Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/HakCQQo3z8v2-5Gs_uA3Bayj2sA.asa
File:                     HakCQQo3z8v2-5Gs_uA3Bayj2sA.asa (raw, json)
Hash identifier:          TqF7VDLUvGn6swrLSWdyVb07AQkMUSMT51u5VOQs9aE=
Subject key identifier:   1D:A9:02:41:0A:37:CF:CB:F6:FB:91:AC:FE:E0:37:05:AC:A3:DA:C0
Certificate issuer:       /CN=A9158A3E/serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751
Certificate serial:       04
Authority key identifier: 89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/HakCQQo3z8v2-5Gs_uA3Bayj2sA.asa
Signing time:             Sat 08 Aug 2026 08:04:07 +0000
ASPA not before:          Sat 08 Aug 2026 08:04:06 +0000
ASPA not after:           Fri 28 May 2027 00:00:00 +0000
Customer ASID:            137227
Providers:                AS: 7474
                          AS: 9336
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl
                          rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Aug 2026 08:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158A3E, serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751
        Validity
            Not Before: Aug  8 08:04:06 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a76e2f6-b280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:77:73:ca:3f:b1:77:4b:64:89:b7:ae:84:
                    fa:b5:a6:4a:59:93:2a:11:b2:e8:97:21:4a:cf:63:
                    60:75:44:e0:cd:7a:f9:d2:9a:1e:15:66:ee:b3:69:
                    11:b8:9c:5a:e5:f4:d2:25:8a:9b:3c:b1:83:21:23:
                    ba:ef:a7:a3:e6:70:df:93:31:d0:df:74:1c:d1:20:
                    1e:75:3d:fb:f1:a4:31:65:d3:7f:99:8f:12:15:64:
                    1e:31:bd:f8:34:c9:44:81:b5:ef:e0:78:fb:a5:48:
                    07:f6:4f:6f:65:38:cd:ab:d5:cb:f4:f7:88:17:55:
                    2d:45:0e:f6:a6:bb:ff:60:b3:a1:2b:0b:7d:a3:e0:
                    38:56:ed:47:e2:e7:11:de:d3:e3:27:3d:36:e6:1d:
                    e4:e1:82:13:6f:f3:6b:15:c8:ee:f0:26:29:bc:91:
                    ac:4b:3d:cf:f6:2e:ca:2e:2c:ba:e5:3e:55:05:56:
                    37:ec:f4:c1:79:b8:95:12:cd:57:be:15:57:0a:9d:
                    da:42:32:c1:3b:ef:8b:72:7b:b8:02:13:1b:f3:c3:
                    71:b0:f5:10:50:d5:0b:ce:d2:c9:9a:46:0f:2d:2c:
                    0d:e5:a0:4e:65:b7:d7:d1:65:3e:30:ee:fa:45:23:
                    cd:c2:20:63:ac:ce:6e:82:b5:fd:b3:69:9e:40:0f:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A9:02:41:0A:37:CF:CB:F6:FB:91:AC:FE:E0:37:05:AC:A3:DA:C0
            X509v3 Authority Key Identifier:
                keyid:89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/HakCQQo3z8v2-5Gs_uA3Bayj2sA.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137227

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:53:24:c1:b2:e1:1e:4a:57:e3:2f:26:92:c9:17:9e:f7:
         75:ab:26:3c:f0:79:dd:88:b7:07:2c:7a:e1:45:23:5a:44:1d:
         13:75:32:55:08:c4:2e:32:71:27:c4:10:fe:79:a6:58:a9:3a:
         c1:59:e7:22:b0:50:52:3b:ad:29:65:72:5c:4f:a9:e2:a6:e1:
         af:3e:9c:89:cf:3c:35:16:3a:b2:4f:18:68:94:68:b7:37:0a:
         c1:33:3b:65:ef:fa:fd:a9:10:bf:d1:53:d8:b5:b1:79:ae:f8:
         73:90:0e:6e:75:e8:eb:0b:2c:f2:97:e0:67:4a:4d:22:f6:f1:
         da:77:61:96:09:43:11:16:d5:49:a5:94:b8:37:91:4a:5d:5a:
         93:71:be:98:fd:3a:e1:83:a9:b9:ca:00:aa:fa:2b:37:49:b1:
         bc:e6:4b:3b:7f:b4:36:3b:70:13:4b:d8:8d:8a:30:b5:f0:73:
         95:1c:77:8a:b8:81:67:63:7f:5b:91:6f:e1:63:fd:2c:71:48:
         8f:6d:3d:8d:75:d0:a3:bc:50:f4:38:79:8f:87:3c:38:6b:58:
         7b:77:83:60:6a:c9:c7:fb:65:34:b1:75:cb:b9:8e:e2:98:d3:
         55:a8:51:c1:ce:ab:b2:76:b6:1e:42:8b:4a:d0:e5:e5:8a:41:
         07:6e:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:15 2026 by rpki-client