RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer (download)

Subject key identifier:   97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
CA Repository:            rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 136911
    1: IP: 103.98.135.0/24
    2: IP: 2001:df2:3700::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74588 (0x1235c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 10 06:18:37 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:c9:bd:d8:0f:e8:f2:30:9f:7d:8f:43:31:
                    2b:c3:1f:f4:e4:35:71:62:2a:93:1d:e6:dc:19:4c:
                    a9:ec:d6:ce:2e:fd:a1:21:b9:4d:9c:ec:ec:26:68:
                    39:29:1e:7d:81:0b:0b:29:91:64:14:27:e8:3c:00:
                    62:f9:7a:1e:01:25:cf:78:1c:96:17:f5:d1:2b:53:
                    6a:80:ed:ed:48:f8:b0:af:d8:d0:26:d5:63:32:fb:
                    75:ca:68:d3:6d:27:e7:6f:56:e1:68:a5:48:16:9c:
                    ee:1d:12:c2:ca:b5:44:db:a2:ae:3d:c1:01:23:c3:
                    bf:eb:e4:7e:55:ee:30:cd:a4:3f:d7:17:82:31:3d:
                    1c:8f:46:ff:e7:85:ea:2e:aa:3c:ac:d3:46:80:ec:
                    12:44:23:6b:17:99:1e:12:43:b3:02:88:37:0d:c2:
                    18:60:81:a5:51:6a:fe:50:45:e9:bb:90:3f:f8:f4:
                    49:48:bc:19:66:30:97:03:83:7e:e3:4c:50:40:6f:
                    3a:12:ca:d1:b4:74:7d:06:ab:15:36:7c:a9:f7:17:
                    f5:47:59:78:1d:69:6c:ff:cc:ef:1c:d5:79:ed:cd:
                    77:a6:f9:1d:6b:9a:79:16:13:f6:21:28:05:30:a9:
                    99:17:b6:ea:c4:04:0f:1d:70:30:17:d8:5d:47:85:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136911

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.135.0/24
                IPv6:
                  2001:df2:3700::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:76:31:1a:53:ee:09:0e:ca:c8:01:e5:5d:11:f1:53:8a:f0:
         9b:39:48:13:f0:be:27:42:07:05:f0:28:a3:30:95:bc:14:22:
         5c:c7:54:8e:64:f8:52:48:0f:10:f9:c7:f6:5c:82:08:db:ae:
         69:7a:88:4b:05:5e:7e:5f:51:74:2c:8a:29:6b:76:a2:a0:c4:
         85:71:d9:9e:e4:05:d5:f7:6f:99:19:6b:fb:b9:f0:80:65:37:
         df:fc:a6:f8:9a:88:58:df:73:11:3d:98:bb:82:fc:c4:3c:5c:
         eb:51:32:35:9e:9b:10:d8:e6:d9:2d:2f:f5:c2:02:9c:7c:39:
         15:80:63:dd:20:dc:ff:7d:c1:22:93:ad:e5:32:a8:5a:72:d0:
         6a:29:21:58:15:98:e0:4b:2d:8f:4f:32:b0:d7:30:d5:45:88:
         9f:cb:67:18:5a:f5:a8:56:a6:dc:50:34:3e:7f:2a:bc:00:21:
         1e:e0:b3:68:43:bd:d9:08:da:7a:83:c0:0a:c4:67:cd:3d:5f:
         6c:87:89:44:d4:e8:76:5b:ec:f2:dd:18:eb:45:2b:67:d9:2e:
         0f:b3:6a:ce:b4:76:fc:fb:38:2c:2c:b1:0e:4b:2b:46:9e:44:
         32:46:26:c5:40:b0:2d:e7:53:80:2b:9b:58:53:e6:ee:3f:64:
         4e:a3:d5:65
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDASNcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDgxMDA2MTgzN1oXDTIyMTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1
MThBMzQ4NkE0NjAyQkVENDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTMsm92A/o8jCffY9DMSvDH/TkNXFiKpMd5twZTKns1s4u/aEhuU2c7OwmaDkp
Hn2BCwspkWQUJ+g8AGL5eh4BJc94HJYX9dErU2qA7e1I+LCv2NAm1WMy+3XKaNNt
J+dvVuFopUgWnO4dEsLKtUTboq49wQEjw7/r5H5V7jDNpD/XF4IxPRyPRv/nheou
qjys00aA7BJEI2sXmR4SQ7MCiDcNwhhggaVRav5QRem7kD/49ElIvBlmMJcDg37j
TFBAbzoSytG0dH0GqxU2fKn3F/VHWXgdaWz/zO8c1XntzXem+R1rmnkWE/YhKAUw
qZkXturEBA8dcDAX2F1HhfYnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUl2VeH0U4
P5U4rbFRijSGpGAr7UQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZFNDBCL0RDNUYxQUNBMDUzOTExRUFCMTc0MkM2QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGRTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBV
NFA1VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhbPMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ2KHMA8EAgAC
MAkDBwAgAQ3yNwAwDQYJKoZIhvcNAQELBQADggEBAHJ2MRpT7gkOysgB5V0R8VOK
8Js5SBPwvidCBwXwKKMwlbwUIlzHVI5k+FJIDxD5x/Zcggjbrml6iEsFXn5fUXQs
iilrdqKgxIVx2Z7kBdX3b5kZa/u58IBlN9/8pviaiFjfcxE9mLuC/MQ8XOtRMjWe
mxDY5tktL/XCApx8ORWAY90g3P99wSKTreUyqFpy0GopIVgVmOBLLY9PMrDXMNVF
iJ/LZxha9ahWptxQND5/KrwAIR7gs2hDvdkI2nqDwArEZ809X2yHiUTU6HZb7PLd
GOtFK2fZLg+zas60dvz7OCwssQ5LK0aeRDJGJsVAsC3nU4Arm1hT5u4/ZE6j1WU=
-----END CERTIFICATE-----