Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/926383-923b-49b6-a4da-3c95cc4fe7f7/1/0wCMoMDWhDFQHaqhoTnc7qPGfgA.asa
File:                     0wCMoMDWhDFQHaqhoTnc7qPGfgA.asa (raw, json)
Hash identifier:          CSTNJk++uEQC/QKtqamZdZNU3uh/UO2oas0EWlTJeEU=
Subject key identifier:   D3:00:8C:A0:C0:D6:84:31:50:1D:AA:A1:A1:39:DC:EE:A3:C6:7E:00
Certificate issuer:       /CN=30fb620f2a41de9c222edcc68baf1b489948c374
Certificate serial:       01A15BD872C198D2BCEE8D213F2D07647A9D
Authority key identifier: 30:FB:62:0F:2A:41:DE:9C:22:2E:DC:C6:8B:AF:1B:48:99:48:C3:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPtiDypB3pwiLtzGi68bSJlIw3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/926383-923b-49b6-a4da-3c95cc4fe7f7/1/0wCMoMDWhDFQHaqhoTnc7qPGfgA.asa
Signing time:             Wed 21 Oct 2026 00:24:34 +0000
ASPA not before:          Wed 21 Oct 2026 00:24:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218357
Providers:                AS: 34872
                          AS: 210233
                          AS: 268624
                          AS: 401661
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/926383-923b-49b6-a4da-3c95cc4fe7f7/1/MPtiDypB3pwiLtzGi68bSJlIw3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/926383-923b-49b6-a4da-3c95cc4fe7f7/1/MPtiDypB3pwiLtzGi68bSJlIw3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPtiDypB3pwiLtzGi68bSJlIw3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:d8:72:c1:98:d2:bc:ee:8d:21:3f:2d:07:64:7a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30fb620f2a41de9c222edcc68baf1b489948c374
        Validity
            Not Before: Oct 21 00:24:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3008ca0c0d68431501daaa1a139dceea3c67e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:f3:f4:1b:ba:f3:27:1b:f2:88:e1:85:f5:
                    d4:ab:cb:e0:d3:42:6a:5c:e0:03:be:08:2e:22:63:
                    a8:15:69:89:9f:e4:4b:7a:35:da:30:d4:70:31:85:
                    41:40:59:fb:e0:87:2c:72:e7:f1:89:c4:73:72:3e:
                    ae:94:f8:e6:48:fc:53:19:3b:6a:d3:4b:e0:81:36:
                    db:ff:91:69:55:95:bc:cc:fa:00:ea:41:66:a8:8f:
                    02:6a:fa:96:34:1c:b2:5b:80:9b:b9:89:d5:df:e7:
                    78:5d:b6:0b:e1:95:31:b8:e7:7f:46:79:bd:d8:06:
                    29:25:35:b0:ea:65:e9:68:3f:87:8b:6a:75:c6:4f:
                    b2:78:15:40:f7:f4:ff:8b:02:a0:63:0d:2e:2e:84:
                    08:ce:3a:6f:fc:80:4e:76:bb:a3:72:4e:ec:23:73:
                    d7:31:1e:e4:9b:23:a2:41:79:86:b1:43:ea:3e:6a:
                    a3:6a:98:cd:0d:37:30:9a:0f:ce:b4:01:97:2a:33:
                    2f:66:b5:12:5e:4e:e7:3f:b4:52:69:ab:2e:38:92:
                    6c:bd:0e:7c:e0:d3:f0:a8:aa:24:aa:6a:22:21:e7:
                    0d:2e:0d:21:ba:26:c7:7b:a1:5c:69:ff:a5:e1:4d:
                    c0:ca:5d:46:46:e3:05:d8:96:af:62:92:32:08:94:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:00:8C:A0:C0:D6:84:31:50:1D:AA:A1:A1:39:DC:EE:A3:C6:7E:00
            X509v3 Authority Key Identifier:
                keyid:30:FB:62:0F:2A:41:DE:9C:22:2E:DC:C6:8B:AF:1B:48:99:48:C3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPtiDypB3pwiLtzGi68bSJlIw3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/926383-923b-49b6-a4da-3c95cc4fe7f7/1/0wCMoMDWhDFQHaqhoTnc7qPGfgA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/926383-923b-49b6-a4da-3c95cc4fe7f7/1/MPtiDypB3pwiLtzGi68bSJlIw3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218357

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:fd:fd:c8:11:69:ad:35:c1:fb:e5:08:ad:79:26:dc:11:
         d4:2f:bf:a1:02:ef:d0:28:22:67:3d:e1:f2:ee:8e:45:38:bc:
         20:b7:ed:8f:f5:ba:7f:1e:25:e2:7a:ee:83:eb:82:aa:24:9a:
         87:d5:fc:4c:d8:03:37:5e:10:da:66:ed:2f:0d:c6:35:dc:6b:
         38:01:d8:db:28:65:98:e4:81:d0:1e:0f:b8:d7:b5:86:ee:44:
         ac:dd:dd:fe:14:45:bf:52:bf:3a:f1:14:e6:7b:84:70:69:10:
         ea:c5:82:4f:83:87:5c:0c:74:86:2e:5e:b6:d2:f4:98:e7:d3:
         38:97:01:e4:1e:fa:12:80:fd:5b:da:da:ac:c8:40:96:c6:7e:
         39:e6:7a:a9:4b:34:19:3b:b1:8f:03:4a:b5:79:b9:b2:2f:97:
         1d:10:8b:d1:53:2e:f4:1b:9b:c0:c7:d0:dd:69:73:d4:73:4e:
         16:28:7f:f3:ff:94:03:ef:d6:6a:56:4f:1b:db:79:51:61:74:
         1c:0b:92:74:d7:70:1e:88:6b:22:8e:08:8d:d1:26:64:bf:b4:
         27:cb:49:e3:05:67:d8:b1:66:b3:a4:bf:7f:e7:18:0d:5c:dc:
         a7:dd:93:e5:9e:f2:f2:25:b1:e9:93:be:2a:f4:55:69:c9:6e:
         42:b4:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:06 2026 by rpki-client