
Certificate
$ rpki-client -vvf ta/apnic/apnic-rpki-root-iana-origin.cer
File: apnic-rpki-root-iana-origin.cer (raw, json)
Hash identifier: aHzc+JUzwmriwbulj0vzs6gq3aCU2eS2TJg6VmbNcFk=
TAL: apnic
Subject key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: E61667EAC274FBE0
Manifest: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
caRepository: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Sep 2021 22:14:57 +0000
Certificate not after: Sat 19 Sep 2026 22:14:57 +0000
Subordinate resources: AS: 1 -- 4294967295
IP: 0.0.0.0/0
IP: ::/0
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e6:16:67:ea:c2:74:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Sep 20 22:14:57 2021 GMT
Not After : Sep 19 22:14:57 2026 GMT
Subject: CN=apnic-rpki-root-iana-origin
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:56:48:be:b5:60:00:18:ba:61:22:53:cc:
fc:a8:7d:84:4d:52:0b:d3:58:a5:c5:99:73:20:bf:
49:61:23:91:30:de:42:9a:d7:fc:57:62:5b:94:87:
9a:95:2a:a0:39:31:a3:bd:28:c4:b2:25:7b:de:ce:
bb:cd:84:08:ec:2f:e2:48:e6:fd:ea:e7:f7:fe:cf:
3a:36:a6:f1:0e:21:50:18:df:2a:1b:b4:4d:71:d8:
15:b9:49:40:89:d9:7c:5b:1b:cb:34:8f:15:86:a6:
c0:07:9b:92:83:f3:2b:2d:e4:8e:bd:74:63:6b:4e:
35:56:9b:40:c4:88:5c:1b:30:cc:be:50:09:47:09:
2b:60:af:cc:a3:c3:f8:13:6a:d2:42:0c:2a:0a:06:
9e:d1:e6:d8:d4:2b:09:dc:28:df:8b:ae:c2:d6:7c:
3b:a1:7a:89:26:8b:ef:5c:9e:1a:a4:69:84:bf:c6:
b3:db:73:8b:0b:a2:a2:e7:85:25:fc:4e:b1:93:6d:
bb:04:5b:6d:a8:55:77:60:cb:4a:c7:8d:87:70:27:
03:55:96:72:d3:59:fb:26:3c:ef:3b:c7:1c:69:79:
87:22:04:7b:ba:d9:ea:84:14:4d:36:ae:57:73:96:
61:6e:4a:d4:b0:db:62:26:6a:d9:cd:59:60:53:a3:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Key Identifier:
0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
RPKI Manifest - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1-4294967295
sbgp-ipAddrBlock: critical
IPv4:
0.0.0.0/0
IPv6:
::/0
Signature Algorithm: sha256WithRSAEncryption
62:43:ae:a7:2c:ac:4e:7c:29:29:37:00:b7:e5:93:52:b7:c6:
18:6a:47:58:e1:d2:49:c0:ea:61:db:0f:17:8b:e6:a3:2b:a0:
77:b8:43:0d:db:7c:c9:f7:ec:ee:56:e1:7d:7b:6a:f7:94:2c:
ce:ad:a4:9b:36:df:2b:bb:55:67:f2:79:3d:81:68:61:a4:92:
ef:e7:57:bd:6f:45:e5:ac:ed:dd:8f:d7:44:6a:16:54:63:a0:
0c:87:71:2c:05:6f:fa:27:a6:cd:47:d5:52:74:7d:e0:75:80:
d7:ff:1a:e8:e8:23:eb:a4:f9:38:0e:6e:47:42:92:99:c0:4b:
d5:30:8a:d7:a3:c6:0d:1d:65:91:a9:48:32:46:84:62:6e:46:
95:d1:12:46:f6:f9:ba:ca:e6:18:a7:78:9b:b3:7b:4c:5e:cf:
53:f6:8e:af:dd:29:21:7e:df:d5:80:c5:00:c2:f1:d8:43:6f:
db:8c:a3:56:70:57:9b:be:92:c1:fe:1e:25:dc:ea:47:a0:ba:
3b:4f:e9:4e:5b:b0:63:aa:83:0b:c1:cc:47:d8:b9:88:38:6a:
7c:8c:e4:a2:bd:87:cf:68:06:43:66:0c:56:8f:26:a9:f8:b5:
ff:aa:46:ea:d7:17:90:68:ad:e0:d9:65:5b:ad:d8:63:75:35:
0a:68:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:47 2023 by rpki-client on console-ams.rpki-client.org