RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer (download)

Subject key identifier:   76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
CA Repository:            rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 139808
    1: IP: 103.145.112.0/23
    2: IP: 2001:df3:3180::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65007 (0xfdef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 19 15:18:14 2021 GMT
            Not After : Mar  2 00:00:00 2022 GMT
        Subject: CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:cb:27:b4:84:f1:c7:27:ff:8f:c2:b4:82:
                    a4:c4:50:69:c8:4d:ad:cc:64:f2:05:cf:48:66:5b:
                    08:2b:e1:28:b9:2d:3e:65:40:62:ba:cf:9a:80:e8:
                    af:af:d0:01:38:e9:f2:98:f3:89:c7:de:2f:f0:98:
                    db:44:93:f3:c4:c7:7c:2c:41:4b:34:fd:42:f3:9c:
                    cc:c5:06:c0:0a:a0:d4:14:56:0b:51:cf:67:00:f0:
                    4f:d5:0b:4f:24:2e:98:ca:ef:f0:d6:4d:e1:43:fc:
                    18:3d:9e:65:9b:32:d6:d8:d6:7d:59:0e:75:0c:6e:
                    13:30:1e:1e:fa:c3:6d:10:65:a8:9e:ad:28:e9:12:
                    df:88:78:f7:e9:0e:93:64:21:5a:9a:95:4e:44:d2:
                    c6:97:fd:91:b9:04:57:af:66:af:86:27:08:c2:28:
                    38:b0:ef:4f:95:95:4f:39:72:d7:84:6e:d9:ca:d5:
                    0c:ee:b5:16:90:9b:4c:0b:0d:47:af:9b:f5:a6:32:
                    4f:d5:32:12:62:c1:02:61:7d:2b:df:0f:3e:db:99:
                    b1:cb:8b:97:ed:96:e5:f7:50:ff:46:13:9a:60:1f:
                    1b:b1:b7:2c:e6:27:72:69:05:85:7a:e2:1e:95:49:
                    f0:59:8e:b4:5b:ec:14:5c:61:c5:b7:0c:de:01:76:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139808

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.112.0/23
                IPv6:
                  2001:df3:3180::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:8a:50:e9:ae:75:bd:78:25:ca:64:ca:f7:b8:8a:3f:01:06:
         7e:b1:2a:86:e5:4c:d1:6d:60:5a:ed:89:25:aa:89:f8:e2:68:
         4a:ab:ff:49:96:36:46:90:f2:92:39:1c:2f:07:07:05:4f:76:
         0a:dd:95:ca:6c:0a:9f:e7:ea:a1:be:0a:dd:b1:68:86:27:49:
         a7:7f:4c:ae:ca:2f:26:9a:e8:be:93:e3:5f:14:98:02:84:f2:
         3d:55:10:e6:db:b9:31:d9:00:e2:e7:fb:18:06:a0:66:36:9d:
         25:ad:50:89:15:f0:e4:72:7b:3d:1c:a5:7c:7a:7a:c7:41:1d:
         11:28:f7:88:aa:9b:f5:f4:2c:cd:56:fc:ec:ef:2b:28:94:3f:
         20:91:f8:2f:20:b5:e7:bf:96:db:32:3f:e0:45:14:9d:47:95:
         68:96:14:86:62:56:74:76:3f:4f:5b:82:1d:d7:0f:1f:65:6f:
         f8:d6:35:80:e6:03:47:9e:a7:49:2c:2c:27:54:ef:7a:1f:56:
         09:60:9c:81:72:68:9f:91:db:ba:53:40:29:68:80:f2:92:50:
         5b:ac:e7:7d:ca:40:d5:0a:4b:05:5a:4e:17:e0:25:46:48:6d:
         f9:09:c3:b6:8e:1e:9b:e8:2f:e6:b9:9b:6e:47:72:e4:2a:2f:
         2c:2e:ea:ab
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAP3vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDExOTE1MTgxNFoXDTIyMDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3
ODAzNTUzODA4ODg5QTExNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjwssntITxxyf/j8K0gqTEUGnITa3MZPIFz0hmWwgr4Si5LT5lQGK6z5qA6K+v
0AE46fKY84nH3i/wmNtEk/PEx3wsQUs0/ULznMzFBsAKoNQUVgtRz2cA8E/VC08k
LpjK7/DWTeFD/Bg9nmWbMtbY1n1ZDnUMbhMwHh76w20QZaierSjpEt+IePfpDpNk
IVqalU5E0saX/ZG5BFevZq+GJwjCKDiw70+VlU85cteEbtnK1QzutRaQm0wLDUev
m/WmMk/VMhJiwQJhfSvfDz7bmbHLi5ftluX3UP9GE5pgHxuxtyzmJ3JpBYV64h6V
SfBZjrRb7BRcYcW3DN4Bdq+PAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUds0CHgwo
HaX+ZNh4A1U4CIiaEWcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlEQzc5L0E2M0Y5M0Q2MjdDRTExRUE4RTQwN0U1QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5REM3OS9BNjNGOTNENjI3Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3
b0hhWC1aTmg0QTFVNENJaWFFV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiIgMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5FwMA8EAgAC
MAkDBwAgAQ3zMYAwDQYJKoZIhvcNAQELBQADggEBAFyKUOmudb14Jcpkyve4ij8B
Bn6xKoblTNFtYFrtiSWqifjiaEqr/0mWNkaQ8pI5HC8HBwVPdgrdlcpsCp/n6qG+
Ct2xaIYnSad/TK7KLyaa6L6T418UmAKE8j1VEObbuTHZAOLn+xgGoGY2nSWtUIkV
8ORyez0cpXx6esdBHREo94iqm/X0LM1W/OzvKyiUPyCR+C8gtee/ltsyP+BFFJ1H
lWiWFIZiVnR2P09bgh3XDx9lb/jWNYDmA0eep0ksLCdU73ofVglgnIFyaJ+R27pT
QClogPKSUFus533KQNUKSwVaThfgJUZIbfkJw7aOHpvoL+a5m25HcuQqLywu6qs=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:08 2021 by LibreSSL & rpki-client.