Certificate

$ rpki-client -vvf ta/apnic/apnic-rpki-root-iana-origin.cer
File:                     apnic-rpki-root-iana-origin.cer (raw, json)
Hash identifier:          aHzc+JUzwmriwbulj0vzs6gq3aCU2eS2TJg6VmbNcFk=
TAL:                      apnic
Subject key identifier:   0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer:       /CN=apnic-rpki-root-iana-origin
Certificate serial:       E61667EAC274FBE0
Manifest:                 rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
caRepository:             rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 20 Sep 2021 22:14:57 +0000
Certificate not after:    Sat 19 Sep 2026 22:14:57 +0000
Subordinate resources:    AS: 1 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0

Validation:               OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e6:16:67:ea:c2:74:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-iana-origin
        Validity
            Not Before: Sep 20 22:14:57 2021 GMT
            Not After : Sep 19 22:14:57 2026 GMT
        Subject: CN=apnic-rpki-root-iana-origin
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:56:48:be:b5:60:00:18:ba:61:22:53:cc:
                    fc:a8:7d:84:4d:52:0b:d3:58:a5:c5:99:73:20:bf:
                    49:61:23:91:30:de:42:9a:d7:fc:57:62:5b:94:87:
                    9a:95:2a:a0:39:31:a3:bd:28:c4:b2:25:7b:de:ce:
                    bb:cd:84:08:ec:2f:e2:48:e6:fd:ea:e7:f7:fe:cf:
                    3a:36:a6:f1:0e:21:50:18:df:2a:1b:b4:4d:71:d8:
                    15:b9:49:40:89:d9:7c:5b:1b:cb:34:8f:15:86:a6:
                    c0:07:9b:92:83:f3:2b:2d:e4:8e:bd:74:63:6b:4e:
                    35:56:9b:40:c4:88:5c:1b:30:cc:be:50:09:47:09:
                    2b:60:af:cc:a3:c3:f8:13:6a:d2:42:0c:2a:0a:06:
                    9e:d1:e6:d8:d4:2b:09:dc:28:df:8b:ae:c2:d6:7c:
                    3b:a1:7a:89:26:8b:ef:5c:9e:1a:a4:69:84:bf:c6:
                    b3:db:73:8b:0b:a2:a2:e7:85:25:fc:4e:b1:93:6d:
                    bb:04:5b:6d:a8:55:77:60:cb:4a:c7:8d:87:70:27:
                    03:55:96:72:d3:59:fb:26:3c:ef:3b:c7:1c:69:79:
                    87:22:04:7b:ba:d9:ea:84:14:4d:36:ae:57:73:96:
                    61:6e:4a:d4:b0:db:62:26:6a:d9:cd:59:60:53:a3:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1-4294967295

            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

    Signature Algorithm: sha256WithRSAEncryption
         62:43:ae:a7:2c:ac:4e:7c:29:29:37:00:b7:e5:93:52:b7:c6:
         18:6a:47:58:e1:d2:49:c0:ea:61:db:0f:17:8b:e6:a3:2b:a0:
         77:b8:43:0d:db:7c:c9:f7:ec:ee:56:e1:7d:7b:6a:f7:94:2c:
         ce:ad:a4:9b:36:df:2b:bb:55:67:f2:79:3d:81:68:61:a4:92:
         ef:e7:57:bd:6f:45:e5:ac:ed:dd:8f:d7:44:6a:16:54:63:a0:
         0c:87:71:2c:05:6f:fa:27:a6:cd:47:d5:52:74:7d:e0:75:80:
         d7:ff:1a:e8:e8:23:eb:a4:f9:38:0e:6e:47:42:92:99:c0:4b:
         d5:30:8a:d7:a3:c6:0d:1d:65:91:a9:48:32:46:84:62:6e:46:
         95:d1:12:46:f6:f9:ba:ca:e6:18:a7:78:9b:b3:7b:4c:5e:cf:
         53:f6:8e:af:dd:29:21:7e:df:d5:80:c5:00:c2:f1:d8:43:6f:
         db:8c:a3:56:70:57:9b:be:92:c1:fe:1e:25:dc:ea:47:a0:ba:
         3b:4f:e9:4e:5b:b0:63:aa:83:0b:c1:cc:47:d8:b9:88:38:6a:
         7c:8c:e4:a2:bd:87:cf:68:06:43:66:0c:56:8f:26:a9:f8:b5:
         ff:aa:46:ea:d7:17:90:68:ad:e0:d9:65:5b:ad:d8:63:75:35:
         0a:68:23:ca
-----BEGIN CERTIFICATE-----
MIIEtzCCA5+gAwIBAgIJAOYWZ+rCdPvgMA0GCSqGSIb3DQEBCwUAMCYxJDAiBgNV
BAMTG2FwbmljLXJwa2ktcm9vdC1pYW5hLW9yaWdpbjAeFw0yMTA5MjAyMjE0NTda
Fw0yNjA5MTkyMjE0NTdaMCYxJDAiBgNVBAMTG2FwbmljLXJwa2ktcm9vdC1pYW5h
LW9yaWdpbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMfUVki+tWAA
GLphIlPM/Kh9hE1SC9NYpcWZcyC/SWEjkTDeQprX/FdiW5SHmpUqoDkxo70oxLIl
e97Ou82ECOwv4kjm/ern9/7POjam8Q4hUBjfKhu0TXHYFblJQInZfFsbyzSPFYam
wAebkoPzKy3kjr10Y2tONVabQMSIXBswzL5QCUcJK2CvzKPD+BNq0kIMKgoGntHm
2NQrCdwo34uuwtZ8O6F6iSaL71yeGqRphL/Gs9tziwuioueFJfxOsZNtuwRbbahV
d2DLSseNh3AnA1WWctNZ+yY87zvHHGl5hyIEe7rZ6oQUTTauV3OWYW5K1LDbYiZq
2c1ZYFOjrtMCAwEAAaOCAeYwggHiMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUC5zK
kN0Neoo3ZmsZIX/g2EA3t6IwggEGBggrBgEFBQcBCwSB+TCB9jBPBggrBgEFBQcw
BYZDcnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2
NTExRTJCM0JDMjg2MTcyRkQxRkYyLzBuBggrBgEFBQcwCoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2NTExRTJCM0JDMjg2MTcy
RkQxRkYyL0M1ektrTjBOZW9vM1ptc1pJWF9nMkVBM3Q2SS5tZnQwMwYIKwYBBQUH
MA2GJ2h0dHBzOi8vcnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAhBggr
BgEFBQcBCAEB/wQSMBCgDjAMMAoCAQECBQD/////MCcGCCsGAQUFBwEHAQH/BBgw
FjAJBAIAATADAwEAMAkEAgACMAMDAQAwDQYJKoZIhvcNAQELBQADggEBAGJDrqcs
rE58KSk3ALflk1K3xhhqR1jh0knA6mHbDxeL5qMroHe4Qw3bfMn37O5W4X17aveU
LM6tpJs23yu7VWfyeT2BaGGkku/nV71vReWs7d2P10RqFlRjoAyHcSwFb/onps1H
1VJ0feB1gNf/GujoI+uk+TgObkdCkpnAS9Uwitejxg0dZZGpSDJGhGJuRpXREkb2
+brK5hineJuze0xez1P2jq/dKSF+39WAxQDC8dhDb9uMo1ZwV5u+ksH+HiXc6keg
ujtP6U5bsGOqgwvBzEfYuYg4anyM5KK9h89oBkNmDFaPJqn4tf+qRurXF5BoreDZ
ZVut2GN1NQpoI8o=
-----END CERTIFICATE-----