RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer (download)

Subject key identifier:   41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/QStIAXYSTgiEYCaJYCwq5XTwuHY.mft
CA Repository:            rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 131.203.0.0/16
    2: IP: 161.29.0.0/16
    3: IP: 161.65.0.0/19
    4: IP: 161.65.64.0--161.65.159.255
    5: IP: 161.65.192.0/18

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15529 (0x3ca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 31 20:09:02 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e1:19:d4:14:e5:d7:ff:bd:ab:cb:4a:ee:47:
                    47:ce:50:df:79:12:c2:4f:b1:e4:9a:7e:90:18:72:
                    80:c9:53:e5:64:d4:1a:1c:41:91:d3:9e:8f:01:16:
                    f9:8a:73:3b:94:86:46:e8:54:b0:52:c4:5f:77:33:
                    9a:9b:69:54:f2:27:b5:73:da:33:b0:0b:49:bd:c1:
                    4d:92:9d:0a:8e:33:71:7d:1d:b9:f6:df:c6:8d:d4:
                    67:ea:7c:2b:d9:57:a6:ee:d1:67:f7:ad:93:29:77:
                    fc:4a:01:7a:b3:2d:89:79:1a:53:b7:6f:f0:f1:fd:
                    5d:a4:f4:b6:42:44:3e:f2:ca:a4:f3:f1:47:43:37:
                    cb:99:cd:96:2c:00:34:64:0a:e0:b7:27:97:b2:44:
                    a9:dc:30:b1:77:1b:a2:31:61:f4:f4:4e:bb:cf:53:
                    7f:66:95:66:6d:f7:3f:e8:ff:59:12:dc:15:44:cb:
                    a2:4d:a1:9d:69:7d:75:60:ab:38:f6:af:2f:6a:ea:
                    04:57:37:3b:9e:3f:04:0e:65:16:6d:e0:47:5a:6c:
                    a2:38:29:f3:71:c6:6a:99:e7:f7:bf:08:65:f1:5c:
                    36:a3:c8:90:09:8e:2d:c6:be:c0:35:c2:55:23:47:
                    cd:06:eb:06:8f:e6:90:56:64:03:f8:76:23:5a:02:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/QStIAXYSTgiEYCaJYCwq5XTwuHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.203.0.0/16
                  161.29.0.0/16
                  161.65.0.0/19
                  161.65.64.0-161.65.159.255
                  161.65.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:61:64:34:37:db:bb:15:18:93:97:6c:26:d7:bd:d1:91:1d:
         5d:95:59:b7:64:a6:6c:cb:01:a8:8b:78:57:e7:90:88:ec:17:
         17:36:10:87:f8:a3:df:36:ee:ae:d1:98:9c:2b:8e:4a:a9:0c:
         8c:ad:ae:d7:9f:0e:19:b3:31:2a:8a:8d:38:79:17:a4:2d:27:
         87:9a:21:37:d5:9e:29:cb:f6:d1:f5:78:91:ec:0b:54:a9:ef:
         71:c0:31:98:32:88:62:79:df:c3:82:6c:ca:23:16:86:79:ff:
         3d:ad:12:8a:d4:7a:98:61:84:e1:51:ff:99:35:66:2e:52:21:
         2e:05:0f:c6:8e:f9:fe:d2:66:c0:c7:92:42:e2:59:d7:fd:48:
         2c:7b:85:2e:a8:2e:f8:92:29:79:3b:96:cf:79:2c:5b:b3:01:
         a0:db:f0:17:cf:65:1e:54:6c:7b:5a:86:8c:cd:2f:a9:fb:74:
         2a:b9:b3:da:fe:be:71:4b:cf:b2:a8:63:33:fe:7a:c3:ea:d5:
         7f:c2:d6:04:9d:d4:53:e1:46:c2:4e:b7:b0:02:a1:15:1b:e0:
         a2:dd:b0:a1:fc:93:38:a5:11:50:db:09:ab:e0:08:72:77:0a:
         db:10:91:9d:ba:2d:96:c3:50:67:2e:ca:02:3d:72:ce:4e:1c:
         e0:84:14:8c
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgICPKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwODMxMjAwOTAyWhcNMjIxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBRTBDNDExMC8GA1UEBRMoNDEyQjQ4MDE3NjEyNEUwODg0NjAyNjg5
NjAyQzJBRTU3NEYwQjg3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANjhGdQU5df/vavLSu5HR85Q33kSwk+x5Jp+kBhygMlT5WTUGhxBkdOejwEW+Ypz
O5SGRuhUsFLEX3czmptpVPIntXPaM7ALSb3BTZKdCo4zcX0dufbfxo3UZ+p8K9lX
pu7RZ/etkyl3/EoBerMtiXkaU7dv8PH9XaT0tkJEPvLKpPPxR0M3y5nNliwANGQK
4Lcnl7JEqdwwsXcbojFh9PROu89Tf2aVZm33P+j/WRLcFUTLok2hnWl9dWCrOPav
L2rqBFc3O54/BA5lFm3gR1psojgp83HGapnn978IZfFcNqPIkAmOLca+wDXCVSNH
zQbrBo/mkFZkA/h2I1oCRLcCAwEAAaOCAxEwggMNMB0GA1UdDgQWBBRBK0gBdhJO
CIRgJolgLCrldPC4djAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUUwQzQvNjNBOTI3NjZGMTQ3MTFFOTlBOUFCNzEyQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFFMEM0LzYzQTkyNzY2RjE0NzExRTk5QTlBQjcxMkM0RjlBRTAyL1FTdElBWFlT
VGdpRVlDYUpZQ3dxNVhUd3VIWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA9BggrBgEFBQcBBwEB/wQuMCww
KgQCAAEwJAMDAIPLAwMAoR0DBAWhQQAwDAMEBqFBQAMEBaFBgAMEBqFBwDANBgkq
hkiG9w0BAQsFAAOCAQEAvGFkNDfbuxUYk5dsJte90ZEdXZVZt2SmbMsBqIt4V+eQ
iOwXFzYQh/ij3zburtGYnCuOSqkMjK2u158OGbMxKoqNOHkXpC0nh5ohN9WeKcv2
0fV4kewLVKnvccAxmDKIYnnfw4JsyiMWhnn/Pa0SitR6mGGE4VH/mTVmLlIhLgUP
xo75/tJmwMeSQuJZ1/1ILHuFLqgu+JIpeTuWz3ksW7MBoNvwF89lHlRse1qGjM0v
qft0Krmz2v6+cUvPsqhjM/56w+rVf8LWBJ3UU+FGwk63sAKhFRvgot2wofyTOKUR
UNsJq+AIcncK2xCRnbotlsNQZy7KAj1yzk4c4IQUjA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:01 2021 by LibreSSL & rpki-client.