Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/mdkUMDTCA-liMHWCGVOq1Lzr5m4.asa
File:                     mdkUMDTCA-liMHWCGVOq1Lzr5m4.asa (raw, json)
Hash identifier:          FPNURNp+gUbhptz+zBLiwR+ImVB1S60HEJTDn5RAzgs=
Subject key identifier:   99:D9:14:30:34:C2:03:E9:62:30:75:82:19:53:AA:D4:BC:EB:E6:6E
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       365A
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/mdkUMDTCA-liMHWCGVOq1Lzr5m4.asa
Signing time:             Fri 10 Jul 2026 06:15:43 +0000
ASPA not before:          Fri 10 Jul 2026 06:15:43 +0000
ASPA not after:           Tue 01 Dec 2026 00:00:00 +0000
Customer ASID:            148000
Providers:                AS: 7633
                          AS: 9829
                          AS: 9885
                          AS: 45117
                          AS: 55824
                          AS: 142501
                          AS: 142502
                          AS: 148003
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 15:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13914 (0x365a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Jul 10 06:15:43 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a508e0e-3c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:cb:80:d2:a2:af:f3:56:4d:91:0f:24:f0:
                    96:b7:a4:e0:83:68:83:cc:a8:18:cd:ac:57:f1:b8:
                    d6:f5:48:9a:f7:1c:36:89:b8:43:34:fa:8b:64:9c:
                    2d:39:af:d9:a7:e7:91:62:18:75:50:d2:ac:11:34:
                    f7:13:ad:5d:66:e2:00:90:ff:dc:71:e0:33:05:32:
                    bb:a8:d6:7f:aa:90:e8:75:00:53:ce:0f:3a:69:f6:
                    af:1e:1d:b0:e3:3a:e4:c7:21:4e:34:f6:ce:cb:b4:
                    d2:15:c0:c2:ec:8e:5a:6a:14:22:8c:fb:72:7c:5d:
                    b0:0e:ee:0d:75:a1:d3:0a:a9:31:d2:5e:b0:32:19:
                    e9:cc:ae:43:22:42:ac:ca:de:2d:75:c3:c2:26:7e:
                    75:90:99:2e:bf:75:e0:5f:85:5e:39:cb:ee:51:36:
                    c5:91:8a:fb:a1:20:72:30:67:da:a3:ae:c1:2b:9d:
                    0f:ab:15:5f:38:1e:bd:e0:7f:b0:25:31:c4:22:c1:
                    06:85:e3:6d:ec:50:49:83:3e:91:b5:95:e0:56:df:
                    ed:2b:87:fa:00:2b:08:4d:05:9d:a8:ac:78:c1:1f:
                    ee:8f:17:a7:0e:58:f6:9e:2d:e3:f4:47:3f:0b:32:
                    48:cc:a7:35:5d:27:9f:1a:a4:59:1a:30:4a:ec:b7:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:14:30:34:C2:03:E9:62:30:75:82:19:53:AA:D4:BC:EB:E6:6E
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/mdkUMDTCA-liMHWCGVOq1Lzr5m4.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  148000

    Signature Algorithm: sha256WithRSAEncryption
         03:df:dd:29:f8:50:eb:24:f8:ed:cb:1f:a9:cc:e1:3f:04:d9:
         4e:9f:7d:a7:7c:da:40:f5:f4:e8:44:e5:49:57:e7:1a:43:c2:
         4e:92:35:7a:94:15:8e:3d:00:50:27:90:c7:32:94:44:9f:36:
         48:d0:10:58:b2:b2:76:95:4b:40:b6:7f:5d:5f:07:e9:bc:7d:
         72:51:d6:f4:3b:c2:fe:12:8d:ab:9c:b0:ed:e8:3a:e4:0c:6d:
         86:ed:2f:19:7f:19:cf:0a:0f:95:e4:b9:0a:7e:44:71:35:b6:
         20:7b:11:73:ae:b4:fc:73:4a:09:bd:77:9a:74:00:e1:62:8d:
         9f:df:9a:01:27:97:de:fb:23:b1:87:fa:5c:a5:da:59:52:31:
         c5:7c:b0:16:06:53:ea:92:0d:62:53:cf:d4:dd:d7:39:f3:ee:
         99:17:fe:ee:4c:77:8f:75:5c:c9:75:ae:28:43:a0:e0:c8:91:
         fc:4c:dc:2c:97:2d:b9:df:c9:d5:aa:23:59:c3:79:67:46:f1:
         5a:10:a2:26:80:fe:3c:39:d0:0e:9d:15:82:82:9d:b1:56:b5:
         f0:b3:90:ca:c3:e4:3a:b3:78:d0:13:1c:eb:4a:41:bb:ba:67:
         77:85:c7:74:42:0d:1f:32:a2:23:80:49:37:87:d7:7e:6b:19:
         2d:ff:0e:9e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgICNlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3
QTQ3QTVGMDkwHhcNMjYwNzEwMDYxNTQzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTUwOGUwZS0zYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4/LgNKir/NWTZEPJPCWt6Tgg2iDzKgYzaxX8bjW9Uia9xw2ibhDNPqLZJwt
Oa/Zp+eRYhh1UNKsETT3E61dZuIAkP/cceAzBTK7qNZ/qpDodQBTzg86afavHh2w
4zrkxyFONPbOy7TSFcDC7I5aahQijPtyfF2wDu4NdaHTCqkx0l6wMhnpzK5DIkKs
yt4tdcPCJn51kJkuv3XgX4VeOcvuUTbFkYr7oSByMGfao67BK50PqxVfOB694H+w
JTHEIsEGheNt7FBJgz6RtZXgVt/tK4f6ACsITQWdqKx4wR/ujxenDlj2ni3j9Ec/
CzJIzKc1XSefGqRZGjBK7LcO8QIDAQABo4ICVTCCAlEwHQYDVR0OBBYEFJnZFDA0
wgPpYjB1ghlTqtS86+ZuMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1
MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkM3QS80QzUyOEY3ODQ1MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9tZGtVTURUQ0Et
bGlNSFdDR1ZPcTFMenI1bTQuYXNhMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJC
IDANBgkqhkiG9w0BAQsFAAOCAQEAA9/dKfhQ6yT47csfqczhPwTZTp99p3zaQPX0
6ETlSVfnGkPCTpI1epQVjj0AUCeQxzKURJ82SNAQWLKydpVLQLZ/XV8H6bx9clHW
9DvC/hKNq5yw7eg65Axthu0vGX8ZzwoPleS5Cn5EcTW2IHsRc660/HNKCb13mnQA
4WKNn9+aASeX3vsjsYf6XKXaWVIxxXywFgZT6pINYlPP1N3XOfPumRf+7kx3j3Vc
yXWuKEOg4MiR/EzcLJctud/J1aojWcN5Z0bxWhCiJoD+PDnQDp0VgoKdsVa18LOQ
ysPkOrN40BMc60pBu7pnd4XHdEINHzKiI4BJN4fXfmsZLf8Ong==
-----END CERTIFICATE-----
Generated at Sat Jul 18 09:18:30 2026 by rpki-client