Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa
File:                     AS214809.asa (raw, json)
Hash identifier:          3MqiLlZEY04ox4OToYgrbXmsSXFbDBylCL3MaP3vqh0=
Subject key identifier:   75:35:34:3B:7A:52:3E:95:F9:A3:A4:97:06:EC:A1:1E:92:D7:D0:C5
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       25327B07898F37BE1B560A403B58FDACBB518A51
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa
Signing time:             Thu 24 Jul 2025 11:17:55 +0000
ASPA not before:          Thu 24 Jul 2025 11:12:55 +0000
ASPA not after:           Thu 23 Jul 2026 11:17:55 +0000
Customer ASID:            214809
Providers:                AS: 6204
                          AS: 6939
                          AS: 35133
                          AS: 50917
                          AS: 64289
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 21:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:32:7b:07:89:8f:37:be:1b:56:0a:40:3b:58:fd:ac:bb:51:8a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Jul 24 11:12:55 2025 GMT
            Not After : Jul 23 11:17:55 2026 GMT
        Subject: CN=7535343B7A523E95F9A3A49706ECA11E92D7D0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:e9:52:d0:0d:db:ad:b3:94:9f:54:0a:af:
                    6a:b9:8c:03:85:21:d9:96:2c:b9:ac:d0:5c:8d:ea:
                    50:ef:db:b8:b2:f8:a1:69:25:21:cc:34:5e:45:d2:
                    21:0d:fd:00:a0:03:b6:62:60:1e:e3:f9:ae:ff:e6:
                    24:cb:d6:18:93:f1:57:51:33:20:03:91:68:3e:a6:
                    58:5d:38:fe:fa:6b:05:ff:8b:3d:6e:2a:80:aa:47:
                    22:08:77:b3:b7:fe:9e:e8:c8:e3:c9:2a:ef:61:c0:
                    79:af:7d:b1:a7:c2:77:ec:0e:9a:cb:fa:37:ac:86:
                    e0:6b:70:9a:d2:ae:41:99:1c:9b:7c:12:cd:8a:3b:
                    a9:35:ba:f7:03:07:65:9a:17:f4:e3:d1:99:1e:7f:
                    3a:4f:1d:c7:82:d4:9f:59:d7:2c:43:be:ac:2e:de:
                    61:30:9b:c6:f3:5e:ba:b1:02:ba:ce:d4:c8:25:e6:
                    c1:b2:08:75:05:d0:3d:0d:d2:ee:d8:53:22:59:54:
                    51:bd:0b:2e:55:df:9f:d7:b3:24:4f:83:c3:20:33:
                    2e:50:74:09:86:d7:df:1e:34:f1:20:f7:4b:cf:57:
                    e3:d6:68:ab:2d:40:3a:77:68:64:34:f4:cc:1a:69:
                    7c:10:bb:02:73:f6:a9:5b:03:3d:e4:4f:65:3f:72:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:34:3B:7A:52:3E:95:F9:A3:A4:97:06:EC:A1:1E:92:D7:D0:C5
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/AS214809.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214809

    Signature Algorithm: sha256WithRSAEncryption
         79:44:53:ee:54:c2:2f:6a:e0:2d:80:38:5d:29:b9:0e:de:04:
         55:38:11:d5:5c:d3:33:ae:b9:45:68:21:5b:cd:ef:ed:d4:f9:
         60:6a:07:06:39:e0:06:42:de:69:b1:b5:96:93:20:c6:9a:fb:
         f0:78:5a:b8:3d:ee:4b:ae:63:07:a2:20:48:36:85:6f:2b:a0:
         32:f7:2f:ca:dc:02:47:ad:05:6a:cf:97:92:d4:f5:c2:3a:4f:
         dd:43:48:56:22:a9:03:0f:99:11:86:42:25:bb:dc:35:4d:5c:
         7e:85:ac:df:ea:16:3f:88:ac:c9:92:5f:ac:a1:60:18:44:cc:
         15:0a:cc:34:62:7b:0d:09:a3:94:9d:18:11:f5:ad:38:28:44:
         b0:6d:7e:de:9c:82:fd:e1:77:39:2f:17:0c:26:c5:58:c5:20:
         99:1f:b7:e0:71:7b:e6:27:77:77:3a:b5:bd:cf:e9:1d:ce:2d:
         ae:58:0f:85:db:d7:47:96:a6:06:af:b0:42:3c:57:ae:67:12:
         06:22:6f:69:6f:3b:49:1a:64:12:21:42:b6:12:b2:74:35:a2:
         87:aa:54:be:34:0d:ac:99:17:dc:1e:11:66:d6:63:8a:e8:65:
         d6:de:05:5d:c0:c2:53:f4:c7:45:1c:95:61:b5:f7:e1:72:41:
         19:76:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:39:04 2025 by rpki-client