RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer (download)

Subject key identifier:   AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
CA Repository:            rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 167.179.4.0--167.179.19.255
    2: IP: 167.179.28.0/22
    3: IP: 167.179.36.0--167.179.47.255

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14672 (0x3950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Mar 31 06:12:57 2021 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:6e:85:29:ee:0f:3a:2d:a2:5b:b4:31:48:
                    b8:35:1f:15:9a:02:c4:73:d9:39:03:49:00:b2:ef:
                    51:89:4a:26:dc:f9:b9:1c:1e:f9:89:e0:27:11:e9:
                    4b:c6:d0:d3:0a:76:e1:fd:7a:fb:95:d7:d8:e0:16:
                    5a:6c:97:4c:94:73:3b:f1:8a:6b:d9:5d:47:00:aa:
                    a0:e8:b8:3f:5f:30:72:ad:ee:ea:d0:43:7a:ef:42:
                    e8:47:f8:7a:58:bb:6b:9e:94:99:27:09:1d:1a:6e:
                    e8:62:8b:10:0e:cb:dd:68:e7:de:56:c6:d7:ab:99:
                    0d:f5:b1:40:6b:30:00:2e:95:4b:4f:b0:08:7a:89:
                    51:5f:59:99:20:31:86:b5:d7:04:a4:93:e4:b9:f1:
                    66:d3:f6:79:20:fa:e5:57:26:72:ca:74:d4:1f:b5:
                    1e:c4:e0:14:58:04:5c:e8:9b:22:7e:a5:bf:1e:24:
                    57:05:66:2f:24:28:b6:22:aa:b2:33:82:cb:6a:aa:
                    c3:c0:42:8c:f7:c9:4d:88:8a:bb:f0:f2:fc:d7:dd:
                    44:80:18:59:da:64:dc:69:4f:40:53:66:85:13:3a:
                    5d:bf:ec:1d:7f:95:1a:51:e6:aa:22:45:a1:a1:87:
                    da:c0:46:ca:e6:52:02:84:dd:31:09:6d:5a:f7:bb:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.4.0-167.179.19.255
                  167.179.28.0/22
                  167.179.36.0-167.179.47.255

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:8f:3a:12:e6:d1:2e:04:95:99:07:bc:0e:2f:e5:02:5c:
         5b:60:c7:e8:e9:e8:2c:e2:75:04:0d:8e:44:8b:90:d5:94:c3:
         4e:24:d1:cd:6a:b9:61:37:b7:5b:69:12:65:14:f1:88:ca:ab:
         a0:ee:5c:39:8b:88:e7:0d:db:2f:cb:1a:74:c1:a6:30:19:a0:
         a0:e3:eb:e3:c3:99:85:72:fc:2f:4c:c8:6d:9f:ff:e3:4f:1f:
         5a:a6:7c:84:94:58:a5:38:c0:1d:e4:42:07:4b:05:3d:dd:e4:
         0d:7b:07:c0:4f:75:6c:8c:4e:b3:fe:a5:63:01:91:b3:ed:64:
         6a:71:68:37:d1:e9:6a:d5:57:91:d7:19:f2:01:9f:2e:e1:8b:
         ac:32:b7:16:53:63:63:b1:f7:be:ee:55:d2:75:a0:43:df:c8:
         0e:ae:6a:a2:6b:71:1f:b2:57:e0:4c:71:79:af:e4:41:41:08:
         3f:ab:4d:2f:2a:37:55:a6:04:1e:6e:55:ac:74:85:a4:e1:aa:
         9f:bc:7a:55:fa:2d:cb:ce:01:8a:72:16:83:a2:b9:78:b3:4c:
         26:80:ab:ae:85:53:4c:51:ce:5e:3b:93:34:67:9c:bb:89:52:
         0b:7f:af:f2:76:cd:d6:a6:51:bb:ba:78:06:4a:56:43:1f:fe:
         c0:20:d1:a7
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgICOVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwMzMxMDYxMjU3WhcNMjIwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5MTQzNjExMC8GA1UEBRMoQUQzQkI2MDNCMTRFRkIyNkQ3MTU2ODJG
QjA0MTM1MUVDOEY5RDM2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANTxboUp7g86LaJbtDFIuDUfFZoCxHPZOQNJALLvUYlKJtz5uRwe+YngJxHpS8bQ
0wp24f16+5XX2OAWWmyXTJRzO/GKa9ldRwCqoOi4P18wcq3u6tBDeu9C6Ef4eli7
a56UmScJHRpu6GKLEA7L3Wjn3lbG16uZDfWxQGswAC6VS0+wCHqJUV9ZmSAxhrXX
BKST5LnxZtP2eSD65Vcmcsp01B+1HsTgFFgEXOibIn6lvx4kVwVmLyQotiKqsjOC
y2qqw8BCjPfJTYiKu/Dy/NfdRIAYWdpk3GlPQFNmhRM6Xb/sHX+VGlHmqiJFoaGH
2sBGyuZSAoTdMQltWve7c7cCAwEAAaOCAw8wggMLMB0GA1UdDgQWBBStO7YDsU77
JtcVaC+wQTUeyPnTZzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkxNDM2L0EzMEI1QTRBQzc4QzExRThBNzZDRDkxNEM0RjlBRTAyL3JUdTJBN0ZP
LXliWEZXZ3ZzRUUxSHNqNTAyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA7BggrBgEFBQcBBwEB/wQsMCow
KAQCAAEwIjAMAwQCp7MEAwQCp7MQAwQCp7McMAwDBAKnsyQDBASnsyAwDQYJKoZI
hvcNAQELBQADggEBALL9jzoS5tEuBJWZB7wOL+UCXFtgx+jp6CzidQQNjkSLkNWU
w04k0c1quWE3t1tpEmUU8YjKq6DuXDmLiOcN2y/LGnTBpjAZoKDj6+PDmYVy/C9M
yG2f/+NPH1qmfISUWKU4wB3kQgdLBT3d5A17B8BPdWyMTrP+pWMBkbPtZGpxaDfR
6WrVV5HXGfIBny7hi6wytxZTY2Ox977uVdJ1oEPfyA6uaqJrcR+yV+BMcXmv5EFB
CD+rTS8qN1WmBB5uVax0haThqp+8elX6LcvOAYpyFoOiuXizTCaAq66FU0xRzl47
kzRnnLuJUgt/r/J2zdamUbu6eAZKVkMf/sAg0ac=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:07 2021 by LibreSSL & rpki-client.