Autonomous System Provider Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/6/AS945.asa
File:                     AS945.asa (raw, json)
Hash identifier:          mJGVpJBSx1LOVWBUAXhETAqBCOLDjn9R6XiTZ/o+U7M=
Subject key identifier:   74:B8:4F:FC:3B:E1:5F:DD:FB:EB:FF:D7:B7:07:45:27:72:C2:00:F8
Certificate issuer:       /CN=55be4a8926763da0c18a343cfcffbdfd3c9e6daf
Certificate serial:       7A694C484B42E8811B21A52D2F6DE788768F4E6F
Authority key identifier: 55:BE:4A:89:26:76:3D:A0:C1:8A:34:3C:FC:FF:BD:FD:3C:9E:6D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vb5KiSZ2PaDBijQ8_P-9_Tyeba8.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/6/AS945.asa
Signing time:             Wed 29 Jan 2025 05:45:38 +0000
ASPA not before:          Wed 29 Jan 2025 05:40:38 +0000
ASPA not after:           Wed 28 Jan 2026 05:45:38 +0000
Customer ASID:            945
Providers:                AS: 174
                          AS: 6461
                          AS: 6939
                          AS: 7018
                          AS: 9002
                          AS: 401111
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vb5KiSZ2PaDBijQ8_P-9_Tyeba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:69:4c:48:4b:42:e8:81:1b:21:a5:2d:2f:6d:e7:88:76:8f:4e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55be4a8926763da0c18a343cfcffbdfd3c9e6daf
        Validity
            Not Before: Jan 29 05:40:38 2025 GMT
            Not After : Jan 28 05:45:38 2026 GMT
        Subject: CN=74B84FFC3BE15FDDFBEBFFD7B707452772C200F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:ff:a2:64:8b:17:6f:27:5c:ff:24:c0:fc:
                    21:93:f1:72:f4:84:b4:0e:eb:17:b9:a7:56:d3:7f:
                    cc:a1:10:da:a9:25:52:3d:28:0f:3d:aa:46:c2:a1:
                    69:6d:0b:b4:4b:27:1d:88:6d:c6:91:bc:ad:e9:2f:
                    d9:5a:53:30:6f:15:ad:de:c8:a5:75:17:e2:a1:42:
                    3c:7b:8f:9a:27:64:9a:32:e0:dc:1a:87:97:87:99:
                    c4:bf:95:83:8d:6b:88:cd:fc:04:d2:d3:40:64:f1:
                    1e:35:55:cb:4a:c3:d8:89:11:79:b1:1d:b4:33:2e:
                    36:3c:40:9f:88:d9:b1:ec:f9:9d:49:89:35:1b:00:
                    8f:06:f9:70:af:d7:94:0b:cf:c3:63:4f:ae:8b:4d:
                    88:10:23:d6:e4:c4:97:e6:92:1b:24:6d:64:f1:18:
                    e4:89:04:ce:cf:d0:7d:b9:cd:9e:f6:8e:8a:7a:ee:
                    2c:0b:7e:0e:51:b4:d8:f3:cc:e6:37:95:f0:f9:f8:
                    fe:82:91:12:86:ba:41:f6:0b:45:42:c7:2d:53:bc:
                    25:38:05:b2:a4:3d:09:e9:33:a8:fb:dc:f3:bd:da:
                    14:ef:2f:69:51:4f:84:49:75:88:a2:8d:d8:9d:82:
                    b6:06:a1:1a:c4:7d:59:2b:2c:cf:1b:7e:a2:6d:0a:
                    26:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B8:4F:FC:3B:E1:5F:DD:FB:EB:FF:D7:B7:07:45:27:72:C2:00:F8
            X509v3 Authority Key Identifier:
                keyid:55:BE:4A:89:26:76:3D:A0:C1:8A:34:3C:FC:FF:BD:FD:3C:9E:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/6/55BE4A8926763DA0C18A343CFCFFBDFD3C9E6DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb5KiSZ2PaDBijQ8_P-9_Tyeba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/6/AS945.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  945

    Signature Algorithm: sha256WithRSAEncryption
         3e:9a:21:0c:e2:81:2b:0d:eb:71:c7:b3:91:48:57:c4:a2:84:
         a7:b4:e1:f4:fa:7f:2f:81:93:d1:06:4e:4c:d8:3e:f1:6a:71:
         8d:d7:f4:30:78:19:61:cf:51:f6:b1:76:6f:60:92:58:97:05:
         4d:a7:e7:00:5f:f1:fe:6f:be:86:bd:3d:86:b0:61:f0:63:d0:
         53:12:d1:8d:98:6a:56:f9:98:d2:ca:d0:7c:29:37:80:f1:68:
         90:b3:18:9d:58:34:12:1c:72:61:f9:6a:25:b5:ab:3c:ee:71:
         df:62:5f:76:5a:ef:59:9a:6b:0f:df:4a:3b:04:24:36:62:06:
         7d:d9:27:93:df:0f:18:eb:c2:3e:f0:b3:0b:53:9a:7f:38:05:
         03:3b:b1:59:9c:12:bd:96:2f:e0:f8:29:00:5b:9c:e4:75:93:
         da:f4:f1:c0:7e:01:c2:a8:34:b4:46:a9:4b:27:f6:9d:34:e0:
         33:5c:f4:09:53:2b:7f:e9:82:32:de:ca:63:76:80:ca:f5:d7:
         2d:ff:9d:5f:db:f0:c8:11:2d:6a:56:63:4e:d5:8a:2e:71:a6:
         05:0d:90:4d:f4:44:43:f4:0e:3a:05:5e:11:73:95:bb:7c:88:
         23:4f:cd:a1:c0:64:72:ad:44:3c:6c:e8:35:3b:41:cf:68:56:
         03:2a:11:4c
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUemlMSEtC6IEbIaUtL23niHaPTm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTViZTRhODkyNjc2M2RhMGMxOGEzNDNjZmNmZmJkZmQz
YzllNmRhZjAeFw0yNTAxMjkwNTQwMzhaFw0yNjAxMjgwNTQ1MzhaMDMxMTAvBgNV
BAMTKDc0Qjg0RkZDM0JFMTVGRERGQkVCRkZEN0I3MDc0NTI3NzJDMjAwRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAv+iZIsXbydc/yTA/CGT8XL0
hLQO6xe5p1bTf8yhENqpJVI9KA89qkbCoWltC7RLJx2IbcaRvK3pL9laUzBvFa3e
yKV1F+KhQjx7j5onZJoy4Nwah5eHmcS/lYONa4jN/ATS00Bk8R41VctKw9iJEXmx
HbQzLjY8QJ+I2bHs+Z1JiTUbAI8G+XCv15QLz8NjT66LTYgQI9bkxJfmkhskbWTx
GOSJBM7P0H25zZ72jop67iwLfg5RtNjzzOY3lfD5+P6CkRKGukH2C0VCxy1TvCU4
BbKkPQnpM6j73PO92hTvL2lRT4RJdYiijdidgrYGoRrEfVkrLM8bfqJtCibvAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUdLhP/DvhX9376//XtwdFJ3LCAPgwHwYDVR0j
BBgwFoAUVb5KiSZ2PaDBijQ8/P+9/Tyeba8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS82
LzU1QkU0QTg5MjY3NjNEQTBDMThBMzQzQ0ZDRkZCREZEM0M5RTZEQUYuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9WYjVLaVNaMlBhREJpalE4X1AtOV9UeWViYTgu
Y2VyMEkGCCsGAQUFBwELBD0wOzA5BggrBgEFBQcwC4YtcnN5bmM6Ly9vdG8ud2Fr
dXdha3UubmUuanAvcGtpL2hhLzYvQVM5NDUuYXNhMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICA7EwDQYJKoZIhvcNAQEL
BQADggEBAD6aIQzigSsN63HHs5FIV8SihKe04fT6fy+Bk9EGTkzYPvFqcY3X9DB4
GWHPUfaxdm9gkliXBU2n5wBf8f5vvoa9PYawYfBj0FMS0Y2Yalb5mNLK0HwpN4Dx
aJCzGJ1YNBIccmH5aiW1qzzucd9iX3Za71maaw/fSjsEJDZiBn3ZJ5PfDxjrwj7w
swtTmn84BQM7sVmcEr2WL+D4KQBbnOR1k9r08cB+AcKoNLRGqUsn9p004DNc9AlT
K3/pgjLeymN2gMr11y3/nV/b8MgRLWpWY07Vii5xpgUNkE30REP0DjoFXhFzlbt8
iCNPzaHAZHKtRDxs6DU7Qc9oVgMqEUw=
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:57:01 2025 by rpki-client