RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer (download)

Subject key identifier:   A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
CA Repository:            rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: AS: 132107
    1: IP: 103.28.124.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81739 (0x13f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 13 04:33:31 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:77:ff:6b:6a:c3:40:c3:82:bf:5a:13:af:
                    c0:10:44:bb:cf:9e:e1:d8:e8:6c:f4:96:00:e6:a4:
                    3c:ac:f3:99:4a:ed:e2:fb:42:ac:80:fc:ff:5e:78:
                    90:dc:3e:68:61:04:e4:1c:c8:3c:2c:12:a7:2b:38:
                    5f:27:44:23:ef:aa:96:89:30:c6:5b:98:cb:85:2f:
                    d8:75:63:9c:9b:25:64:3a:d0:ff:89:d9:cf:f6:cf:
                    6d:52:3e:15:6e:14:55:77:ea:8a:9f:b1:78:7c:97:
                    25:11:d2:ea:7e:5a:3d:fb:8e:d5:06:f5:b6:b1:c6:
                    32:42:27:69:6a:01:c9:ef:22:7e:ce:17:9f:62:c0:
                    d8:2c:0f:11:d0:7b:e0:7a:e4:c5:f8:d0:50:26:1a:
                    b5:37:11:d0:ea:4a:f3:d0:95:3a:37:96:d8:be:27:
                    29:4c:de:fb:3b:3a:af:d0:d1:06:b3:f1:fb:50:b8:
                    c8:34:fc:16:68:fa:20:ed:3e:50:ca:f8:9f:8c:9c:
                    5f:b4:3c:16:16:61:90:83:da:f0:ff:af:6d:9e:2e:
                    69:62:26:29:87:ec:3e:d3:84:dc:02:74:9e:a1:2c:
                    74:ba:8e:c1:39:2e:59:c3:51:d6:7a:6d:99:1e:73:
                    f0:2c:66:a0:cc:ea:84:d3:d4:6b:5a:d5:74:f4:a0:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132107

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:8b:9e:e4:01:60:68:1b:fc:99:0b:4c:52:c4:10:31:65:20:
         61:4d:58:fc:d9:5a:fb:8f:b1:3b:58:1d:e5:db:68:8f:66:c9:
         04:cf:e5:96:e4:b8:f2:f0:f3:fa:b2:fa:3e:d1:ec:1f:de:a7:
         36:d6:89:92:53:09:11:0a:7f:a0:9d:9e:b9:bd:bf:fd:e6:5a:
         b6:ba:38:1d:b4:d0:8c:30:bd:c4:9f:3b:92:cc:a5:e3:db:0c:
         1e:8f:36:c0:4d:fb:23:4b:1e:6a:de:fd:08:cc:e3:81:d2:7d:
         b4:9d:60:de:b7:94:bd:97:2d:0f:9f:06:78:4b:5e:8f:23:a3:
         32:07:56:97:58:d5:da:8f:f9:2a:b6:09:d0:c8:cd:0b:b5:d3:
         1f:0b:2e:ed:c3:1c:cf:82:e0:96:61:af:94:c6:e1:bb:70:7c:
         b4:60:ec:0b:6a:e7:3f:7a:5e:16:62:f7:49:17:66:1d:78:2b:
         0b:50:20:6f:ff:27:ad:39:6e:8b:2d:21:be:6c:af:55:4f:6e:
         c4:3e:85:5c:10:2a:bb:33:8b:b1:25:a6:0f:72:19:3e:4e:07:
         f7:91:5f:41:be:2d:b6:ae:7c:ad:a7:ac:4b:ad:d1:a7:49:4a:
         41:53:6a:fe:4b:37:eb:7f:b6:35:c7:35:86:ed:b9:16:ee:34:
         d0:e9:2b:ad
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAT9LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDExMzA0MzMzMVoXDTIzMDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3
MTEzN0E0NjdEMjdDMkIwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCduXf/a2rDQMOCv1oTr8AQRLvPnuHY6Gz0lgDmpDys85lK7eL7QqyA/P9eeJDc
PmhhBOQcyDwsEqcrOF8nRCPvqpaJMMZbmMuFL9h1Y5ybJWQ60P+J2c/2z21SPhVu
FFV36oqfsXh8lyUR0up+Wj37jtUG9baxxjJCJ2lqAcnvIn7OF59iwNgsDxHQe+B6
5MX40FAmGrU3EdDqSvPQlTo3lti+JylM3vs7Oq/Q0Qaz8ftQuMg0/BZo+iDtPlDK
+J+MnF+0PBYWYZCD2vD/r22eLmliJimH7D7ThNwCdJ6hLHS6jsE5LlnDUdZ6bZke
c/AsZqDM6oTT1Gta1XT0oC5ZAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUpnlJEZes
gi4NGBlxE3pGfSfCsCwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlGMEYxLzQwQjEzQkMwMEEzNjExRTk4N0E5QzQ2NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVpl
c2dpNE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgQLMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxx8MA0GCSqG
SIb3DQEBCwUAA4IBAQA7i57kAWBoG/yZC0xSxBAxZSBhTVj82Vr7j7E7WB3l22iP
ZskEz+WW5Ljy8PP6svo+0ewf3qc21omSUwkRCn+gnZ65vb/95lq2ujgdtNCMML3E
nzuSzKXj2wwejzbATfsjSx5q3v0IzOOB0n20nWDet5S9ly0PnwZ4S16PI6MyB1aX
WNXaj/kqtgnQyM0LtdMfCy7twxzPguCWYa+UxuG7cHy0YOwLauc/el4WYvdJF2Yd
eCsLUCBv/yetOW6LLSG+bK9VT27EPoVcECq7M4uxJaYPchk+Tgf3kV9Bvi22rnyt
p6xLrdGnSUpBU2r+Szfrf7Y1xzWG7bkW7jTQ6Sut
-----END CERTIFICATE-----