RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yEQAA-l2LTXdeNTUHfUk5_1J1o8.cer (download)

Subject key identifier:   C8:44:00:03:E9:76:2D:35:DD:78:D4:D4:1D:F5:24:E7:FD:49:D6:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 nostromo.heficed.net/repo/1123986/0/C8440003E9762D35DD78D4D41DF524E7FD49D68F.mft
CA Repository:            nostromo.heficed.net/repo/1123986/0/
Notification URL:         https://nostromo.heficed.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 103.141.68.0/23
    2: IP: 2405:9240::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yEQAA-l2LTXdeNTUHfUk5_1J1o8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75191 (0x125b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 25 02:31:24 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91857810000/serialNumber=C8440003E9762D35DD78D4D41DF524E7FD49D68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:57:b3:b1:c0:b1:8f:62:1e:e4:dd:35:a0:4e:
                    48:ed:0c:60:de:05:e8:0f:39:e4:47:dd:d0:93:72:
                    3b:75:5b:a7:e1:c5:31:d3:31:39:3f:84:e9:97:93:
                    d7:70:be:3f:3f:20:aa:0c:5b:25:b2:95:d7:f9:4b:
                    df:66:79:25:bf:0e:ce:11:c8:89:d2:4c:b7:c6:58:
                    60:88:c3:48:a1:6f:79:72:10:a5:6f:8a:b0:45:8d:
                    85:91:2d:f9:24:2e:73:b8:e6:0e:52:1d:5e:b9:9e:
                    16:fd:bf:a7:2c:74:f8:89:06:06:b7:ac:9d:01:ce:
                    07:82:34:fc:a7:da:a2:24:87:80:4c:3b:7f:b4:02:
                    60:30:22:07:fd:b8:a8:6d:a2:66:29:b6:5f:09:49:
                    79:15:43:2b:ea:cf:25:f9:29:6d:2a:6b:b8:da:e1:
                    3b:ad:9c:54:95:e8:3c:d6:91:0a:21:46:09:db:19:
                    dc:6b:e8:15:fd:e2:18:0e:16:84:57:a5:58:8b:de:
                    36:2e:eb:01:f5:40:99:9f:7c:ca:b5:45:6b:2a:f0:
                    c1:e4:3b:69:f7:34:c6:a2:69:61:da:72:21:e6:1b:
                    61:12:e8:93:07:12:71:80:1b:41:80:50:99:31:d9:
                    9f:d4:59:05:61:22:06:d9:0c:1d:a5:02:63:e6:a1:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C8:44:00:03:E9:76:2D:35:DD:78:D4:D4:1D:F5:24:E7:FD:49:D6:8F
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123986/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123986/0/C8440003E9762D35DD78D4D41DF524E7FD49D68F.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.68.0/23
                IPv6:
                  2405:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:2a:65:53:b5:67:e0:87:8f:d7:d0:71:6e:2b:57:f0:46:6d:
         43:30:eb:54:a3:7f:ad:7c:b0:86:7f:15:62:2d:5e:88:63:5a:
         21:53:b3:52:81:9b:16:12:e0:f7:16:fd:4b:57:43:33:df:1a:
         98:c1:61:6e:b7:c4:c5:26:98:63:f5:db:82:d7:f9:04:7a:6f:
         71:f6:5f:75:76:8e:1a:d7:80:47:d0:a4:b3:fd:9d:8e:fb:df:
         1b:26:59:1f:c1:65:26:3a:f1:b2:f2:2c:12:a4:96:ca:96:3c:
         5d:e1:64:fc:2f:66:0d:90:05:87:60:44:97:03:e8:e2:eb:e9:
         9f:39:52:7f:20:9c:f7:a7:dd:ca:d8:e4:62:b1:94:0d:59:39:
         84:ce:41:bb:3f:f5:5a:45:c2:15:0c:67:97:a4:74:0f:e0:0f:
         2c:0c:ba:fc:6d:7d:66:15:e2:2c:23:f9:25:8a:3d:e6:99:54:
         45:28:2f:05:c9:b2:b6:e4:cd:da:8b:94:58:14:99:67:b0:99:
         d4:28:5a:fc:65:2a:fe:b5:db:3b:9b:a7:cb:b5:ec:d4:b6:9e:
         06:5b:1d:48:49:d8:2e:c3:d1:a0:4c:bf:2d:b7:11:7d:e7:ab:
         5f:22:73:e4:d6:38:51:b8:9e:fd:10:40:59:ba:24:78:5f:e0:
         69:4f:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Sep 21 18:45:23 2021 by LibreSSL & rpki-client.