Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/It5BvEd7a0CYNxJ-ky-fCWOtpRQ.asa
File:                     It5BvEd7a0CYNxJ-ky-fCWOtpRQ.asa (raw, json)
Hash identifier:          1CQMn3DYZc47sC+KTwaD9reyL44WvTiB/ryxWVM8M3w=
Subject key identifier:   22:DE:41:BC:47:7B:6B:40:98:37:12:7E:93:2F:9F:09:63:AD:A5:14
Certificate issuer:       /CN=A915A5D7/serialNumber=9B95122A465AFEC62AE1D39C96F1E060823DDFF4
Certificate serial:       35
Authority key identifier: 9B:95:12:2A:46:5A:FE:C6:2A:E1:D3:9C:96:F1:E0:60:82:3D:DF:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5USKkZa_sYq4dOclvHgYII93_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/It5BvEd7a0CYNxJ-ky-fCWOtpRQ.asa
Signing time:             Thu 24 Sep 2026 04:04:38 +0000
ASPA not before:          Thu 24 Sep 2026 04:04:38 +0000
ASPA not after:           Sun 31 Jan 2027 00:00:00 +0000
Customer ASID:            133137
Providers:                AS: 17828
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/m5USKkZa_sYq4dOclvHgYII93_Q.crl
                          rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/m5USKkZa_sYq4dOclvHgYII93_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5USKkZa_sYq4dOclvHgYII93_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5D7, serialNumber=9B95122A465AFEC62AE1D39C96F1E060823DDFF4
        Validity
            Not Before: Sep 24 04:04:38 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ab4a156-134f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:2d:09:77:5d:d6:6c:84:85:a6:78:2e:5e:
                    72:dc:f0:34:a0:3d:fa:76:58:f0:90:b4:45:c3:6b:
                    1b:38:f1:8d:2b:9a:83:e5:8e:73:53:e1:a8:f2:ce:
                    70:71:3c:d8:e3:bc:58:30:a6:9d:07:dd:29:d7:bf:
                    49:1a:48:e4:05:f4:10:df:28:c4:23:9e:4f:08:e3:
                    4d:85:f2:10:c9:20:0d:f0:67:c8:3c:16:e3:90:67:
                    78:44:07:45:53:3b:59:d2:bc:69:54:03:db:4b:a7:
                    fe:d9:fd:53:dc:30:1a:2d:83:07:3b:a4:18:5f:1e:
                    ca:b3:98:1b:62:2c:a1:aa:7e:29:d5:4c:46:f7:cd:
                    b1:f8:8c:54:ed:1a:5b:ca:0b:14:d6:a3:f2:a7:67:
                    ba:21:ed:52:97:6c:bf:68:ec:2a:68:ec:5d:e6:6a:
                    cb:e2:06:94:92:b3:0a:b3:a6:78:03:ab:53:b0:94:
                    ad:ca:97:c6:00:ed:d0:6e:b4:e7:a2:99:71:7e:7a:
                    35:fb:39:cc:fa:d4:17:e6:58:e4:2e:96:56:39:19:
                    a8:5f:35:8e:07:5b:f7:8c:bd:a1:5e:d5:9d:15:5c:
                    8f:98:f3:d8:8a:05:b2:27:98:51:8b:e3:4f:bd:11:
                    76:45:d3:93:a1:f5:9c:bf:7a:dc:e8:8f:ea:9c:97:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DE:41:BC:47:7B:6B:40:98:37:12:7E:93:2F:9F:09:63:AD:A5:14
            X509v3 Authority Key Identifier:
                keyid:9B:95:12:2A:46:5A:FE:C6:2A:E1:D3:9C:96:F1:E0:60:82:3D:DF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/m5USKkZa_sYq4dOclvHgYII93_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5USKkZa_sYq4dOclvHgYII93_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5D7/6DCD07E6691611F18C141A099C47A888/It5BvEd7a0CYNxJ-ky-fCWOtpRQ.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133137

    Signature Algorithm: sha256WithRSAEncryption
         a2:1d:56:c8:49:de:7d:b4:68:2f:72:5e:a1:be:84:35:08:2a:
         5f:d9:9e:96:7a:b3:9a:73:ff:76:07:19:75:64:b1:0e:b1:58:
         cf:45:c0:53:f5:f4:5c:f4:e5:b8:0c:3d:22:ab:2d:f7:29:c3:
         51:9c:dd:1c:0b:67:11:bf:18:5d:3a:29:f1:4c:f0:2d:24:82:
         cd:48:4a:a4:3b:40:c6:5e:36:38:70:7e:e6:e7:b0:4f:6f:62:
         15:ba:51:1e:fc:d5:31:91:59:80:a9:ea:26:37:31:c7:b6:08:
         f2:c4:e8:ab:c8:38:ac:1f:77:0d:66:d6:95:13:bd:0e:cc:c1:
         5a:31:8c:49:70:cd:8a:6c:e2:ca:7c:62:fa:4d:cc:b9:76:2b:
         32:cf:e0:73:1e:58:7d:67:61:5a:90:40:90:fe:0e:f7:72:05:
         9f:a8:ed:45:1f:ec:1f:c5:58:79:1a:d7:03:7c:a5:6a:e2:2c:
         a0:c3:32:ca:af:15:24:24:b5:d7:11:73:a7:45:50:fa:03:6b:
         20:8e:6f:81:bd:06:0d:02:22:36:e5:1a:f6:d5:64:6e:6c:6b:
         ec:99:a6:8c:2a:25:88:99:c9:10:39:cd:93:50:1f:44:f8:9f:
         e7:11:b8:ae:44:d2:8e:a2:28:ae:75:4e:ec:16:34:74:f4:e4:
         ff:fb:37:b7
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTVENzExMC8GA1UEBRMoOUI5NTEyMkE0NjVBRkVDNjJBRTFEMzlDOTZGMUUwNjA4
MjNEREZGNDAeFw0yNjA5MjQwNDA0MzhaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYjRhMTU2LTEzNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC47y0Jd13WbISFpnguXnLc8DSgPfp2WPCQtEXDaxs48Y0rmoPljnNT4ajyznBx
PNjjvFgwpp0H3SnXv0kaSOQF9BDfKMQjnk8I402F8hDJIA3wZ8g8FuOQZ3hEB0VT
O1nSvGlUA9tLp/7Z/VPcMBotgwc7pBhfHsqzmBtiLKGqfinVTEb3zbH4jFTtGlvK
CxTWo/KnZ7oh7VKXbL9o7Cpo7F3masviBpSSswqzpngDq1OwlK3Kl8YA7dButOei
mXF+ejX7Ocz61BfmWOQullY5GahfNY4HW/eMvaFe1Z0VXI+Y89iKBbInmFGL40+9
EXZF05Oh9Zy/etzoj+qcl4h5AgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUIt5BvEd7
a0CYNxJ+ky+fCWOtpRQwHwYDVR0jBBgwFoAUm5USKkZa/sYq4dOclvHgYII93/Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNUQ3LzZEQ0QwN0U2Njkx
NjExRjE4QzE0MUEwOTlDNDdBODg4L201VVNLa1phX3NZcTRkT2NsdkhnWUlJOTNf
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbTVVU0trWmFfc1lxNGRPY2x2SGdZSUk5M19RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB
NUQ3LzZEQ0QwN0U2NjkxNjExRjE4QzE0MUEwOTlDNDdBODg4L0l0NUJ2RWQ3YTBD
WU54Si1reS1mQ1dPdHBSUS5hc2EwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAggR
MA0GCSqGSIb3DQEBCwUAA4IBAQCiHVbISd59tGgvcl6hvoQ1CCpf2Z6WerOac/92
Bxl1ZLEOsVjPRcBT9fRc9OW4DD0iqy33KcNRnN0cC2cRvxhdOinxTPAtJILNSEqk
O0DGXjY4cH7m57BPb2IVulEe/NUxkVmAqeomNzHHtgjyxOiryDisH3cNZtaVE70O
zMFaMYxJcM2KbOLKfGL6Tcy5disyz+BzHlh9Z2FakECQ/g73cgWfqO1FH+wfxVh5
GtcDfKVq4iygwzLKrxUkJLXXEXOnRVD6A2sgjm+BvQYNAiI25Rr21WRubGvsmaaM
KiWImckQOc2TUB9E+J/nEbiuRNKOoiiudU7sFjR09OT/+ze3
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:04:36 2026 by rpki-client