RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vHqQXqdjznAvwm3A_C-4JUK8EwA.cer (download)

Subject key identifier:   BC:7A:90:5E:A7:63:CE:70:2F:C2:6D:C0:FC:2F:B8:25:42:BC:13:00
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/vHqQXqdjznAvwm3A_C-4JUK8EwA.mft
CA Repository:            rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 128.94.0.0/16
    2: IP: 135.149.0.0/16
    3: IP: 138.239.0.0/16
    4: IP: 143.64.0.0/16
    5: IP: 147.145.0.0/16
    6: IP: 148.7.0.0/16
    7: IP: 155.62.0.0/16
    8: IP: 158.158.0.0/16
    9: IP: 167.105.0.0/16
    10: IP: 167.220.224.0--167.220.243.255
    11: IP: 167.220.248.0/21
    12: IP: 169.138.0.0/16
    13: IP: 170.165.0.0/16

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vHqQXqdjznAvwm3A_C-4JUK8EwA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14954 (0x3a6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 25 04:40:27 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A91A129B/serialNumber=BC7A905EA763CE702FC26DC0FC2FB82542BC1300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:ac:80:aa:a8:ee:3a:d9:ea:75:54:71:1a:
                    49:72:c7:d8:d7:6d:23:9e:72:b8:15:0f:24:27:9f:
                    de:cc:63:59:41:22:1a:fb:83:a9:8e:b2:85:02:90:
                    d0:08:38:67:ca:a3:4a:77:4e:25:bd:de:37:bb:3a:
                    94:61:b9:fb:0a:c4:8f:56:2a:12:29:d2:eb:41:d1:
                    11:5f:2b:b6:e1:8c:81:72:b4:58:64:24:bb:63:fa:
                    db:66:1b:52:35:a1:37:d9:55:99:2f:e3:dc:cc:42:
                    ea:ed:0b:9f:29:d0:9f:70:5e:46:61:1d:3b:c7:2b:
                    ae:b0:3b:19:7b:9a:e8:33:35:04:fa:32:ee:10:7a:
                    95:87:de:6f:a4:72:21:8a:22:41:b9:1a:d8:06:b8:
                    db:90:9f:54:5d:ad:b1:2d:f5:fb:cb:b4:b3:0c:63:
                    a2:28:33:e9:18:d4:f2:1b:2f:ed:b7:f7:67:fa:c9:
                    10:de:df:f9:e2:1c:3f:e5:80:e2:1e:96:52:11:16:
                    61:fc:ec:78:a4:5c:2e:5f:9d:fe:a6:0d:12:87:b9:
                    21:e9:f2:0a:8e:67:62:d6:d8:19:37:a0:5f:20:d5:
                    71:9b:5e:96:a4:15:d6:61:82:c5:ce:75:a0:3a:8e:
                    d3:d5:48:63:c4:74:4a:fc:19:06:a2:83:1a:94:1b:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BC:7A:90:5E:A7:63:CE:70:2F:C2:6D:C0:FC:2F:B8:25:42:BC:13:00
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/vHqQXqdjznAvwm3A_C-4JUK8EwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.94.0.0/16
                  135.149.0.0/16
                  138.239.0.0/16
                  143.64.0.0/16
                  147.145.0.0/16
                  148.7.0.0/16
                  155.62.0.0/16
                  158.158.0.0/16
                  167.105.0.0/16
                  167.220.224.0-167.220.243.255
                  167.220.248.0/21
                  169.138.0.0/16
                  170.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:11:05:32:eb:9b:6e:d3:7c:ab:45:f1:25:d0:e1:dd:9a:61:
         c6:f6:74:69:8f:1f:9f:87:8e:1e:90:bb:89:2f:1f:39:eb:d1:
         e4:15:4d:1d:a1:68:94:6b:c4:1a:ee:f8:d4:d8:70:97:7b:e9:
         8e:61:aa:fc:d4:15:73:7d:c7:25:24:f4:e3:9c:d5:34:a3:b5:
         a4:7f:10:9b:09:26:90:03:0b:90:1a:cb:3f:c3:17:4d:93:55:
         5b:42:88:ae:30:05:a3:9e:03:b1:67:04:0a:c8:c7:7b:b3:72:
         c8:91:67:6c:bd:02:b1:fd:99:14:0a:e0:a4:5b:7f:a5:aa:7f:
         dc:09:0c:e6:28:50:2c:61:53:eb:92:c0:67:91:31:03:04:b9:
         ab:53:96:7b:14:97:5e:4d:66:e5:ed:48:00:53:f1:d4:c7:9b:
         66:62:c6:c6:2c:fa:b6:fd:1f:ed:4a:4e:bb:1a:29:39:71:73:
         10:e0:30:09:68:a7:77:cc:5b:87:07:72:26:b7:8e:26:99:dc:
         64:46:8e:29:2c:28:90:f7:21:02:bb:13:89:97:13:27:46:1d:
         24:4b:69:27:6c:3e:f4:91:95:dd:1c:1b:68:91:d0:69:2c:76:
         1c:65:92:e5:ee:fc:90:00:7e:8b:9a:ae:b8:fe:15:23:2d:03:
         6f:8e:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:08 2021 by LibreSSL & rpki-client.