RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer (download)

Subject key identifier:   94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
CA Repository:            rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: AS: 18119
    1: IP: 43.255.24.0/22
    2: IP: 103.29.246.0/23
    3: IP: 103.239.8.0/22
    4: IP: 114.110.32.0/21
    5: IP: 202.21.136.0/23
    6: IP: 202.61.2.0/23
    7: IP: 2001:4428::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79745 (0x13781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 30 02:45:21 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:f5:32:16:12:41:8d:40:6e:a2:e2:62:15:
                    f8:1c:c6:14:24:05:75:24:5d:14:7a:4a:a2:cf:fc:
                    95:4b:d0:c5:af:8b:b6:8d:ce:e2:f0:b3:9f:c3:89:
                    fa:d8:3e:24:87:27:d3:40:63:58:22:a3:d5:1a:73:
                    8c:ef:ec:e6:39:29:9b:ff:f1:25:63:59:53:77:02:
                    3b:43:81:82:08:a0:4e:e9:37:cf:32:b6:33:dd:45:
                    9c:2c:64:66:99:4b:5f:81:40:12:5c:df:4c:ce:1c:
                    d7:6a:24:e9:f3:13:f1:04:07:a8:61:4b:84:35:e3:
                    6d:4a:14:2f:d4:92:07:32:87:c5:81:be:0d:7b:58:
                    8a:7f:ea:fc:df:5c:92:31:96:e8:b5:15:e8:e1:e3:
                    c8:c9:3b:b2:95:14:37:ee:f1:f5:27:53:99:4b:ca:
                    15:1f:77:f7:a9:eb:2a:af:8d:c3:1b:1e:7e:b7:f9:
                    fe:33:50:83:83:b2:57:0f:a1:e8:b9:5e:cb:30:19:
                    00:f1:74:4c:38:ff:ad:10:ed:d8:62:25:d5:f8:3e:
                    2f:37:ba:0b:43:bc:d0:b0:9c:a3:56:3c:3d:2e:69:
                    77:c3:1e:38:52:8b:da:8c:bc:92:e0:eb:c3:bf:53:
                    2f:09:21:06:9f:86:b3:c7:39:da:fe:ab:6b:48:8c:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18119

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.24.0/22
                  103.29.246.0/23
                  103.239.8.0/22
                  114.110.32.0/21
                  202.21.136.0/23
                  202.61.2.0/23
                IPv6:
                  2001:4428::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:aa:5d:28:36:c6:88:c6:b0:22:fa:81:13:c5:89:4b:e6:61:
         1f:45:90:83:09:4c:3a:3f:b2:7b:dd:63:ed:b3:44:8f:e1:03:
         32:bf:7e:02:8c:0d:28:5d:94:83:f0:d6:d8:61:41:fc:e3:6d:
         9a:02:fd:6e:01:ff:25:89:9d:2e:bc:cb:9e:61:27:e8:7d:45:
         60:25:99:57:08:1f:75:9d:e8:ea:c4:dc:84:45:84:d3:86:53:
         24:60:95:bf:7b:3f:36:e6:84:e9:f9:b2:ac:3a:2a:d1:b3:ab:
         0e:05:1b:a0:05:dc:0e:cf:00:ff:81:95:29:a6:69:56:05:01:
         8e:24:06:c9:e5:3a:36:93:20:bf:9e:ab:1c:30:01:f0:6b:f7:
         b0:7b:1e:ba:8a:de:60:2e:c8:0c:99:c9:63:8f:78:2b:2f:f4:
         b6:df:7f:60:3b:d5:e4:30:18:5b:65:8f:45:46:ad:3f:d8:e2:
         87:f9:85:0e:dc:ce:36:bd:15:e5:b9:91:f4:38:59:43:54:71:
         03:f0:f7:f6:fa:fb:5a:e6:6f:15:5b:62:8d:55:18:1b:f3:47:
         70:fa:0a:ba:0e:53:4a:c2:2b:e5:82:16:aa:73:80:fc:24:80:
         f9:16:60:59:72:f5:4e:3a:89:f7:4d:a5:3b:31:88:6b:b7:4c:
         73:55:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Nov 30 05:08:57 2021 by LibreSSL & rpki-client.