RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer (download)

Subject key identifier:   7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
CA Repository:            rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 17819
    2: AS: 23686
    3: AS: 24114--24116
    4: AS: 24121
    5: AS: 24188
    6: AS: 24569
    7: AS: 63524--63525
    1: IP: 27.111.128.0/19
    2: IP: 36.255.36.0/22
    3: IP: 103.8.176.0/21
    4: IP: 119.27.0.0/18
    5: IP: 122.50.64.0/18
    6: IP: 180.189.0.0/20
    7: IP: 180.189.32.0--180.189.51.255
    8: IP: 180.189.56.0/21
    9: IP: 183.177.0.0--183.177.47.255
    10: IP: 202.167.224.0/19
    11: IP: 202.177.192.0/20
    12: IP: 203.190.224.0/20
    13: IP: 2001:de8:4::/46
    14: IP: 2407:b000::/31

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75324 (0x1263c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 27 09:50:54 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:e1:29:26:c6:6d:6a:7b:8b:3d:90:f6:29:
                    78:49:97:40:85:d8:98:59:d9:86:f4:9f:3c:ed:73:
                    06:3c:ed:0f:65:32:fb:b5:aa:95:d7:76:02:a8:9b:
                    22:da:27:61:fa:70:b5:a7:24:8c:09:c0:ef:6f:be:
                    f1:ea:7a:b6:7a:8b:a7:a7:61:34:83:f4:7c:da:5b:
                    60:4b:e3:ab:ec:2f:69:4b:e1:6c:c5:9b:23:b5:70:
                    50:56:c0:7e:76:ee:58:43:b1:60:bd:eb:57:aa:ab:
                    31:59:a4:d4:ed:31:7e:5c:9e:aa:52:f1:1e:c4:ca:
                    5b:c0:f5:83:3d:15:a9:cd:9a:f7:2d:19:d6:ff:37:
                    e8:57:81:5e:34:a6:00:5d:c9:8d:71:49:69:18:cc:
                    f4:8a:f2:4e:3d:0a:b5:60:13:55:21:19:06:ed:d5:
                    d1:04:6b:59:8f:c3:83:08:94:cb:a4:da:5b:f1:de:
                    3a:93:f3:b9:6e:63:c4:e3:01:6c:5e:72:5e:86:3a:
                    49:de:06:04:85:be:98:f2:0b:90:75:fd:df:d7:a8:
                    ef:cb:c3:e1:50:5c:c0:ed:b8:ca:27:6c:84:88:ff:
                    01:67:75:ac:ad:da:23:0a:34:8a:24:a5:0f:29:24:
                    5c:ab:93:b2:1a:22:f1:65:e6:2a:21:43:33:22:ec:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17819
                  23686
                  24114-24116
                  24121
                  24188
                  24569
                  63524-63525

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.128.0/19
                  36.255.36.0/22
                  103.8.176.0/21
                  119.27.0.0/18
                  122.50.64.0/18
                  180.189.0.0/20
                  180.189.32.0-180.189.51.255
                  180.189.56.0/21
                  183.177.0.0-183.177.47.255
                  202.167.224.0/19
                  202.177.192.0/20
                  203.190.224.0/20
                IPv6:
                  2001:de8:4::/46
                  2407:b000::/31

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:3a:70:fa:03:f5:45:74:d7:dd:16:94:cb:46:4b:a3:c2:
         99:31:ba:6b:1f:05:a5:11:4e:61:93:2e:3f:98:32:b3:cc:59:
         f9:17:35:04:56:c3:bd:b1:70:cd:0d:a2:f6:a9:f5:d3:ee:03:
         00:eb:74:8a:66:d6:a6:2a:61:e2:9b:d1:5a:d5:24:7d:01:77:
         67:8a:4b:23:f7:bf:0e:83:0a:99:db:cc:6b:72:24:13:18:22:
         d2:4a:72:38:e1:01:72:cc:00:5f:0b:13:c4:00:2e:a5:27:63:
         64:ef:4f:06:75:41:d6:69:95:04:48:fa:26:8c:ec:88:ce:9e:
         e3:2a:c6:9d:f0:3d:41:e1:de:49:e2:10:82:c5:17:76:dd:0b:
         97:9a:8e:74:78:bf:d4:1b:fe:b6:93:b8:18:32:f2:e3:ff:9b:
         41:86:04:58:81:15:87:a7:0f:25:e5:1a:e0:d0:72:14:f1:ed:
         23:e7:ee:1d:62:6d:69:26:9e:99:ba:73:1d:71:a4:04:d5:52:
         0d:e6:ac:ba:a0:8c:71:d4:50:4f:6c:77:1c:1a:13:05:27:63:
         27:e3:2e:3a:64:f4:61:f9:4d:65:c1:69:7a:d9:a0:f6:22:e1:
         36:4f:1e:ed:06:75:36:b7:ac:7e:48:33:65:11:4f:32:8c:4f:
         4f:1a:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:16 2021 by LibreSSL & rpki-client.