RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer (download)

Subject key identifier:   90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
CA Repository:            rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 72.9.128.0/20

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15405 (0x3c2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 10 04:42:09 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:25:c1:8f:95:bd:a2:ad:eb:b0:fa:43:52:
                    4d:d3:d6:98:84:90:14:fb:97:f5:60:1f:ec:19:b9:
                    17:01:8a:0e:6b:63:81:cd:d8:e2:83:ab:2f:25:4e:
                    ee:96:cf:05:32:c0:56:8b:1f:62:84:f2:4f:db:c0:
                    2a:36:19:d0:14:96:bc:0a:c0:de:73:a9:6d:58:1f:
                    25:72:d7:b3:fd:f7:c1:17:67:60:d9:ad:4e:41:70:
                    d1:c7:bc:cb:cf:1e:63:8a:9f:5d:e1:f4:32:97:24:
                    81:a6:22:45:8e:99:18:31:0b:71:9e:07:f2:22:72:
                    2a:4c:23:6d:5e:1d:d6:e4:1d:b6:4f:2a:ff:03:65:
                    a3:7a:bd:20:60:d3:7e:77:4a:69:b4:f9:7e:8a:a2:
                    7a:fd:b9:65:0c:8d:7a:20:22:e3:e5:bb:81:19:eb:
                    a7:1e:80:01:8e:d8:be:9e:e9:9b:57:bc:89:46:6b:
                    44:a3:ca:cd:f7:c9:ee:be:da:de:96:22:36:6d:dd:
                    02:f5:7b:a0:6e:43:ea:24:5c:41:d3:48:e9:36:ba:
                    a8:16:3b:90:d6:a4:85:e7:ce:48:17:aa:5c:1c:2c:
                    a1:76:bf:c9:15:b7:1c:ca:0e:0f:ab:b4:ba:1a:31:
                    38:1d:1f:88:5a:8f:3a:23:2f:ec:88:56:d0:76:79:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:1c:2b:d1:0b:f7:a2:67:5b:19:8d:3a:a1:a8:c5:5f:a0:bd:
         93:7d:bf:95:12:3b:8a:d7:4d:5b:10:1b:03:79:00:7b:d3:68:
         3b:87:15:71:eb:18:7d:61:c9:e5:2a:1b:49:f9:e3:f3:45:4d:
         60:b0:27:67:3b:3d:56:bc:a5:9b:42:8d:9c:6c:38:95:f0:49:
         56:63:0b:9c:67:3d:e9:1f:44:10:d5:93:ba:b7:f8:19:2b:52:
         8d:31:ba:5d:a5:28:8a:a1:6b:1d:d2:17:41:49:8f:99:4c:e4:
         09:0e:df:41:64:d5:f3:35:e6:b5:0d:37:30:b2:3c:2c:81:75:
         18:a3:a1:ed:c6:f6:0b:0c:e2:8d:d1:14:d9:c3:ba:bd:06:e0:
         66:68:47:ca:8e:3b:b9:3e:55:6b:27:26:0b:61:59:d6:1d:6a:
         4e:bc:71:5c:df:3c:2f:b2:65:01:b2:48:04:f9:b6:36:ef:b3:
         43:ae:8d:72:0e:6a:48:c1:9a:86:19:cb:5e:a5:a2:3d:40:05:
         be:5d:a1:cc:c5:77:f8:45:9c:06:8e:ba:1a:72:77:25:2b:a1:
         23:1a:0c:16:b0:f4:f5:84:aa:80:54:a7:e8:36:f1:17:1a:b7:
         45:91:d9:9c:a4:3e:b4:3e:c9:77:94:90:42:63:b3:b4:e9:ac:
         4b:fd:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:05 2021 by LibreSSL & rpki-client.