RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer (download)

Subject key identifier:   46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft
CA Repository:            rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 66.228.0.0/20

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15169 (0x3b41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  1 08:25:10 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:1a:59:25:aa:da:34:6b:11:49:c1:5f:08:
                    39:18:f6:97:8f:60:8b:c1:44:c5:92:28:23:fc:bf:
                    ae:12:b4:a9:96:10:8f:a5:66:bd:df:aa:ab:cf:9a:
                    4d:2b:a3:f9:ad:80:56:9d:f5:b0:1b:24:32:d7:4c:
                    36:ea:96:f8:39:1d:b2:89:28:83:3b:04:51:27:f4:
                    fc:41:6e:75:73:9f:87:4f:15:b5:c4:22:1b:d1:40:
                    c0:87:c0:4a:91:16:6b:94:40:2d:62:96:02:1a:5d:
                    d3:a5:96:65:d1:fa:97:7a:49:98:ae:da:68:8a:da:
                    5f:6c:ef:42:f4:9b:6f:b6:60:ab:ff:08:71:ee:46:
                    56:9c:ef:b6:be:c0:86:1e:c0:4e:95:15:d8:ca:31:
                    cb:0c:e6:a8:cd:bf:95:c3:8f:dd:65:06:24:36:0e:
                    e4:bc:f8:d2:75:91:8e:0b:82:13:47:85:30:8c:2f:
                    b0:0f:af:39:6b:7b:73:f2:ba:3a:43:29:8f:91:5e:
                    6e:43:43:8e:90:a0:8b:15:e3:88:a0:1b:80:f7:c5:
                    bf:55:de:18:27:9b:5d:ae:c8:e5:29:f7:8e:82:16:
                    14:8c:81:0b:66:2d:d0:60:34:b5:4b:22:ed:37:22:
                    17:b6:f4:fd:17:70:2c:ae:38:9e:c5:94:0c:b8:b3:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:b1:59:51:fd:b9:3a:0e:10:2f:43:6d:6e:38:82:3f:61:9e:
         34:27:4d:e8:b3:5d:24:93:23:cd:35:b7:3a:e3:88:8a:f4:25:
         1a:34:d1:cb:c8:be:a9:0b:64:4c:c3:88:c3:3e:69:5b:22:a7:
         50:de:6c:c0:32:25:e7:ae:b5:64:c8:bb:ff:55:b5:b0:da:10:
         a9:4e:ca:78:5f:52:cf:41:e4:a5:fe:93:26:9c:a9:0e:7b:cf:
         1a:0d:0b:e7:3a:8c:d2:02:87:24:ad:d3:28:47:5e:04:5a:f8:
         26:51:56:76:2e:11:fd:ac:3e:74:3c:f1:30:b9:70:5b:59:3d:
         04:c9:7c:fc:34:63:1c:19:c2:3b:11:b7:a7:57:1e:f3:0e:d1:
         f6:98:73:8e:bb:8d:7c:62:ce:5e:42:a7:56:42:1f:d6:63:a4:
         cc:c0:23:67:2b:49:ab:b1:99:bf:d1:29:a2:5a:b6:5e:74:32:
         79:a4:94:ea:d5:d5:16:5b:ca:1a:7a:ad:f3:a0:8b:8a:4b:09:
         cc:12:11:89:ef:9a:d5:15:27:35:c7:fa:c3:cb:ce:dd:74:38:
         4d:70:fb:14:7f:c0:4d:f4:d8:71:7e:89:aa:78:07:5c:24:62:
         e7:f3:85:ec:f2:fc:aa:40:0f:d8:2c:c6:98:85:42:a2:f4:cc:
         7d:a1:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:01 2021 by LibreSSL & rpki-client.