Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/4bal3vGVhT4nI5A31ozRNwfG44E.asa
File:                     4bal3vGVhT4nI5A31ozRNwfG44E.asa (raw, json)
Hash identifier:          4uEC1vDQW5XsZbRne8kjWkOSzC2cRwR2bJv/GPOoKxA=
Subject key identifier:   E1:B6:A5:DE:F1:95:85:3E:27:23:90:37:D6:8C:D1:37:07:C6:E3:81
Certificate issuer:       /CN=A915A5D7/serialNumber=9B95122A465AFEC62AE1D39C96F1E060823DDFF4
Certificate serial:       36
Authority key identifier: 9B:95:12:2A:46:5A:FE:C6:2A:E1:D3:9C:96:F1:E0:60:82:3D:DF:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5USKkZa_sYq4dOclvHgYII93_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/4bal3vGVhT4nI5A31ozRNwfG44E.asa
Signing time:             Thu 24 Sep 2026 04:04:39 +0000
ASPA not before:          Thu 24 Sep 2026 04:04:39 +0000
ASPA not after:           Sun 31 Jan 2027 00:00:00 +0000
Customer ASID:            38009
Providers:                AS: 17828
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/m5USKkZa_sYq4dOclvHgYII93_Q.crl
                          rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/m5USKkZa_sYq4dOclvHgYII93_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5USKkZa_sYq4dOclvHgYII93_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5D7, serialNumber=9B95122A465AFEC62AE1D39C96F1E060823DDFF4
        Validity
            Not Before: Sep 24 04:04:39 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ab4a157-8466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:4e:f6:e1:c5:c5:46:1d:de:0f:2e:ec:ba:
                    c4:82:8e:c8:06:ac:66:61:b3:a8:c3:04:3e:27:cb:
                    70:71:c6:e1:7c:9e:0e:93:5a:5b:96:44:14:6e:2b:
                    60:aa:fc:64:d8:de:5e:dc:ef:59:56:5b:38:d6:33:
                    8d:9a:47:b5:9c:cc:38:cc:04:3a:76:d2:6a:5e:8c:
                    55:da:b2:7a:9f:c2:f8:99:6b:1e:cf:26:6d:93:c6:
                    96:cd:a8:63:4e:6d:b8:b8:24:77:cf:f6:c5:e0:2e:
                    94:9f:e6:fa:72:06:78:33:bb:1c:69:c6:53:05:fc:
                    28:29:f9:43:c7:1d:c5:3e:75:06:ce:10:4f:68:04:
                    1b:c6:31:6c:04:58:98:17:f9:d8:82:af:48:8b:f5:
                    47:2b:6a:6e:3f:6f:92:99:7c:43:2f:fb:9d:05:7f:
                    be:c1:82:5d:58:1c:88:9d:4e:5c:2b:4e:c4:6a:bf:
                    ee:d6:c8:eb:0e:12:ff:19:99:62:2d:b0:5b:c0:e5:
                    9c:43:f9:fa:a8:53:a9:68:f2:0e:93:71:60:72:00:
                    5c:70:0f:e8:bd:e8:7c:81:77:6a:af:66:33:8e:1e:
                    f2:eb:ad:0b:10:bb:3c:ca:af:76:1c:a8:b4:89:f2:
                    89:9b:1e:d9:de:6a:1b:41:df:af:30:c3:fb:d9:ac:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B6:A5:DE:F1:95:85:3E:27:23:90:37:D6:8C:D1:37:07:C6:E3:81
            X509v3 Authority Key Identifier:
                keyid:9B:95:12:2A:46:5A:FE:C6:2A:E1:D3:9C:96:F1:E0:60:82:3D:DF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/m5USKkZa_sYq4dOclvHgYII93_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5USKkZa_sYq4dOclvHgYII93_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/4bal3vGVhT4nI5A31ozRNwfG44E.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38009

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:8d:89:2c:f6:d7:a1:4a:10:e2:02:b6:93:35:7e:a4:eb:
         0b:3c:d4:e6:0c:09:1f:76:f5:33:d2:77:b6:54:6e:68:45:b8:
         fb:6e:45:a1:b1:35:6b:5c:ea:c9:2b:9c:fd:cc:4e:d3:90:0d:
         df:93:0e:04:0b:b2:47:c7:de:8a:40:93:75:66:65:bf:28:c8:
         6c:2e:04:6f:61:8f:3d:40:d2:2d:84:57:48:da:12:f1:d1:63:
         77:ec:75:b9:df:04:a5:34:61:0d:2f:b7:1d:fb:87:93:62:93:
         49:63:9d:3c:15:25:98:d6:80:87:16:40:e3:83:4b:64:f4:ba:
         7b:fa:c9:c6:a0:31:c4:88:be:bb:20:6b:c3:67:d8:a8:f8:d8:
         c7:76:85:4d:6d:bc:43:04:7b:e3:d4:8c:3c:6e:82:4c:f1:ef:
         41:ac:f3:2b:a9:df:8a:28:d1:6a:ed:a9:0b:32:e4:a9:a6:af:
         a7:d2:9e:45:1b:a1:d8:c1:f5:d1:35:25:1a:0d:3e:7e:26:56:
         9b:bb:3e:dd:8e:77:a2:b5:0a:d6:f3:1f:2b:5b:eb:c8:ab:90:
         b8:ed:ae:15:46:08:1a:c0:94:ce:aa:57:8f:56:3c:13:c4:57:
         e7:20:5d:23:d9:59:68:1d:a1:db:5a:3b:1e:94:9d:8c:0a:6f:
         d4:e0:d3:77
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTVENzExMC8GA1UEBRMoOUI5NTEyMkE0NjVBRkVDNjJBRTFEMzlDOTZGMUUwNjA4
MjNEREZGNDAeFw0yNjA5MjQwNDA0MzlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYjRhMTU3LTg0NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYkE724cXFRh3eDy7susSCjsgGrGZhs6jDBD4ny3BxxuF8ng6TWluWRBRuK2Cq
/GTY3l7c71lWWzjWM42aR7WczDjMBDp20mpejFXasnqfwviZax7PJm2TxpbNqGNO
bbi4JHfP9sXgLpSf5vpyBngzuxxpxlMF/Cgp+UPHHcU+dQbOEE9oBBvGMWwEWJgX
+diCr0iL9Ucram4/b5KZfEMv+50Ff77Bgl1YHIidTlwrTsRqv+7WyOsOEv8ZmWIt
sFvA5ZxD+fqoU6lo8g6TcWByAFxwD+i96HyBd2qvZjOOHvLrrQsQuzzKr3YcqLSJ
8ombHtneahtB368ww/vZrOuxAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU4bal3vGV
hT4nI5A31ozRNwfG44EwHwYDVR0jBBgwFoAUm5USKkZa/sYq4dOclvHgYII93/Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNUQ3LzZEQ0QwN0U2Njkx
NjExRjE4QzE0MUEwOTlDNDdBODg4L201VVNLa1phX3NZcTRkT2NsdkhnWUlJOTNf
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbTVVU0trWmFfc1lxNGRPY2x2SGdZSUk5M19RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB
NUQ3LzZEQ0QwN0U2NjkxNjExRjE4QzE0MUEwOTlDNDdBODg4LzRiYWwzdkdWaFQ0
bkk1QTMxb3pSTndmRzQ0RS5hc2EwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJR5
MA0GCSqGSIb3DQEBCwUAA4IBAQAME42JLPbXoUoQ4gK2kzV+pOsLPNTmDAkfdvUz
0ne2VG5oRbj7bkWhsTVrXOrJK5z9zE7TkA3fkw4EC7JHx96KQJN1ZmW/KMhsLgRv
YY89QNIthFdI2hLx0WN37HW53wSlNGENL7cd+4eTYpNJY508FSWY1oCHFkDjg0tk
9Lp7+snGoDHEiL67IGvDZ9io+NjHdoVNbbxDBHvj1Iw8boJM8e9BrPMrqd+KKNFq
7akLMuSppq+n0p5FG6HYwfXRNSUaDT5+Jlabuz7djneitQrW8x8rW+vIq5C47a4V
RggawJTOqlePVjwTxFfnIF0j2VloHaHbWjselJ2MCm/U4NN3
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:09:38 2026 by rpki-client