Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/jwK7nMp4w0yk6oZiCaFKH4kdHE0.asa
File:                     jwK7nMp4w0yk6oZiCaFKH4kdHE0.asa (raw, json)
Hash identifier:          MissezL/mv4AUpOwDZi0rQphrHtAbQUPgw/9VB832Ns=
Subject key identifier:   8F:02:BB:9C:CA:78:C3:4C:A4:EA:86:62:09:A1:4A:1F:89:1D:1C:4D
Certificate issuer:       /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial:       0CEE
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/jwK7nMp4w0yk6oZiCaFKH4kdHE0.asa
Signing time:             Mon 12 Oct 2026 07:51:59 +0000
ASPA not before:          Mon 12 Oct 2026 07:51:59 +0000
ASPA not after:           Sun 31 Jan 2027 00:00:00 +0000
Customer ASID:            23856
Providers:                AS: 3356
                          AS: 4657
                          AS: 9002
                          AS: 23764
                          AS: 134078
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
                          rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3310 (0xcee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
        Validity
            Not Before: Oct 12 07:51:59 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6acc919f-55f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:f6:36:7a:5b:af:96:86:2a:40:01:1f:61:
                    92:3c:67:f9:17:9a:ce:53:09:5a:8c:11:ee:b0:2d:
                    54:ee:16:4e:59:d7:d1:d7:b9:b6:cd:27:cf:d7:95:
                    63:38:a6:ed:31:50:f8:17:3a:44:4d:95:c8:97:4f:
                    c0:56:5e:ae:9f:bd:79:15:b0:3c:c5:d6:e7:70:71:
                    56:51:68:24:f1:e7:44:8b:7a:4f:1d:fc:68:a2:f5:
                    d5:40:9b:a8:f5:99:e3:f4:65:6e:c1:4a:03:d3:a2:
                    da:1b:8d:ff:0d:16:80:3f:6c:86:b1:e2:4f:80:f8:
                    cb:e5:22:b9:ad:89:d4:fd:09:3b:58:40:d5:ed:6a:
                    93:4e:bf:32:95:9a:84:30:68:ab:19:7a:78:8a:f9:
                    b2:9f:b5:85:cf:5b:36:9f:c7:33:72:7f:8b:0d:a3:
                    47:43:03:2c:c2:1b:9d:e8:b8:d6:3f:c3:61:d0:e3:
                    89:1c:05:40:6e:f6:b0:34:ea:0f:df:32:a6:20:da:
                    6d:cd:72:64:d6:3f:0c:49:48:2a:a8:64:c7:f6:6e:
                    cb:08:50:d6:e5:ca:b9:88:d0:f6:89:44:b6:8e:a7:
                    ba:64:5a:34:cf:36:61:c5:5d:74:e4:85:22:8b:75:
                    72:be:0c:9e:86:ed:b7:1f:39:95:fc:ef:34:ee:d6:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:02:BB:9C:CA:78:C3:4C:A4:EA:86:62:09:A1:4A:1F:89:1D:1C:4D
            X509v3 Authority Key Identifier:
                keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/jwK7nMp4w0yk6oZiCaFKH4kdHE0.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23856

    Signature Algorithm: sha256WithRSAEncryption
         22:05:bd:29:0d:47:ad:0d:6c:5d:30:4f:7f:57:85:3c:ae:63:
         4d:8e:87:0d:7b:25:16:b8:0f:b3:80:df:e4:01:95:7b:1f:49:
         03:cb:b7:08:cf:f6:f6:37:33:eb:0b:7e:94:34:29:35:3e:fd:
         0a:cb:89:9e:b9:7a:02:5f:b8:03:7d:9b:d4:90:89:a9:ae:2a:
         a1:b0:65:52:af:ce:15:3e:25:fb:da:cb:73:a5:b0:32:db:4b:
         27:04:81:c8:67:97:35:7f:c6:4c:09:06:5d:e1:bd:cb:aa:89:
         45:05:4c:00:f8:f4:c7:59:86:95:3b:93:ca:08:ea:af:e6:26:
         df:7d:7e:aa:c9:d1:c7:87:5f:d2:08:33:79:a4:ac:61:2d:68:
         39:9e:00:88:05:d1:f8:b3:26:f8:97:8d:7c:23:64:1b:1b:48:
         1e:94:86:f2:96:c2:74:45:bf:90:82:48:63:67:95:e5:15:ec:
         4a:5c:6d:a4:6c:12:03:9f:d6:cd:c7:7a:47:40:9b:6a:ab:95:
         e5:40:8e:3a:2f:69:11:de:5d:d8:19:e4:91:44:5d:2b:78:db:
         96:be:19:e5:ef:e1:41:97:f0:09:05:9b:5f:c9:29:a4:39:82:
         22:3a:a3:35:25:9b:ae:d9:13:13:0f:68:3d:3a:eb:10:03:e4:
         49:aa:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:17:54 2026 by rpki-client