RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer (download)

Subject key identifier:   DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft
CA Repository:            rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 130.248.108.0--130.248.127.255
    2: IP: 192.150.16.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15369 (0x3c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  3 06:17:12 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:35:81:8e:60:70:d0:92:73:b5:51:66:3e:
                    ab:a5:a7:14:d5:61:e3:d9:1b:3b:99:3d:80:ed:8c:
                    40:ec:37:60:e7:03:e9:2b:21:f0:be:c5:7b:75:93:
                    4f:69:ac:eb:64:c3:4d:12:32:06:a7:a8:2c:0a:b2:
                    6c:4b:14:2f:17:71:b7:db:40:24:1f:2b:00:58:e3:
                    92:3e:88:f3:3b:4c:31:49:27:52:56:02:99:e3:f2:
                    24:47:fc:a5:4a:2e:69:65:58:ec:7f:73:02:76:c4:
                    fd:cf:06:f9:12:bf:f9:b2:5f:39:66:6f:43:4f:bb:
                    9d:fa:89:7b:c0:12:97:23:d9:25:a9:a2:92:ab:ec:
                    c6:d0:91:80:e2:88:11:5f:79:14:51:87:69:88:1d:
                    af:34:99:fe:f9:25:28:0b:48:13:ee:40:c2:38:1c:
                    80:32:40:ec:d1:75:cb:c9:73:d7:02:48:10:68:16:
                    db:e3:27:9d:ce:5f:57:da:c8:8b:d8:78:37:4a:b6:
                    9b:87:aa:72:b6:a0:63:1f:45:9c:df:9f:5d:6f:96:
                    f4:53:7d:8c:8c:17:b0:ca:04:34:1c:a6:aa:be:2c:
                    0b:22:fd:9a:59:92:bc:bc:30:12:bc:36:0d:4e:cf:
                    44:ab:9e:5d:d5:d1:e6:43:46:b2:8e:43:53:2f:94:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.108.0-130.248.127.255
                  192.150.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:2f:9b:e0:9f:c6:ea:93:7f:78:91:b5:35:91:7a:e9:11:
         a0:c5:0a:cb:67:8a:d9:02:a6:13:93:d8:dd:c8:74:92:9c:41:
         3c:f5:3f:92:cb:b2:6f:9d:32:3f:24:43:17:0a:da:b9:01:3e:
         3c:90:b4:0f:bc:51:3f:ee:ee:48:80:66:eb:8f:f7:9f:c2:7f:
         6e:40:ac:fd:0c:53:ca:4f:ab:e7:39:27:b1:9f:6b:35:2d:b7:
         ce:9b:e1:f2:97:03:78:9c:b0:06:f1:e7:bb:27:a5:d5:d7:b1:
         2a:22:93:f0:a7:56:64:b4:13:b6:9b:0f:f3:f7:c8:d5:22:39:
         1a:cb:41:eb:67:92:88:70:45:54:ca:59:22:43:da:3a:70:d2:
         42:2d:fa:dc:35:b5:51:24:08:2d:f4:4e:65:2b:62:b4:05:e8:
         a0:7b:52:2c:ba:03:f9:2b:09:19:84:12:e9:bd:4b:76:e5:a0:
         a3:e9:a6:17:f3:b3:a3:c3:39:54:a5:ae:94:d1:8c:3d:69:93:
         93:b0:a9:59:a7:d0:8e:33:14:18:f8:a9:d5:73:8d:c7:ef:3f:
         f9:bd:c1:02:dd:4d:08:f2:13:c2:90:78:95:27:7a:ac:65:06:
         ad:6c:29:28:9e:af:6d:d1:45:83:37:62:54:f8:9f:ff:56:6f:
         0b:1d:51:2f
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgICPAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwODAzMDYxNzEyWhcNMjIxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFQTlCRDExMC8GA1UEBRMoREE0QjVDMjEyM0JBOUQwRjgwMjM3OERB
RERENDgwMUI1NjcwQTNFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKoHNYGOYHDQknO1UWY+q6WnFNVh49kbO5k9gO2MQOw3YOcD6Ssh8L7Fe3WTT2ms
62TDTRIyBqeoLAqybEsULxdxt9tAJB8rAFjjkj6I8ztMMUknUlYCmePyJEf8pUou
aWVY7H9zAnbE/c8G+RK/+bJfOWZvQ0+7nfqJe8ASlyPZJamikqvsxtCRgOKIEV95
FFGHaYgdrzSZ/vklKAtIE+5AwjgcgDJA7NF1y8lz1wJIEGgW2+Mnnc5fV9rIi9h4
N0q2m4eqcragYx9FnN+fXW+W9FN9jIwXsMoENBymqr4sCyL9mlmSvLwwErw2DU7P
RKueXdXR5kNGso5DUy+U0QMCAwEAAaOCAwEwggL9MB0GA1UdDgQWBBTaS1whI7qd
D4AjeNrd1IAbVnCj7TAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE5QkQvMDc0OTU4OTA5MTgyMTFFODkxQzRFQzEwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVBOUJELzA3NDk1ODkwOTE4MjExRTg5MUM0RUMxMEM0RjlBRTAyLzJrdGNJU082
blEtQUkzamEzZFNBRzFad28tMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQeMBww
GgQCAAEwFDAMAwQCgvhsAwQHgvgAAwQAwJYQMA0GCSqGSIb3DQEBCwUAA4IBAQBq
CS+b4J/G6pN/eJG1NZF66RGgxQrLZ4rZAqYTk9jdyHSSnEE89T+Sy7JvnTI/JEMX
Ctq5AT48kLQPvFE/7u5IgGbrj/efwn9uQKz9DFPKT6vnOSexn2s1LbfOm+HylwN4
nLAG8ee7J6XV17EqIpPwp1ZktBO2mw/z98jVIjkay0HrZ5KIcEVUylkiQ9o6cNJC
LfrcNbVRJAgt9E5lK2K0Beige1IsugP5KwkZhBLpvUt25aCj6aYX87OjwzlUpa6U
0Yw9aZOTsKlZp9COMxQY+KnVc43H7z/5vcEC3U0I8hPCkHiVJ3qsZQatbCkonq9t
0UWDN2JU+J//Vm8LHVEv
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:57 2021 by LibreSSL & rpki-client.