RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer (download)

Subject key identifier:   D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
CA Repository:            rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 38744
    1: IP: 49.0.32.0/19
    2: IP: 117.58.240.0/21
    3: IP: 2404:b580::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73539 (0x11f43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 20 08:47:21 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:fe:77:80:c9:cb:46:cc:5a:7e:b0:b6:3f:
                    96:77:e0:5e:93:cd:3e:83:63:3e:17:c7:a6:6a:5c:
                    d9:86:fd:ce:d0:f8:85:00:fd:9a:50:b6:71:0d:55:
                    cf:78:40:ae:4c:cc:07:a6:01:88:01:ce:a4:88:c7:
                    72:6c:d4:22:65:6e:56:d8:26:3e:1e:60:6c:fd:f6:
                    ef:89:8e:2c:71:30:c7:62:78:1b:6d:10:76:93:7d:
                    ed:ac:ec:7d:f3:93:fb:b7:22:85:fc:f0:ed:6a:c9:
                    84:c4:be:a8:54:25:dc:e2:1f:39:f2:da:ed:60:c1:
                    ac:bc:03:ec:55:4c:77:db:f9:b2:6a:bc:83:1f:60:
                    a8:bf:25:55:ea:ae:d5:82:22:c1:a9:9d:09:3b:2a:
                    e2:89:aa:7a:f7:38:bf:ac:c0:09:80:25:c2:05:ff:
                    9a:af:37:36:e3:bc:d9:49:d7:e2:03:eb:5d:95:2c:
                    34:93:06:2a:6c:a7:49:98:d6:9f:66:d2:0b:b2:6a:
                    28:dc:8d:45:5f:11:8d:8f:f2:8b:8a:21:07:dd:ab:
                    ae:cb:a7:ea:68:3c:d7:96:a2:df:64:30:36:30:0b:
                    ac:6c:d1:49:3f:88:fa:b6:a7:83:94:ab:64:5d:0a:
                    8a:17:b4:34:b1:fd:e9:66:db:9a:45:97:81:74:a9:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38744

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.32.0/19
                  117.58.240.0/21
                IPv6:
                  2404:b580::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:80:e0:c9:84:b0:f0:f7:35:82:42:09:85:7d:49:66:02:92:
         1e:f5:b9:24:31:ec:13:e4:f2:44:7a:93:d6:85:37:8f:71:0c:
         7f:dd:b5:e4:5a:86:04:b6:7a:ee:12:30:18:e6:8a:27:d4:b2:
         f8:8b:b8:05:4b:cc:8c:1a:ae:66:c1:88:80:95:d1:c8:44:13:
         ae:6a:3d:e2:ac:92:82:82:a0:4e:08:db:03:37:cd:b1:9f:f7:
         25:e7:5d:6a:60:68:39:46:4f:16:0c:41:af:6d:3a:99:8f:43:
         09:45:64:ed:17:34:14:db:f7:d9:4d:a3:3c:1d:79:c0:d1:c3:
         bd:00:da:18:58:59:7d:36:a5:fc:70:c9:3c:ec:9b:63:4a:52:
         32:f6:82:d4:58:89:66:a7:68:6a:7f:54:96:73:dd:dd:86:6d:
         2e:74:44:b3:b9:06:ed:80:23:0c:d7:71:05:14:45:c3:8e:1a:
         f2:28:be:b4:b9:5a:04:ef:a5:cc:81:64:2e:8f:a6:06:4a:4f:
         73:79:ea:32:cf:67:ae:78:d3:d7:08:06:17:5d:23:da:51:b2:
         66:69:e3:ec:51:a5:3d:d2:c8:73:11:31:8b:09:7e:f4:b1:52:
         7d:7c:6c:f3:db:31:72:59:1b:df:82:68:14:84:2d:ff:20:e7:
         67:43:8a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----