Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/ncrZtqP07N0Rae-6Z3E5S7bCLDA.asa
File:                     ncrZtqP07N0Rae-6Z3E5S7bCLDA.asa (raw, json)
Hash identifier:          xh0nkgewgKonUhZRB+ofLoB5Sl4ZWBCjlJa4MYIh6dA=
Subject key identifier:   9D:CA:D9:B6:A3:F4:EC:DD:11:69:EF:BA:67:71:39:4B:B6:C2:2C:30
Certificate issuer:       /CN=A911A84B/serialNumber=4AEBC438AE78E898B1A2F84BA3D3FA6A4FC29D82
Certificate serial:       0E
Authority key identifier: 4A:EB:C4:38:AE:78:E8:98:B1:A2:F8:4B:A3:D3:FA:6A:4F:C2:9D:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/ncrZtqP07N0Rae-6Z3E5S7bCLDA.asa
Signing time:             Wed 12 Aug 2026 03:38:17 +0000
ASPA not before:          Wed 12 Aug 2026 03:38:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            131167
Providers:                AS: 9790
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.crl
                          rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 06:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A84B, serialNumber=4AEBC438AE78E898B1A2F84BA3D3FA6A4FC29D82
        Validity
            Not Before: Aug 12 03:38:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a7beaa9-0d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:e5:ee:35:81:de:b4:13:b1:fe:49:72:fc:
                    55:7c:95:e6:44:ab:bb:64:95:85:64:44:5d:55:40:
                    66:43:f2:b7:ce:b8:5c:b9:5c:fc:e3:f9:e7:75:cd:
                    aa:6a:c6:03:d4:90:f9:5e:59:49:59:57:cf:c9:71:
                    90:a3:3c:fc:76:84:56:ac:f8:ef:cc:3d:ad:ce:52:
                    fd:a1:7f:d2:65:2a:7b:05:d6:08:06:b4:67:d6:dc:
                    95:91:e3:cc:83:aa:c5:e4:36:f2:e2:8f:1d:9b:16:
                    72:dd:b0:83:1b:78:73:5a:0b:5a:9a:d2:9a:f8:f9:
                    2a:e7:da:e1:cb:e5:1e:cd:d0:ff:e6:20:32:e7:8e:
                    f5:51:d1:09:67:6e:50:65:4e:eb:26:3c:91:e6:ec:
                    fe:56:fb:95:c1:8b:42:07:67:60:10:f1:e3:ed:45:
                    81:f4:ac:f1:32:d2:bc:b2:83:5a:93:65:16:b4:e4:
                    45:f8:40:28:8b:7d:2c:ee:c2:38:1d:d6:76:74:9a:
                    39:bf:95:d1:5b:c0:29:9c:c6:9e:6e:14:48:45:8b:
                    5a:7b:b1:54:9e:e9:8d:98:fd:7f:42:89:ca:a9:76:
                    98:3b:c4:57:6a:1e:57:14:dc:08:5c:22:8f:69:ba:
                    4a:bd:43:d6:31:84:bd:f9:c6:31:2a:9a:eb:e6:d8:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:D9:B6:A3:F4:EC:DD:11:69:EF:BA:67:71:39:4B:B6:C2:2C:30
            X509v3 Authority Key Identifier:
                keyid:4A:EB:C4:38:AE:78:E8:98:B1:A2:F8:4B:A3:D3:FA:6A:4F:C2:9D:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/ncrZtqP07N0Rae-6Z3E5S7bCLDA.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131167

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:3b:0b:92:31:3f:59:a7:9f:2c:41:e1:bb:72:67:00:31:
         a7:c9:a8:f9:77:00:8b:7d:59:4a:cc:db:fd:a0:ab:d4:1a:48:
         65:cc:04:73:a9:44:e1:0d:b1:0e:b6:a1:60:ee:41:46:bd:2b:
         e0:8a:08:d4:fe:40:d0:d5:15:f1:35:fe:1a:73:fa:8a:85:66:
         2e:3b:dd:a4:36:a4:41:15:f4:fa:be:d0:4d:0d:78:b8:f8:2d:
         29:e7:cd:db:78:ad:77:57:a7:4e:73:70:df:71:dd:2a:b1:5f:
         91:fb:e4:f2:ea:7c:d1:a3:e4:d4:4e:2a:f3:b0:d3:d3:b7:35:
         b1:cf:77:db:bc:3d:4f:07:63:aa:69:69:5a:cd:73:50:90:ff:
         e9:fa:fe:50:e9:a2:f9:a6:fc:3e:f8:e9:44:e0:74:25:5c:1d:
         1f:eb:fd:e1:ae:3e:22:54:79:7e:a5:09:2f:68:d1:f3:87:6e:
         96:b4:ac:23:8f:f5:64:5c:2e:5a:9a:dc:fe:46:5b:d0:a6:41:
         59:6a:82:04:70:91:bc:08:2d:8c:a6:78:dd:fa:ed:c3:a0:8c:
         9b:90:5d:aa:f4:2d:20:e6:44:50:4a:d1:56:4f:55:22:40:97:
         a6:32:bc:f3:19:75:92:fe:ad:d1:9c:1c:ac:41:75:e8:e7:59:
         9d:b5:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:20 2026 by rpki-client