RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oYx6_R_a01d2OgE2s4vCwxf-XjE.cer (download)

Subject key identifier:   A1:8C:7A:FD:1F:DA:D3:57:76:3A:01:36:B3:8B:C2:C3:17:FE:5E:31
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91D3CEB/9B11023EF09811E7BC7E8D5FC4F9AE02/oYx6_R_a01d2OgE2s4vCwxf-XjE.mft
CA Repository:            rpki.apnic.net/member_repository/A91D3CEB/9B11023EF09811E7BC7E8D5FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 168.130.0.0/16
    2: IP: 192.108.99.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oYx6_R_a01d2OgE2s4vCwxf-XjE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15600 (0x3cf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep 14 03:07:49 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91D3CEB/serialNumber=A18C7AFD1FDAD357763A0136B38BC2C317FE5E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:5a:84:c7:3a:ca:ac:00:5b:59:df:3d:62:
                    6d:dd:a2:ae:d8:7f:59:ff:8d:14:fd:be:a9:5a:a5:
                    fc:44:59:3a:71:ac:18:f7:48:b1:77:25:9b:45:d6:
                    eb:15:d3:80:84:a6:d1:b7:b1:54:0d:ab:de:86:67:
                    c1:31:90:36:6d:93:69:0d:05:4a:ae:69:4c:4d:21:
                    24:2a:07:f6:c7:a2:06:69:78:76:05:7b:c8:39:35:
                    ce:5a:e7:a6:0c:46:61:8a:9f:a9:a8:57:5c:41:4b:
                    91:a7:3f:d2:48:7a:fc:95:c7:32:fe:48:3d:aa:0b:
                    d5:e6:b9:b5:33:72:46:93:0b:ec:88:4c:40:d5:61:
                    ac:10:4d:c8:19:cb:81:3d:20:94:16:cd:9c:76:d0:
                    dd:fe:10:56:3a:05:89:28:7f:c8:83:a5:76:27:44:
                    96:56:18:f2:e5:7a:75:32:9d:f7:e5:7d:a4:5b:41:
                    2e:32:b1:aa:64:e8:62:ed:1e:f8:02:e6:28:36:32:
                    4b:a7:30:89:1b:8e:97:80:00:6f:88:97:db:bf:f2:
                    ef:ef:22:33:5f:85:7f:fe:c9:f1:76:83:cb:01:1b:
                    08:93:05:05:56:6b:c9:7d:eb:99:28:db:85:2a:d1:
                    27:61:6e:ee:f1:77:d8:9a:13:28:88:df:8d:29:09:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A1:8C:7A:FD:1F:DA:D3:57:76:3A:01:36:B3:8B:C2:C3:17:FE:5E:31
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3CEB/9B11023EF09811E7BC7E8D5FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3CEB/9B11023EF09811E7BC7E8D5FC4F9AE02/oYx6_R_a01d2OgE2s4vCwxf-XjE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.130.0.0/16
                  192.108.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:0e:2e:99:b0:60:36:7f:80:fb:3c:0a:bd:c4:ee:98:11:77:
         fe:26:8f:95:ab:a4:2b:b3:e0:83:5b:8a:bb:37:67:ea:6e:1e:
         0d:a1:9e:de:d3:a3:ec:c8:c4:c0:b6:86:80:ac:2d:b8:1d:20:
         18:c9:0f:fd:9c:65:04:3c:f6:f2:2a:60:79:c1:5d:08:8f:d1:
         37:d7:91:83:df:37:c3:a6:d9:b8:6a:b5:d7:81:c9:19:3f:a1:
         76:53:70:4f:91:e7:2f:27:09:ec:31:33:ce:72:bf:15:81:07:
         1e:bb:55:1b:f5:58:58:8c:9b:00:61:81:4d:d6:e0:8a:8d:bc:
         7e:cb:6e:7a:dc:7a:6f:e4:d6:18:45:68:6e:2b:02:76:c8:35:
         32:8e:de:a6:6c:37:5a:27:af:af:b0:17:35:26:27:c5:07:73:
         39:eb:cb:27:e0:0c:0b:b9:72:5b:a9:19:ab:8c:54:bc:0f:01:
         f1:f0:45:b9:c0:57:31:9c:5a:17:ec:3b:ef:4c:f8:59:44:c7:
         5c:04:46:98:c3:66:de:22:8a:48:b8:46:e3:d6:a9:21:86:af:
         58:9b:0d:af:fa:ea:38:79:46:19:00:81:2a:73:77:bf:c5:5f:
         50:ab:a6:18:42:77:f7:5a:23:c3:e4:42:46:7e:40:df:55:b7:
         14:05:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:06 2021 by LibreSSL & rpki-client.