RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer (download)

Subject key identifier:   79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
CA Repository:            rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 139305
    1: IP: 103.141.14.0/23
    2: IP: 2001:df0:e480::/47

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74211 (0x121e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  2 10:02:41 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:c1:7b:9f:d0:ac:c9:bc:8c:c5:6a:c1:72:
                    41:f9:9f:3b:39:bc:6d:d2:89:8e:2b:eb:72:8b:6d:
                    25:ed:3b:32:dd:62:cc:e0:1c:6d:1f:1f:bb:2e:67:
                    bb:58:d5:ec:96:1f:8a:b4:f0:bb:b5:8f:9c:d9:72:
                    f6:4d:f5:23:ed:da:78:e9:7e:e6:49:12:6d:39:1e:
                    61:65:84:14:a3:ad:2c:f7:e1:aa:1d:e4:ac:27:5b:
                    30:ba:69:f1:5d:28:40:60:ec:06:c7:21:cc:26:c6:
                    2a:c8:a2:c9:98:64:50:47:e4:23:c5:8c:52:d0:45:
                    a1:20:42:45:86:be:b9:dd:85:8d:97:e0:86:15:88:
                    a3:dc:76:47:e1:ef:31:84:50:ff:6f:bd:2b:36:78:
                    53:6e:ca:d3:dd:d2:b4:b7:ee:ad:ff:65:66:e9:f7:
                    bc:1c:66:67:82:9e:28:7e:a1:ca:60:2d:15:83:bd:
                    24:70:bc:45:37:96:98:eb:22:d3:0f:ff:10:06:75:
                    a5:c2:b7:f3:76:f4:0f:85:2b:e8:8b:6d:c9:6f:3c:
                    02:0d:d9:78:5d:d1:7f:7a:50:5c:df:2c:91:14:25:
                    10:d2:84:2d:3e:b3:37:63:07:40:69:e9:aa:83:23:
                    3b:71:1a:a5:40:f6:34:a2:73:79:d7:b6:61:de:0a:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139305

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.14.0/23
                IPv6:
                  2001:df0:e480::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:41:45:95:30:5a:bf:ce:ce:74:0a:f3:e0:9d:b1:9a:63:
         8b:64:a2:10:53:2a:e0:a0:c9:92:28:fb:79:09:b5:ec:b9:bb:
         7e:ec:27:c6:1e:b2:5f:59:ad:84:bb:aa:53:c0:29:17:d0:f7:
         67:5c:01:11:eb:c8:a4:84:9c:4b:dd:29:56:5b:57:ae:b5:7c:
         e4:f9:ae:9a:7b:40:9c:07:1d:3c:2f:93:ec:c3:9a:e0:cc:54:
         cc:85:b5:a8:bd:e5:d3:e0:5f:b9:00:c7:bc:8d:c7:2b:a2:16:
         7a:a4:0f:23:f4:16:fb:83:c1:76:be:57:45:67:c9:a3:81:b4:
         fb:71:1c:54:08:59:54:74:18:f1:97:2c:5d:d2:55:39:17:0a:
         b1:53:c6:f4:bd:a5:77:8d:c2:ef:31:bf:e1:c9:ae:8d:13:e9:
         15:d0:41:e0:fd:0f:18:00:2b:22:85:d8:af:49:e5:7c:f3:01:
         c3:0b:5b:ea:30:f4:86:37:a3:7a:77:e0:43:c7:85:4d:bd:e4:
         b7:c9:0e:5b:3a:a9:8f:e7:dd:10:34:a5:1f:b0:66:4d:81:dc:
         9e:29:3b:14:a5:44:c0:6d:f6:72:a0:14:37:80:e2:f6:81:ff:
         1d:5a:cf:1d:95:4e:52:4d:1f:d8:a0:18:7b:5a:c9:de:a5:94:
         ea:fe:53:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:11 2021 by LibreSSL & rpki-client.