 2021 by LibreSSL & rpki-client.