RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer (download)

Subject key identifier:   A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
CA Repository:            rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 63962
    2: AS: 64057
    1: IP: 43.231.112.0/22
    2: IP: 103.50.204.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67218 (0x10692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 12 04:44:47 2021 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:dd:60:15:34:27:a0:27:24:57:b2:08:5c:
                    c9:93:55:18:79:2b:0a:b0:b8:45:d9:cb:8b:51:1b:
                    e6:4f:88:77:9c:11:f5:21:2e:81:69:db:5e:c7:a5:
                    1d:8a:81:e9:e7:9d:1e:7d:57:a9:b8:46:57:86:1b:
                    32:e9:2a:91:9d:bb:cc:00:8c:1e:c1:b7:6a:e3:aa:
                    d7:0f:a0:ac:03:4f:15:21:48:b2:2f:bc:2c:e0:cf:
                    11:f0:8d:52:8c:80:66:bf:01:12:78:b4:66:f3:33:
                    40:c8:fd:40:fb:6e:77:61:de:86:e8:dd:b2:0a:b4:
                    44:8a:d6:58:10:c6:67:a6:ce:42:b9:5f:61:47:37:
                    76:d3:68:cb:68:cc:3b:7e:90:24:99:35:98:6f:ee:
                    f1:16:70:7e:9a:c9:be:54:46:00:1e:99:81:cc:50:
                    5e:5c:0d:34:24:17:85:d6:04:23:93:a9:05:2c:93:
                    8a:95:ff:bc:4f:1e:9e:3a:78:0d:97:f6:72:c2:2a:
                    dc:01:c1:ac:65:26:65:2e:73:de:cf:e2:04:57:2e:
                    ff:58:9b:df:9f:10:2e:20:ea:c0:73:df:4d:97:66:
                    b4:13:6b:7d:08:eb:c8:3a:48:a9:5e:60:43:e5:f2:
                    97:33:00:55:1e:45:cb:f9:02:cf:ca:b7:0e:27:20:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63962
                  64057

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.112.0/22
                  103.50.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:c8:38:68:df:26:c4:82:80:ea:60:b1:fb:98:a3:af:5b:c5:
         99:3a:31:45:ad:82:e8:73:47:4a:ca:a6:c4:65:7f:63:fa:aa:
         0e:19:9b:f7:44:0b:ac:ad:e3:c0:07:ba:2a:d9:4b:eb:84:9c:
         ee:47:20:13:53:7b:0d:38:ef:cf:a5:6e:4a:37:4f:1e:42:d9:
         8a:b3:6d:e0:b3:98:f2:67:96:cb:26:e6:f6:07:a2:92:5d:1a:
         18:48:2b:95:e4:a4:59:c7:9b:24:6b:f1:16:bd:9f:a3:9b:67:
         cd:2b:fa:f2:1e:07:f3:79:2e:3f:c0:7f:ba:e2:f2:b6:34:43:
         19:c2:37:6b:26:3f:5e:47:cf:ce:11:0e:e5:f8:6b:5c:59:23:
         7c:cf:bf:0a:b2:a4:ab:5d:66:ed:af:48:25:6f:12:07:28:a3:
         2a:4a:60:6c:75:b7:21:7f:f0:5e:50:86:65:ff:f5:3a:b2:ed:
         ae:17:ce:fa:a5:b9:64:fd:55:04:a4:8d:4f:8f:9a:b3:46:21:
         e2:6a:12:03:49:73:4b:ea:32:12:78:68:06:b9:59:64:b9:35:
         a9:a3:39:3a:60:ae:e9:99:9d:94:7a:37:fc:2d:7e:4b:8f:2b:
         7e:6b:94:98:75:14:71:ea:b8:7f:d8:cd:4c:2e:1d:91:31:0a:
         1d:63:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:54 2021 by LibreSSL & rpki-client.