Autonomous System Provider Authorization

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/AS51396.asa
File:                     AS51396.asa (raw, json)
Hash identifier:          LPntScnqKTV0B/ca4ayh0Ad7plN1tSxen2CVMDLBZ+E=
Subject key identifier:   8E:EF:04:2D:2E:A8:E4:6C:EE:F0:94:A8:F3:83:43:41:BC:99:ED:C1
Certificate issuer:       /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Certificate serial:       4304ACD855FB3ECB54DEEBDAAEE1499DF1796B4D
Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/1/AS51396.asa
Signing time:             Sun 08 Dec 2024 20:49:17 +0000
ASPA not before:          Sun 08 Dec 2024 20:44:17 +0000
ASPA not after:           Sun 07 Dec 2025 20:49:17 +0000
Customer ASID:            51396
Providers:                AS: 6939
                          AS: 30823
                          AS: 35133
                          AS: 44066
                          AS: 44592
                          AS: 49581
                          AS: 60223
                          AS: 64457
                          AS: 203446
                          AS: 214497
                          AS: 214995
                          AS: 215436

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
                          rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jan 2025 18:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:ac:d8:55:fb:3e:cb:54:de:eb:da:ae:e1:49:9d:f1:79:6b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
        Validity
            Not Before: Dec  8 20:44:17 2024 GMT
            Not After : Dec  7 20:49:17 2025 GMT
        Subject: CN=8EEF042D2EA8E46CEEF094A8F3834341BC99EDC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:97:52:a4:7e:f3:04:ce:33:f5:ea:3f:cc:
                    f9:b5:cd:db:ae:14:0e:fd:dd:be:af:0b:35:6a:34:
                    95:30:63:40:3a:d2:65:01:f9:f3:7d:bb:d9:d1:52:
                    c7:fe:ce:56:de:f7:98:a4:09:88:46:3b:2f:e6:13:
                    79:ac:27:f0:3f:de:ea:3c:5d:df:92:2d:68:05:65:
                    0c:c8:24:b7:f0:86:d7:2c:3e:0b:ae:7e:3d:40:90:
                    3e:f0:b4:53:36:9c:94:a1:ea:21:31:eb:33:08:6c:
                    d8:13:ff:21:f8:9d:61:53:aa:f0:a3:2d:2a:48:52:
                    e1:83:f7:ec:bb:12:3f:7e:49:9e:9c:c4:85:6e:72:
                    38:0b:e6:77:5a:c3:c7:6f:05:56:a7:30:ee:a4:01:
                    42:16:bd:da:97:ce:ca:3f:d3:27:17:ec:cb:36:85:
                    69:19:cc:1f:e6:e9:45:02:f1:38:2e:02:70:e2:ae:
                    78:a9:a4:7e:9a:66:f5:30:d9:dd:a4:b1:ff:4e:bf:
                    b5:33:f4:42:82:b9:36:f0:26:1a:8e:f1:39:c3:59:
                    21:51:9e:b3:3a:da:e7:22:8c:85:cc:ba:ed:c2:ff:
                    44:bf:6a:53:95:85:07:73:84:7b:90:21:65:7e:8b:
                    ff:8b:aa:f0:eb:ef:00:46:0f:c8:1d:d1:f2:78:4d:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EF:04:2D:2E:A8:E4:6C:EE:F0:94:A8:F3:83:43:41:BC:99:ED:C1
            X509v3 Authority Key Identifier:
                keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/AS51396.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51396

    Signature Algorithm: sha256WithRSAEncryption
         a7:cf:69:2a:46:e0:62:3e:25:b8:52:6b:fb:26:16:51:0a:46:
         b1:1f:82:22:05:e1:3f:96:e8:1a:54:b1:cd:cd:c0:ba:dd:e5:
         75:b2:f2:48:99:9d:8c:b7:58:3d:0b:e4:7a:05:c5:49:1e:0c:
         ed:85:d8:7d:b7:52:14:00:75:ec:9c:8d:ff:13:5e:c0:b7:c3:
         57:56:bf:ca:d3:2f:a6:6a:c9:e9:ce:de:3c:60:f7:bf:c5:94:
         7c:cf:0f:65:d3:57:a7:39:50:c6:f4:77:e9:4a:18:1f:ab:63:
         6c:a8:46:24:28:74:2c:e1:a3:6f:a5:61:0f:8f:c2:aa:37:43:
         93:2f:f7:ae:c3:0a:87:b8:47:8a:8a:a7:12:bc:61:fd:88:2f:
         f0:f9:a1:ad:a1:fd:10:78:52:94:2a:22:73:69:6b:12:f1:49:
         a3:4a:66:c6:9c:55:d2:32:cf:26:db:06:ae:30:29:11:18:84:
         3b:ce:8e:38:3e:d1:76:a6:6a:34:dc:e3:3c:5e:82:8d:0d:a2:
         56:96:46:e4:87:4f:84:54:04:06:47:7b:64:26:6d:ab:8f:6c:
         2d:b1:3a:13:b2:3d:97:0f:95:28:7e:a4:24:4c:c0:79:55:5c:
         4a:0c:38:09:57:90:3e:b2:84:83:3d:2f:c5:c0:9e:80:89:6c:
         6f:64:0f:fa
-----BEGIN CERTIFICATE-----
MIIEnDCCA4SgAwIBAgIUQwSs2FX7PstU3uvaruFJnfF5a00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi
MWZiYzNhMjAeFw0yNDEyMDgyMDQ0MTdaFw0yNTEyMDcyMDQ5MTdaMDMxMTAvBgNV
BAMTKDhFRUYwNDJEMkVBOEU0NkNFRUYwOTRBOEYzODM0MzQxQkM5OUVEQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW5JdSpH7zBM4z9eo/zPm1zduu
FA793b6vCzVqNJUwY0A60mUB+fN9u9nRUsf+zlbe95ikCYhGOy/mE3msJ/A/3uo8
Xd+SLWgFZQzIJLfwhtcsPguufj1AkD7wtFM2nJSh6iEx6zMIbNgT/yH4nWFTqvCj
LSpIUuGD9+y7Ej9+SZ6cxIVucjgL5ndaw8dvBVanMO6kAUIWvdqXzso/0ycX7Ms2
hWkZzB/m6UUC8TguAnDirnippH6aZvUw2d2ksf9Ov7Uz9EKCuTbwJhqO8TnDWSFR
nrM62ucijIXMuu3C/0S/alOVhQdzhHuQIWV+i/+LqvDr7wBGD8gd0fJ4TRNzAgMB
AAGjggGmMIIBojAdBgNVHQ4EFgQUju8ELS6o5Gzu8JSo84NDQbyZ7cEwHwYDVR0j
BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91
ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3
NkkuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9yZXBv
LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvQVM1MTM5Ni5hc2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAyMQwDQYJ
KoZIhvcNAQELBQADggEBAKfPaSpG4GI+JbhSa/smFlEKRrEfgiIF4T+W6BpUsc3N
wLrd5XWy8kiZnYy3WD0L5HoFxUkeDO2F2H23UhQAdeycjf8TXsC3w1dWv8rTL6Zq
yenO3jxg97/FlHzPD2XTV6c5UMb0d+lKGB+rY2yoRiQodCzho2+lYQ+Pwqo3Q5Mv
967DCoe4R4qKpxK8Yf2IL/D5oa2h/RB4UpQqInNpaxLxSaNKZsacVdIyzybbBq4w
KREYhDvOjjg+0XamajTc4zxego0NolaWRuSHT4RUBAZHe2QmbauPbC2xOhOyPZcP
lSh+pCRMwHlVXEoMOAlXkD6yhIM9L8XAnoCJbG9kD/o=
-----END CERTIFICATE-----