RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer (download)

Subject key identifier:   29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
CA Repository:            rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 168.245.188.0/22
    2: IP: 198.246.223.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15204 (0x3b64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  6 15:41:10 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:e1:bd:7f:38:00:70:74:25:c4:67:da:60:
                    c1:1d:08:41:cf:77:c5:c1:d5:74:6f:0f:ff:a2:7a:
                    cf:6b:cf:20:cc:6a:69:a9:d8:f3:d8:59:e4:38:dc:
                    fc:a7:46:5a:78:1d:00:ef:44:6e:41:05:5e:aa:b1:
                    48:4e:aa:f2:b6:7d:58:2b:0d:9b:1b:d6:72:24:d7:
                    e4:f9:a0:89:53:92:07:13:ee:b1:5d:82:a3:7e:ca:
                    77:7b:46:25:ca:7d:78:01:d6:02:c9:68:fb:2e:f2:
                    4d:80:f3:b1:cb:d0:12:6e:96:85:b9:6d:1f:02:e0:
                    f8:d9:f3:6e:cf:d0:8e:60:89:15:c8:53:00:24:36:
                    c6:10:79:3a:da:dd:ff:b3:c2:23:36:b8:60:72:20:
                    3b:71:d0:43:4d:af:9e:8e:09:de:b8:6e:25:36:10:
                    81:f1:c7:6b:57:cc:6b:00:04:b6:2b:e7:55:20:dd:
                    43:8f:9d:4b:fe:08:86:ce:df:c3:49:db:e3:71:67:
                    e8:f1:35:02:68:37:a4:f5:a6:a3:38:d5:84:89:d9:
                    c6:0f:eb:49:ca:ba:e6:cd:78:fc:27:cb:ff:71:8b:
                    b3:b3:19:5e:12:2e:df:a9:9f:42:02:75:e1:e6:4a:
                    1f:61:e0:5c:b1:33:52:d6:c8:81:65:2d:09:40:5e:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.188.0/22
                  198.246.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:e5:2b:9f:24:04:d0:22:a6:d0:3a:07:7a:47:d2:ae:b6:
         49:23:b5:b3:2c:7b:83:85:15:e9:47:07:2d:9a:88:d9:7e:bb:
         67:f8:6c:a9:11:1d:54:4a:e9:be:cf:9c:a2:0a:4a:d7:40:af:
         7d:6c:6f:ac:02:56:bf:17:04:94:5b:ca:24:e9:6d:b5:c1:f0:
         8b:be:54:3e:68:47:db:3f:f8:c6:15:e9:38:54:03:94:34:68:
         0d:03:b7:b6:d3:66:8d:a2:b7:ee:8a:26:e8:83:38:61:46:89:
         bc:39:5c:58:7c:d4:2e:ca:44:9b:f2:ff:85:47:cf:0c:47:71:
         59:d0:60:06:94:bd:75:b7:e0:7c:c0:7b:a6:28:50:65:9c:46:
         1b:6b:c9:06:1f:a6:16:1a:b0:53:0e:a8:1d:d2:e3:0b:2f:ef:
         9d:c4:97:0f:ad:fd:73:8a:2b:40:58:32:93:f8:2d:ef:06:e6:
         5a:75:5a:94:46:4e:d3:e3:d3:fb:f0:3c:ff:e8:f9:49:2a:18:
         66:57:b3:37:3d:e5:0e:fc:a9:7f:66:ac:e7:6c:c0:00:66:b6:
         04:b2:4f:5e:7b:2b:2b:b3:8b:83:17:96:fc:93:5b:be:fc:10:
         d0:df:38:89:b6:67:c5:ba:03:84:43:54:ac:c8:a3:e1:be:6a:
         8d:6e:d6:17
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgICO2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwNzA2MTU0MTEwWhcNMjIwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5RUFGMzExMC8GA1UEBRMoMjlCNkE4NzAyQTRBRDY0NEE4NzEwNjRC
NjQwN0FERTQ5M0U2M0E4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AM7P4b1/OABwdCXEZ9pgwR0IQc93xcHVdG8P/6J6z2vPIMxqaanY89hZ5Djc/KdG
WngdAO9EbkEFXqqxSE6q8rZ9WCsNmxvWciTX5PmgiVOSBxPusV2Co37Kd3tGJcp9
eAHWAslo+y7yTYDzscvQEm6WhbltHwLg+Nnzbs/QjmCJFchTACQ2xhB5Otrd/7PC
Iza4YHIgO3HQQ02vno4J3rhuJTYQgfHHa1fMawAEtivnVSDdQ4+dS/4Ihs7fw0nb
43Fn6PE1Amg3pPWmozjVhInZxg/rScq65s14/CfL/3GLs7MZXhIu36mfQgJ14eZK
H2HgXLEzUtbIgWUtCUBe3mUCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQptqhwKkrW
RKhxBktkB63kk+Y6jTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVBRjMvOTNCQjUwMkU2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlFQUYzLzkzQkI1MDJFNkQxODExRTdBODE1REE4MEM0RjlBRTAyL0tiYW9jQ3BL
MWtTb2NRWkxaQWV0NUpQbU9vMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAqj1vAMEAMb23zANBgkqhkiG9w0BAQsFAAOCAQEAQkrlK58kBNAi
ptA6B3pH0q62SSO1syx7g4UV6UcHLZqI2X67Z/hsqREdVErpvs+cogpK10CvfWxv
rAJWvxcElFvKJOlttcHwi75UPmhH2z/4xhXpOFQDlDRoDQO3ttNmjaK37oom6IM4
YUaJvDlcWHzULspEm/L/hUfPDEdxWdBgBpS9dbfgfMB7pihQZZxGG2vJBh+mFhqw
Uw6oHdLjCy/vncSXD639c4orQFgyk/gt7wbmWnValEZO0+PT+/A8/+j5SSoYZlez
Nz3lDvypf2as52zAAGa2BLJPXnsrK7OLgxeW/JNbvvwQ0N84ibZnxboDhENUrMij
4b5qjW7WFw==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:00 2021 by LibreSSL & rpki-client.