RPKI Root Certificate
Location: rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer (download)

Subject key identifier:   0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Authority key identifier: Trust Anchor
Manifest:                 rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
Subordinate resources:
    1: AS: 1--4294967295
    1: IP: 0.0.0.0/0
    2: IP: ::/0

--
$ openssl x509 -text -inform DER -in rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d3:08:24:27:8b:f9:76:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-iana-origin
        Validity
            Not Before: Aug 26 01:30:06 2020 GMT
            Not After : Aug 25 01:30:06 2025 GMT
        Subject: CN=apnic-rpki-root-iana-origin
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:56:48:be:b5:60:00:18:ba:61:22:53:cc:
                    fc:a8:7d:84:4d:52:0b:d3:58:a5:c5:99:73:20:bf:
                    49:61:23:91:30:de:42:9a:d7:fc:57:62:5b:94:87:
                    9a:95:2a:a0:39:31:a3:bd:28:c4:b2:25:7b:de:ce:
                    bb:cd:84:08:ec:2f:e2:48:e6:fd:ea:e7:f7:fe:cf:
                    3a:36:a6:f1:0e:21:50:18:df:2a:1b:b4:4d:71:d8:
                    15:b9:49:40:89:d9:7c:5b:1b:cb:34:8f:15:86:a6:
                    c0:07:9b:92:83:f3:2b:2d:e4:8e:bd:74:63:6b:4e:
                    35:56:9b:40:c4:88:5c:1b:30:cc:be:50:09:47:09:
                    2b:60:af:cc:a3:c3:f8:13:6a:d2:42:0c:2a:0a:06:
                    9e:d1:e6:d8:d4:2b:09:dc:28:df:8b:ae:c2:d6:7c:
                    3b:a1:7a:89:26:8b:ef:5c:9e:1a:a4:69:84:bf:c6:
                    b3:db:73:8b:0b:a2:a2:e7:85:25:fc:4e:b1:93:6d:
                    bb:04:5b:6d:a8:55:77:60:cb:4a:c7:8d:87:70:27:
                    03:55:96:72:d3:59:fb:26:3c:ef:3b:c7:1c:69:79:
                    87:22:04:7b:ba:d9:ea:84:14:4d:36:ae:57:73:96:
                    61:6e:4a:d4:b0:db:62:26:6a:d9:cd:59:60:53:a3:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
                1.3.6.1.5.5.7.48.10 - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                1.3.6.1.5.5.7.48.13 - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                0...0.0
..........
            sbgp-ipAddrBlock: critical
                0.0.....0....0.....0....
    Signature Algorithm: sha256WithRSAEncryption
         41:fb:68:ad:b7:50:65:af:09:45:1c:6a:74:dd:fd:e7:91:9c:
         38:da:a4:b6:92:15:9b:26:13:db:a3:26:e4:ad:70:7a:e2:61:
         e5:8d:83:06:91:26:ac:60:0c:16:68:9d:d3:c3:06:60:63:c2:
         b8:c0:85:3b:30:20:50:fb:65:43:65:86:8f:53:d3:74:31:2b:
         8d:b8:68:ee:6c:e8:ba:eb:3b:d4:fd:3b:ac:41:aa:e1:31:5e:
         13:f5:8b:52:04:ed:25:4f:7e:06:e1:61:b5:78:db:59:e5:3b:
         44:6b:a5:a3:b8:ee:35:04:e7:ad:ad:a0:c5:18:a4:c8:41:35:
         b8:6d:56:e7:35:7f:fd:b2:fe:44:80:1b:a0:7c:1c:3f:f8:6d:
         b7:2e:2c:9b:60:26:8f:97:5e:2e:de:36:d3:b4:82:8a:7b:fa:
         b5:d1:5d:09:f9:ed:f4:dc:ff:7a:08:12:1d:dd:c3:d5:f7:c0:
         29:1c:90:ed:4d:87:27:a7:79:db:98:06:d1:90:bc:ea:39:1e:
         35:8d:57:9f:f2:30:74:25:33:6b:a6:7d:cc:b9:0b:ba:4e:e9:
         84:d7:9c:1a:80:ab:d3:52:95:46:2f:2a:3d:f9:65:32:8b:60:
         a0:6d:47:9e:4c:06:6e:4e:e8:d0:da:7f:44:3f:45:90:09:1e:
         1b:ac:55:06
-----BEGIN CERTIFICATE-----
MIIEtzCCA5+gAwIBAgIJANMIJCeL+XbmMA0GCSqGSIb3DQEBCwUAMCYxJDAiBgNV
BAMTG2FwbmljLXJwa2ktcm9vdC1pYW5hLW9yaWdpbjAeFw0yMDA4MjYwMTMwMDZa
Fw0yNTA4MjUwMTMwMDZaMCYxJDAiBgNVBAMTG2FwbmljLXJwa2ktcm9vdC1pYW5h
LW9yaWdpbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMfUVki+tWAA
GLphIlPM/Kh9hE1SC9NYpcWZcyC/SWEjkTDeQprX/FdiW5SHmpUqoDkxo70oxLIl
e97Ou82ECOwv4kjm/ern9/7POjam8Q4hUBjfKhu0TXHYFblJQInZfFsbyzSPFYam
wAebkoPzKy3kjr10Y2tONVabQMSIXBswzL5QCUcJK2CvzKPD+BNq0kIMKgoGntHm
2NQrCdwo34uuwtZ8O6F6iSaL71yeGqRphL/Gs9tziwuioueFJfxOsZNtuwRbbahV
d2DLSseNh3AnA1WWctNZ+yY87zvHHGl5hyIEe7rZ6oQUTTauV3OWYW5K1LDbYiZq
2c1ZYFOjrtMCAwEAAaOCAeYwggHiMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUC5zK
kN0Neoo3ZmsZIX/g2EA3t6IwggEGBggrBgEFBQcBCwSB+TCB9jBPBggrBgEFBQcw
BYZDcnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2
NTExRTJCM0JDMjg2MTcyRkQxRkYyLzBuBggrBgEFBQcwCoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2NTExRTJCM0JDMjg2MTcy
RkQxRkYyL0M1ektrTjBOZW9vM1ptc1pJWF9nMkVBM3Q2SS5tZnQwMwYIKwYBBQUH
MA2GJ2h0dHBzOi8vcnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAhBggr
BgEFBQcBCAEB/wQSMBCgDjAMMAoCAQECBQD/////MCcGCCsGAQUFBwEHAQH/BBgw
FjAJBAIAATADAwEAMAkEAgACMAMDAQAwDQYJKoZIhvcNAQELBQADggEBAEH7aK23
UGWvCUUcanTd/eeRnDjapLaSFZsmE9ujJuStcHriYeWNgwaRJqxgDBZondPDBmBj
wrjAhTswIFD7ZUNlho9T03QxK424aO5s6LrrO9T9O6xBquExXhP1i1IE7SVPfgbh
YbV421nlO0RrpaO47jUE562toMUYpMhBNbhtVuc1f/2y/kSAG6B8HD/4bbcuLJtg
Jo+XXi7eNtO0gop7+rXRXQn57fTc/3oIEh3dw9X3wCkckO1NhyeneduYBtGQvOo5
HjWNV5/yMHQlM2umfcy5C7pO6YTXnBqAq9NSlUYvKj35ZTKLYKBtR55MBm5O6NDa
f0Q/RZAJHhusVQY=
-----END CERTIFICATE-----

Generated at Wed Mar 3 03:32:03 2021 by LibreSSL & rpki-client.