RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer (download)

Subject key identifier:   86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
CA Repository:            rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 139902
    1: IP: 103.146.148.0/23

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66404 (0x10364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 23 08:38:00 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:8b:8b:95:5e:f7:39:52:f4:53:a0:89:d2:
                    58:03:66:2c:ff:bd:4b:91:d1:f9:59:b0:3f:61:9f:
                    d7:3d:5b:a4:be:e6:ed:0f:fd:99:56:8f:74:95:e2:
                    e8:56:97:07:bf:19:ef:b4:23:42:4c:a2:da:1d:3e:
                    54:43:59:4c:d2:ef:94:67:27:a3:65:02:f0:54:eb:
                    85:4a:4c:f5:0f:76:48:64:7b:97:e3:ed:d0:db:35:
                    b0:e3:81:62:c9:88:e1:75:25:08:4b:fc:5b:1a:3a:
                    11:ee:7c:3d:6e:51:20:41:6e:a2:9e:51:79:50:3d:
                    0e:9b:12:47:ec:4c:37:3c:0b:8c:07:fb:34:29:28:
                    36:c1:e8:4c:4f:0f:29:84:75:72:14:af:12:c2:9f:
                    d0:d1:f7:8a:ae:7f:1d:ee:d6:22:90:e1:6b:c6:bf:
                    ce:49:b2:73:e7:17:d6:40:2d:34:c7:69:da:6c:55:
                    67:8f:8a:db:02:30:ad:8c:02:17:41:5b:f7:75:5e:
                    b3:38:43:f8:0d:c9:17:ce:d2:10:b3:5b:2f:08:2e:
                    e5:58:95:5d:11:88:08:4b:17:94:08:8c:84:62:90:
                    5a:95:1d:f6:e5:7d:01:82:ec:26:2b:22:e5:0e:0f:
                    85:89:e0:1b:c4:b4:27:95:a4:9d:ce:d8:49:65:7c:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139902

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:0d:11:db:0e:b2:04:3d:3d:60:b3:41:6b:76:e5:cd:f5:27:
         85:4d:33:c2:66:38:9b:fd:6a:d0:01:bb:6e:64:7e:8d:d9:bf:
         ff:e2:26:4c:7b:47:a6:5f:73:a0:b8:d2:e6:d3:4f:70:63:d7:
         bb:06:79:bf:de:39:1b:31:52:64:8e:35:69:bd:5f:70:fd:f3:
         22:ec:fa:a5:b1:fc:66:02:9c:e4:ff:bd:91:b0:e2:b3:c6:5d:
         e5:6e:30:43:bc:80:b8:f4:85:ea:1d:a8:5b:d2:ae:1d:72:4c:
         9f:9f:73:3d:24:3d:dd:ba:81:17:1f:b3:30:a7:6d:31:cf:82:
         02:a8:e4:d4:ee:ba:72:4a:59:80:4b:3c:fc:f8:e6:9b:ef:ad:
         aa:7c:4d:c4:a5:34:d4:16:ab:c0:a3:ee:e6:2c:b7:8c:5b:bb:
         cc:b9:93:e4:0e:84:e1:0b:19:14:c9:0c:26:1c:c9:11:d0:c0:
         eb:30:f5:7b:b2:89:d1:70:3b:e5:d3:8f:52:eb:3a:da:92:b7:
         69:a5:53:34:7e:98:97:58:5f:6e:9d:c7:e9:33:ea:ca:aa:ba:
         8b:8d:fc:65:9d:c9:4b:91:a9:b4:5d:23:d1:b4:95:fb:74:28:
         b8:8e:52:7b:a7:b5:e7:c6:a1:9f:5b:e9:20:0f:2e:37:45:50:
         27:5d:d4:26
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAQNkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDIyMzA4MzgwMFoXDTIyMDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIz
REU0M0JDOTZDNTkwOTY1RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/zYuLlV73OVL0U6CJ0lgDZiz/vUuR0flZsD9hn9c9W6S+5u0P/ZlWj3SV4uhW
lwe/Ge+0I0JMotodPlRDWUzS75RnJ6NlAvBU64VKTPUPdkhke5fj7dDbNbDjgWLJ
iOF1JQhL/FsaOhHufD1uUSBBbqKeUXlQPQ6bEkfsTDc8C4wH+zQpKDbB6ExPDymE
dXIUrxLCn9DR94qufx3u1iKQ4WvGv85JsnPnF9ZALTTHadpsVWePitsCMK2MAhdB
W/d1XrM4Q/gNyRfO0hCzWy8ILuVYlV0RiAhLF5QIjIRikFqVHfblfQGC7CYrIuUO
D4WJ4BvEtCeVpJ3O2EllfH1jAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUhrHxHRgd
psydsDI95DvJbFkJZeEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNCRkNGLzk1NjM5QkYwMjQ4RDExRUFBREEyMDU0RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDQkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJn
ZHBzeWRzREk5NUR2SmJGa0paZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiJ+MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5KUMA0GCSqG
SIb3DQEBCwUAA4IBAQCMDRHbDrIEPT1gs0FrduXN9SeFTTPCZjib/WrQAbtuZH6N
2b//4iZMe0emX3OguNLm009wY9e7Bnm/3jkbMVJkjjVpvV9w/fMi7PqlsfxmApzk
/72RsOKzxl3lbjBDvIC49IXqHahb0q4dckyfn3M9JD3duoEXH7Mwp20xz4ICqOTU
7rpySlmASzz8+Oab762qfE3EpTTUFqvAo+7mLLeMW7vMuZPkDoThCxkUyQwmHMkR
0MDrMPV7sonRcDvl049S6zrakrdppVM0fpiXWF9uncfpM+rKqrqLjfxlnclLkam0
XSPRtJX7dCi4jlJ7p7XnxqGfW+kgDy43RVAnXdQm
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:26 2021 by LibreSSL & rpki-client.