RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer (download)

Subject key identifier:   95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
CA Repository:            rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 104.161.128.0/17
    2: IP: 161.32.64.0--161.32.255.255

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15606 (0x3cf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep 15 03:17:57 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:36:31:66:38:60:f1:62:f6:d1:a5:9c:6d:
                    75:a7:1c:59:96:3b:0c:3c:01:13:a4:dd:48:6d:52:
                    17:4e:bb:69:44:6c:2a:73:8e:f6:d7:97:da:6c:9d:
                    ed:fb:8c:0f:b8:69:23:26:40:52:ff:06:b0:9a:3a:
                    8c:c4:91:86:88:c2:dd:3b:16:4d:b8:ee:ea:e1:52:
                    41:1e:b5:3f:2c:53:19:3f:f6:67:79:20:ae:2b:f6:
                    21:1b:c1:f2:c6:98:fc:45:c1:ac:11:2f:27:85:75:
                    75:9f:ee:d7:0d:2e:c8:29:41:0a:ab:46:fb:e1:50:
                    04:ff:97:74:4b:c1:7e:9f:38:12:bb:3b:15:0d:62:
                    59:77:38:ad:a7:46:12:eb:38:8e:21:49:29:c6:31:
                    0e:c2:66:1b:12:75:0e:bc:54:89:37:78:f0:e7:e6:
                    0a:32:80:cd:8c:66:f0:44:0c:04:b5:9b:fa:a8:2c:
                    35:8b:6e:ca:dd:a2:d3:37:f4:13:e8:ef:66:65:27:
                    b0:6c:27:8b:58:d1:25:14:97:6b:0a:73:5f:2d:d6:
                    3e:f4:82:90:45:47:16:fd:df:1c:53:7c:9f:f3:7c:
                    b6:1c:48:2f:83:73:07:81:4a:eb:8b:4f:1f:e5:70:
                    cf:3a:98:38:24:17:57:f3:ca:a7:48:59:bf:49:63:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.161.128.0/17
                  161.32.64.0-161.32.255.255

    Signature Algorithm: sha256WithRSAEncryption
         10:db:98:d6:2d:31:dc:de:84:20:f1:25:a4:7f:54:52:87:2e:
         e3:4d:8b:58:08:f2:de:05:48:72:8f:62:9b:d1:77:36:06:aa:
         39:10:15:e3:9b:f9:cf:9b:2e:9e:5e:3f:6e:41:8a:07:db:9a:
         03:75:f5:27:f2:c5:08:e5:8d:c0:02:d2:d8:f1:11:98:7e:67:
         2f:2f:2d:35:0c:6f:16:21:4a:84:a5:51:00:34:40:88:48:79:
         6f:e0:b4:2c:ec:f6:b4:3e:a5:14:24:03:66:38:ab:a8:0a:20:
         99:83:12:5e:8a:51:5e:dd:1b:ed:bd:2b:12:13:ad:ef:16:b9:
         8a:f1:56:42:b2:c9:20:94:e5:97:41:4c:aa:f0:10:54:3e:4d:
         a2:3f:23:c8:12:a5:62:12:8e:51:1b:04:b4:96:94:a4:ed:9c:
         c1:af:79:31:1e:cd:16:01:e6:9f:06:7e:48:85:30:80:ad:92:
         fc:56:6e:d5:b1:00:89:98:0a:ce:03:44:37:b4:6f:fa:7a:81:
         0d:70:b7:12:bc:d9:25:c3:0c:6e:bd:18:76:12:aa:ae:b3:10:
         de:60:34:20:fc:c4:85:39:ca:71:a2:79:f5:cb:8c:1e:10:45:
         19:19:ee:1b:64:cc:b1:ee:79:c3:28:c4:6c:38:4b:1f:04:38:
         06:a8:55:9d
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgICPPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwOTE1MDMxNzU3WhcNMjIxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4NUQ2RTExMC8GA1UEBRMoOTUyNEVBOUI4MjNDMjBGQTc4OTIzQkU2
NjY3RTE0RjZDNEMzQjQ3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKBUNjFmOGDxYvbRpZxtdaccWZY7DDwBE6TdSG1SF067aURsKnOO9teX2myd7fuM
D7hpIyZAUv8GsJo6jMSRhojC3TsWTbju6uFSQR61PyxTGT/2Z3kgriv2IRvB8saY
/EXBrBEvJ4V1dZ/u1w0uyClBCqtG++FQBP+XdEvBfp84Ers7FQ1iWXc4radGEus4
jiFJKcYxDsJmGxJ1DrxUiTd48OfmCjKAzYxm8EQMBLWb+qgsNYtuyt2i0zf0E+jv
ZmUnsGwni1jRJRSXawpzXy3WPvSCkEVHFv3fHFN8n/N8thxIL4NzB4FK64tPH+Vw
zzqYOCQXV/PKp0hZv0ljmKMCAwEAAaOCAwAwggL8MB0GA1UdDgQWBBSVJOqbgjwg
+niSO+ZmfhT2xMO0fjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODVENkUvNENCRkY0QUVERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg1RDZFLzRDQkZGNEFFREZGMTExRUI4OTRGMzA2N0M0RjlBRTAyL2xTVHFtNEk4
SVBwNGtqdm1abjRVOXNURHRINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAsBggrBgEFBQcBBwEB/wQdMBsw
GQQCAAEwEwMEB2ihgDALAwQGoSBAAwMAoSAwDQYJKoZIhvcNAQELBQADggEBABDb
mNYtMdzehCDxJaR/VFKHLuNNi1gI8t4FSHKPYpvRdzYGqjkQFeOb+c+bLp5eP25B
igfbmgN19SfyxQjljcAC0tjxEZh+Zy8vLTUMbxYhSoSlUQA0QIhIeW/gtCzs9rQ+
pRQkA2Y4q6gKIJmDEl6KUV7dG+29KxITre8WuYrxVkKyySCU5ZdBTKrwEFQ+TaI/
I8gSpWISjlEbBLSWlKTtnMGveTEezRYB5p8GfkiFMICtkvxWbtWxAImYCs4DRDe0
b/p6gQ1wtxK82SXDDG69GHYSqq6zEN5gNCD8xIU5ynGiefXLjB4QRRkZ7htkzLHu
ecMoxGw4Sx8EOAaoVZ0=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:05 2021 by LibreSSL & rpki-client.