Autonomous System Provider Authorization

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/AS214402.asa
File:                     AS214402.asa (raw, json)
Hash identifier:          +2kmYZ6qiz/lf40JTDyUjBioEfCYLxRpcGiCShdK6Q4=
Subject key identifier:   A0:1A:5C:E6:1C:24:FC:35:43:33:D7:C4:21:4D:CE:CE:06:4A:BA:53
Certificate issuer:       /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial:       589BA5D835A7315A8B3A2D691150FDD8912B7A9F
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/6/AS214402.asa
Signing time:             Thu 04 Sep 2025 22:14:19 +0000
ASPA not before:          Thu 04 Sep 2025 22:09:19 +0000
ASPA not after:           Thu 03 Sep 2026 22:14:19 +0000
Customer ASID:            214402
Providers:                AS: 2914
                          AS: 6939
                          AS: 9002
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Oct 2025 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9b:a5:d8:35:a7:31:5a:8b:3a:2d:69:11:50:fd:d8:91:2b:7a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
        Validity
            Not Before: Sep  4 22:09:19 2025 GMT
            Not After : Sep  3 22:14:19 2026 GMT
        Subject: CN=A01A5CE61C24FC354333D7C4214DCECE064ABA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:b0:1e:30:29:82:0e:90:d5:dc:d9:e6:d8:
                    34:79:c8:cc:1b:38:d8:f9:a7:59:39:b3:80:6a:ba:
                    9d:66:ed:ca:c9:bd:ab:03:43:87:97:d2:48:7b:fb:
                    e7:59:f8:ea:86:b3:d8:55:ee:49:2a:61:16:d2:02:
                    25:e8:38:86:e8:b6:00:b3:78:b8:14:27:9a:fe:c0:
                    a4:44:95:e9:05:e4:d7:9e:6e:2d:ee:7c:87:3b:e9:
                    b9:e1:e4:d1:2e:56:95:69:bb:42:f7:4d:b9:11:63:
                    c7:39:e7:f3:7d:85:eb:e3:6d:05:04:06:9d:37:8c:
                    12:37:d3:03:b5:85:f4:19:1d:46:d3:6e:7f:dc:37:
                    ae:39:64:c1:9e:17:25:12:c6:3b:31:28:c9:3b:41:
                    d2:5e:00:1e:f4:3a:9a:b5:c1:a7:da:8e:ad:18:88:
                    c4:c2:76:29:fa:f2:97:df:c3:e3:98:cf:96:46:b2:
                    b8:45:fe:4c:04:32:7c:30:46:97:fb:42:e6:7e:3a:
                    88:27:a2:dc:49:99:95:76:d1:b8:5f:aa:a8:15:97:
                    bc:4e:d7:34:77:7e:47:4a:30:2d:cd:62:dc:f8:4b:
                    2a:04:40:23:98:8a:07:b3:65:3e:ad:3c:19:5b:36:
                    84:4d:35:6e:32:20:5e:3c:7c:80:2b:10:0a:c1:7f:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1A:5C:E6:1C:24:FC:35:43:33:D7:C4:21:4D:CE:CE:06:4A:BA:53
            X509v3 Authority Key Identifier:
                keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/AS214402.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214402

    Signature Algorithm: sha256WithRSAEncryption
         5d:d6:d8:6f:fb:7b:07:0d:a9:bd:f0:c3:fd:e9:1c:65:eb:d6:
         c0:76:2b:40:ce:0c:5c:b9:32:50:27:ec:b5:4b:c0:39:b2:86:
         2d:0b:14:00:ca:97:d8:76:2e:7b:e3:93:d6:81:99:56:f2:d0:
         53:90:0c:65:0d:9e:63:53:28:07:c0:47:a9:69:e9:e9:98:46:
         d8:ac:5e:5c:1e:9c:da:ca:ab:53:99:8d:8e:36:91:a8:44:0e:
         d3:82:45:4e:19:85:53:38:62:ad:7d:16:d5:06:3e:cc:d5:c4:
         2e:c0:e9:90:a0:54:4d:17:63:9f:61:d8:8d:5f:c0:d0:80:bc:
         ac:0c:a8:61:19:13:6b:55:e4:94:ce:45:19:78:9a:91:e2:eb:
         5e:b7:dd:a9:27:c5:42:f8:5f:1f:0d:14:9b:5f:67:62:0e:86:
         55:24:b2:a6:69:2f:66:37:5e:09:5d:94:6d:47:b3:36:c3:3a:
         48:59:04:90:4f:da:97:86:99:49:b3:57:ff:de:8b:9a:5a:1a:
         59:04:d7:ec:b6:de:56:12:b7:72:7f:5d:6d:8f:59:7f:05:bd:
         37:23:31:5d:cb:5f:ed:38:d9:d7:b7:0a:5d:33:ef:44:8c:59:
         82:e2:2e:67:34:db:86:74:65:33:ce:26:8d:b2:b7:62:ec:db:
         8e:03:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 00:01:45 2025 by rpki-client