RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer (download)

Subject key identifier:   B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
CA Repository:            rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: IP: 72.35.248.0/22
    2: IP: 74.114.48.0/22
    3: IP: 135.84.232.0/21
    4: IP: 146.88.152.0/21
    5: IP: 159.117.132.0 -- 159.117.143.255
    6: IP: 159.117.201.0/24
    7: IP: 159.117.223.0/24
    8: IP: 165.84.232.0/21
    9: IP: 208.66.232.0/21
    10: IP: 208.71.212.0/22
    11: IP: 208.81.116.0/22

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16135 (0x3f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 17 04:20:46 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:43:9f:47:82:ab:02:13:a5:fc:eb:ef:e7:
                    92:40:ff:45:5c:5a:16:b0:c0:2c:9c:73:3f:ed:72:
                    6f:fd:d9:ef:bf:4e:a6:73:0a:0f:85:55:a5:62:e5:
                    c5:7c:2d:25:6f:d8:e2:e3:df:ce:58:4b:38:74:f4:
                    73:c7:bc:9f:1a:5e:0d:af:a8:77:2f:35:e4:51:47:
                    c9:fa:e4:78:2c:48:d4:fa:db:7b:1e:9e:61:b6:e3:
                    a6:f3:8d:2b:b9:2f:ea:fc:a6:04:0d:64:66:9b:a4:
                    6f:aa:18:9b:95:af:0b:ad:6f:b0:78:c2:8e:e1:65:
                    cc:6d:47:e4:32:2a:40:2e:c8:d6:a4:68:24:bd:b9:
                    a5:fb:50:06:90:97:e5:b6:3f:64:9d:35:76:6a:81:
                    b8:06:db:27:75:a2:dd:7e:1f:5e:ed:4c:e8:da:80:
                    d9:ac:69:c4:0b:e6:17:d7:23:04:47:b1:cb:50:c6:
                    d7:ee:b4:ce:97:1e:21:05:9d:b4:c2:3a:06:4d:2b:
                    7f:d2:9a:e5:11:a0:5e:94:da:c7:14:f3:e5:c2:4d:
                    b3:a1:70:be:27:4d:ae:49:55:f1:2f:fc:3e:2c:20:
                    1f:08:60:62:3c:ac:25:64:b0:e5:20:cf:5a:d7:be:
                    65:33:d8:b5:12:fd:63:99:46:a5:f8:6d:d4:33:d6:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.248.0/22
                  74.114.48.0/22
                  135.84.232.0/21
                  146.88.152.0/21
                  159.117.132.0-159.117.143.255
                  159.117.201.0/24
                  159.117.223.0/24
                  165.84.232.0/21
                  208.66.232.0/21
                  208.71.212.0/22
                  208.81.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:1e:ec:d9:26:5c:cb:46:5c:01:a2:9d:09:66:23:4c:18:e1:
         af:c8:3b:13:d9:f3:9d:87:4d:4c:05:af:ad:42:3a:20:bf:15:
         6b:25:33:53:01:c0:18:ef:1c:e2:c3:b9:99:92:d5:cc:b9:e8:
         2d:c0:b6:04:27:14:f1:0f:e4:66:6c:ff:3b:57:13:a5:fb:c3:
         2b:1c:3d:51:2f:f2:f8:5c:ac:f8:4b:09:af:ac:99:9b:c1:f5:
         1a:be:ea:43:98:6e:2a:04:e8:14:6d:ff:13:52:c1:cf:91:d1:
         d1:77:28:38:2e:5c:ec:5c:e7:28:13:8a:ae:93:21:18:86:8f:
         91:31:ce:9f:83:3d:ce:6e:09:a5:f5:c0:37:77:88:a0:c0:95:
         23:60:3f:9f:28:73:da:65:a9:f7:69:90:ae:51:07:b5:04:cf:
         37:62:b0:4d:e1:c5:cd:87:dc:84:58:fe:1f:98:e4:e2:04:6e:
         73:2f:74:23:8e:c2:dd:96:79:5f:e2:6b:7f:2b:9f:fe:ed:ea:
         0c:ae:dc:3e:ac:1f:04:fe:ae:f6:ed:58:74:4d:80:37:f6:36:
         27:dd:08:a0:fa:c4:5b:aa:44:10:f5:ac:50:70:23:da:ff:7d:
         62:46:aa:a5:7a:0a:c1:6f:3a:9f:e8:3a:d4:97:2f:43:e8:a1:
         74:bc:7e:2c
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgICPwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjExMjE3MDQyMDQ2WhcNMjMwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCNzc3QzExMC8GA1UEBRMoQjA5MTBCMDdDODZCMEZGQTMwMEE1MkFD
N0MzMUZDQjUyQzA1MzJENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AK73Q59HgqsCE6X86+/nkkD/RVxaFrDALJxzP+1yb/3Z779OpnMKD4VVpWLlxXwt
JW/Y4uPfzlhLOHT0c8e8nxpeDa+ody815FFHyfrkeCxI1Prbex6eYbbjpvONK7kv
6vymBA1kZpukb6oYm5WvC61vsHjCjuFlzG1H5DIqQC7I1qRoJL25pftQBpCX5bY/
ZJ01dmqBuAbbJ3Wi3X4fXu1M6NqA2axpxAvmF9cjBEexy1DG1+60zpceIQWdtMI6
Bk0rf9Ka5RGgXpTaxxTz5cJNs6FwvidNrklV8S/8PiwgHwhgYjysJWSw5SDPWte+
ZTPYtRL9Y5lGpfht1DPWvJkCAwEAAaOCAzcwggMzMB0GA1UdDgQWBBSwkQsHyGsP
+jAKUqx8Mfy1LAUy1zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjc3N0MvNjJEMDNFOENCMkRBMTFFQjhCMzg0QTYwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI3NzdDLzYyRDAzRThDQjJEQTExRUI4QjM4NEE2MEM0RjlBRTAyL3NKRUxCOGhy
RF9vd0NsS3NmREg4dFN3Rk10Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBjBggrBgEFBQcBBwEB/wRUMFIw
UAQCAAEwSgMEAkgj+AMEAkpyMAMEA4dU6AMEA5JYmDAMAwQCn3WEAwQEn3WAAwQA
n3XJAwQAn3XfAwQDpVToAwQD0ELoAwQC0EfUAwQC0FF0MA0GCSqGSIb3DQEBCwUA
A4IBAQC8HuzZJlzLRlwBop0JZiNMGOGvyDsT2fOdh01MBa+tQjogvxVrJTNTAcAY
7xziw7mZktXMuegtwLYEJxTxD+RmbP87VxOl+8MrHD1RL/L4XKz4SwmvrJmbwfUa
vupDmG4qBOgUbf8TUsHPkdHRdyg4LlzsXOcoE4qukyEYho+RMc6fgz3Obgml9cA3
d4igwJUjYD+fKHPaZan3aZCuUQe1BM83YrBN4cXNh9yEWP4fmOTiBG5zL3QjjsLd
lnlf4mt/K5/+7eoMrtw+rB8E/q727Vh0TYA39jYn3Qig+sRbqkQQ9axQcCPa/31i
RqqlegrBbzqf6DrUly9D6KF0vH4s
-----END CERTIFICATE-----

Generated at Fri Dec 17 06:12:07 2021 by LibreSSL & rpki-client.