RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer (download)

Subject key identifier:   D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
CA Repository:            rpki.cnnic.cn/rpki/A9162E3D0000/
Notification URL:         https://rpki.cnnic.cn/rrdp/notify.xml
Subordinate resources:
    1: IP: 40.72.0.0/15
    2: IP: 40.125.128.0/17
    3: IP: 40.126.64.0/18
    4: IP: 47.92.0.0--47.127.255.255
    5: IP: 52.80.0.0/14
    6: IP: 52.130.0.0/15
    7: IP: 54.222.0.0/15
    8: IP: 68.79.0.0/18
    9: IP: 69.230.192.0/18
    10: IP: 69.231.128.0/18
    11: IP: 69.234.192.0/18
    12: IP: 69.235.128.0/18
    13: IP: 71.131.192.0--71.132.63.255
    14: IP: 71.136.64.0/18
    15: IP: 71.137.0.0/18
    16: IP: 139.9.0.0/16
    17: IP: 139.129.0.0/16
    18: IP: 139.148.0.0/16
    19: IP: 139.155.0.0/16
    20: IP: 139.159.0.0/16
    21: IP: 139.176.0.0/16
    22: IP: 139.183.0.0/16
    23: IP: 139.186.0.0/16
    24: IP: 139.196.0.0/14
    25: IP: 139.217.0.0/16
    26: IP: 139.219.0.0--139.221.255.255
    27: IP: 139.224.0.0/16
    28: IP: 140.143.0.0/16
    29: IP: 140.179.0.0/16
    30: IP: 140.205.0.0/16
    31: IP: 140.210.0.0/16
    32: IP: 152.104.128.0/17
    33: IP: 158.60.0.0/16
    34: IP: 159.27.0.0/16
    35: IP: 159.226.0.0/16
    36: IP: 161.189.0.0/16
    37: IP: 167.189.0.0/16
    38: IP: 167.220.244.0/22
    39: IP: 170.179.0.0/16
    40: IP: 192.55.46.0/24
    41: IP: 192.55.68.0/22
    42: IP: 192.102.204.0/23
    43: IP: 198.175.100.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15615 (0x3cff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep 16 23:01:10 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:1d:78:af:13:1a:bf:c7:cb:47:5f:8d:f7:
                    22:f6:3a:87:d5:56:55:30:cf:3d:cb:91:56:19:a3:
                    e6:19:32:c4:14:4b:76:9d:a3:5c:f5:f2:89:08:fb:
                    50:5c:8a:cb:2e:bb:f9:58:be:7b:05:a7:4f:d9:b3:
                    cb:39:e7:fa:ea:ee:d0:23:3d:02:b6:0c:24:fe:e6:
                    4d:53:6f:cb:bc:16:02:c2:ca:dd:37:f6:89:7c:9d:
                    99:33:cc:a9:30:4c:75:0a:12:6b:62:46:23:da:09:
                    1c:2f:6d:de:70:51:cb:41:46:4d:5f:d8:a6:aa:23:
                    6a:df:4f:00:92:3e:33:81:4f:1e:82:53:33:10:c8:
                    2f:6a:0e:98:07:05:85:7b:f6:12:35:db:75:a5:45:
                    43:25:c3:0d:39:42:93:21:4a:17:4e:f1:fb:80:16:
                    73:ec:f6:a1:c5:f6:4a:6b:73:b3:c3:5c:dc:01:b0:
                    68:12:45:65:7e:55:7e:fb:ba:7b:45:ae:9a:56:10:
                    2a:bd:1f:66:58:e1:da:22:53:78:ed:af:78:eb:92:
                    48:3e:82:9e:6f:a7:17:5e:96:f6:11:31:5e:06:d7:
                    60:54:15:4b:a8:ee:b9:e8:c8:39:65:54:62:7e:cd:
                    28:95:1d:3d:10:9b:7e:3a:b8:86:49:5f:e8:20:f8:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.72.0.0/15
                  40.125.128.0/17
                  40.126.64.0/18
                  47.92.0.0-47.127.255.255
                  52.80.0.0/14
                  52.130.0.0/15
                  54.222.0.0/15
                  68.79.0.0/18
                  69.230.192.0/18
                  69.231.128.0/18
                  69.234.192.0/18
                  69.235.128.0/18
                  71.131.192.0-71.132.63.255
                  71.136.64.0/18
                  71.137.0.0/18
                  139.9.0.0/16
                  139.129.0.0/16
                  139.148.0.0/16
                  139.155.0.0/16
                  139.159.0.0/16
                  139.176.0.0/16
                  139.183.0.0/16
                  139.186.0.0/16
                  139.196.0.0/14
                  139.217.0.0/16
                  139.219.0.0-139.221.255.255
                  139.224.0.0/16
                  140.143.0.0/16
                  140.179.0.0/16
                  140.205.0.0/16
                  140.210.0.0/16
                  152.104.128.0/17
                  158.60.0.0/16
                  159.27.0.0/16
                  159.226.0.0/16
                  161.189.0.0/16
                  167.189.0.0/16
                  167.220.244.0/22
                  170.179.0.0/16
                  192.55.46.0/24
                  192.55.68.0/22
                  192.102.204.0/23
                  198.175.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:53:49:e0:cc:c7:47:c6:29:de:41:49:23:7c:52:cd:0e:57:
         a1:b1:96:85:9d:f9:b2:9a:b4:ca:7f:86:d4:26:98:fe:4b:b6:
         78:fb:ed:96:89:5a:1e:1b:60:d8:a4:19:4e:51:df:05:17:b4:
         c4:03:ca:1f:92:67:d0:cc:f9:e2:d8:49:7f:65:50:6b:22:4b:
         f3:e0:f0:d4:17:d2:a0:04:6a:cd:cf:c2:03:14:4e:5b:05:0a:
         8e:5e:8f:77:49:0c:d8:af:44:bf:f2:5d:e1:99:a0:ad:c6:08:
         c0:dc:b7:a5:96:34:8b:15:01:cb:2b:22:7c:dc:b9:12:dc:2a:
         fb:5b:d8:12:ab:a9:0e:73:eb:58:88:c7:a6:d4:c8:17:ee:af:
         d0:d3:0a:33:42:09:b5:73:e3:f0:0a:ad:08:3a:08:a8:0e:92:
         1d:83:2e:02:b1:4c:29:be:21:7f:be:c2:87:4e:74:bb:5d:1e:
         ae:13:57:1c:8b:62:c0:f9:ec:9e:e0:05:7e:22:91:03:93:81:
         ce:5f:a9:85:c3:7f:b4:ef:3a:30:5b:e6:ff:c8:50:00:ab:d2:
         b9:d5:5d:a6:89:ac:87:bb:8b:6c:4b:3b:fc:d2:b9:9f:45:aa:
         47:19:50:e9:9f:ef:c6:02:2a:e0:22:40:af:35:79:7e:6d:f5:
         fa:00:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:57 2021 by LibreSSL & rpki-client.