Certificate
$ rpki-client -vvf ta/apnic/apnic-rpki-root-iana-origin.cer
File: apnic-rpki-root-iana-origin.cer (raw, json)
Hash identifier: HuHfgGBcQ97LqqMXcTNqTAxyBz+Y17/EfYwfuK6vDcA=
TAL: apnic
Subject key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: 937C4D0A78BF614C
Manifest: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
caRepository: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Nov 2023 23:48:07 +0000
Certificate not after: Mon 30 Oct 2028 23:48:07 +0000
Subordinate resources: AS: 1 -- 4294967295
IP: 0.0.0.0/0
IP: ::/0
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
93:7c:4d:0a:78:bf:61:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Nov 1 23:48:07 2023 GMT
Not After : Oct 30 23:48:07 2028 GMT
Subject: CN=apnic-rpki-root-iana-origin
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:56:48:be:b5:60:00:18:ba:61:22:53:cc:
fc:a8:7d:84:4d:52:0b:d3:58:a5:c5:99:73:20:bf:
49:61:23:91:30:de:42:9a:d7:fc:57:62:5b:94:87:
9a:95:2a:a0:39:31:a3:bd:28:c4:b2:25:7b:de:ce:
bb:cd:84:08:ec:2f:e2:48:e6:fd:ea:e7:f7:fe:cf:
3a:36:a6:f1:0e:21:50:18:df:2a:1b:b4:4d:71:d8:
15:b9:49:40:89:d9:7c:5b:1b:cb:34:8f:15:86:a6:
c0:07:9b:92:83:f3:2b:2d:e4:8e:bd:74:63:6b:4e:
35:56:9b:40:c4:88:5c:1b:30:cc:be:50:09:47:09:
2b:60:af:cc:a3:c3:f8:13:6a:d2:42:0c:2a:0a:06:
9e:d1:e6:d8:d4:2b:09:dc:28:df:8b:ae:c2:d6:7c:
3b:a1:7a:89:26:8b:ef:5c:9e:1a:a4:69:84:bf:c6:
b3:db:73:8b:0b:a2:a2:e7:85:25:fc:4e:b1:93:6d:
bb:04:5b:6d:a8:55:77:60:cb:4a:c7:8d:87:70:27:
03:55:96:72:d3:59:fb:26:3c:ef:3b:c7:1c:69:79:
87:22:04:7b:ba:d9:ea:84:14:4d:36:ae:57:73:96:
61:6e:4a:d4:b0:db:62:26:6a:d9:cd:59:60:53:a3:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Key Identifier:
0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
RPKI Manifest - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1-4294967295
sbgp-ipAddrBlock: critical
IPv4:
0.0.0.0/0
IPv6:
::/0
Signature Algorithm: sha256WithRSAEncryption
c6:43:59:01:e1:de:f5:a3:5c:fd:1b:0f:23:11:2a:f4:1a:54:
9e:34:89:6a:c4:0f:dc:6e:af:ac:ca:4e:47:57:9e:fb:47:15:
6a:c6:6f:9d:88:39:89:08:6c:1a:61:ba:03:0d:a7:1d:fc:4d:
d6:e9:66:23:cd:a3:04:2a:ab:4c:62:b9:5b:1d:58:4d:a7:4d:
36:6e:aa:98:10:e1:77:b2:93:14:3e:e2:b4:cd:2f:92:af:c5:
e0:8e:f8:88:8d:21:fd:aa:ce:8e:e5:a5:04:50:c9:74:92:23:
47:fa:23:0e:da:92:8f:0e:98:65:06:17:21:ed:29:38:fb:cf:
c9:21:62:a8:5e:60:fc:ae:c8:ad:51:19:5c:59:83:5e:e7:41:
03:a4:bd:6a:13:c6:2b:a2:28:1a:bf:17:99:d2:3b:20:a7:a6:
71:4d:53:e3:3f:33:a7:92:07:41:2f:90:40:89:e8:68:2e:a7:
84:47:dd:8f:79:70:7f:3d:f9:ab:fc:fd:a0:31:33:e5:f0:2c:
93:e8:d3:30:2e:da:e8:54:7f:7c:41:37:df:ef:d1:dd:9f:76:
1d:fb:29:ba:66:48:e1:34:88:3f:66:3b:76:5d:22:9a:3c:fc:
e6:e4:f0:34:af:b7:bd:b4:7c:0b:8c:65:fa:87:2a:b9:be:36:
b2:a4:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:35:17 2024 by rpki-client on console-fra.rpki-client.org