Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4dHVvq560-qe1XALobm5l0q-0t4.asa
File:                     4dHVvq560-qe1XALobm5l0q-0t4.asa (raw, json)
Hash identifier:          tAFBA8ORpGxt2CFV0thn6/QStVI1tvcy1eklIbOl+Y0=
Subject key identifier:   E1:D1:D5:BE:AE:7A:D3:EA:9E:D5:70:0B:A1:B9:B9:97:4A:BE:D2:DE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F8EF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4dHVvq560-qe1XALobm5l0q-0t4.asa
Signing time:             Mon 20 Jul 2026 09:02:28 +0000
ASPA not before:          Mon 20 Jul 2026 09:02:28 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            133266
Providers:                AS: 9498
                          AS: 9583
                          AS: 55836
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63727 (0xf8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 20 09:02:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a5de424-2de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:3c:09:cb:ec:f5:e1:e1:5d:98:0b:a7:f6:
                    3f:f7:72:29:17:d6:ca:68:ec:3f:7a:ee:b0:20:a9:
                    03:63:ba:be:ee:52:8e:23:cd:cf:4f:d5:80:3b:9e:
                    cb:f4:4e:6d:98:d4:11:ee:71:51:31:40:d8:78:11:
                    60:39:1f:be:c7:44:61:36:5b:f3:69:ff:a4:8d:6f:
                    7b:64:76:df:18:3e:43:60:d3:97:5c:52:02:f5:a8:
                    8f:bb:23:ce:cc:47:d9:15:14:48:3d:d2:78:34:46:
                    b2:1d:b8:7d:c1:73:7b:8f:08:12:11:6e:e1:70:09:
                    3b:c7:ec:22:f9:4c:6c:c2:47:47:1d:ec:b3:30:89:
                    9d:96:14:01:4c:12:da:c6:6b:f7:0e:b9:a8:7c:37:
                    bb:78:c7:d8:63:39:3b:94:4f:02:ac:85:b7:a7:25:
                    0b:2b:ec:56:92:db:9f:a3:67:17:72:b5:f6:a2:be:
                    97:f6:f3:b9:84:5d:9b:2f:cf:82:bb:6d:8f:b6:b9:
                    a1:df:96:a7:15:05:d4:1b:99:45:2c:94:da:5d:53:
                    f2:d8:08:09:57:20:50:b5:b3:cf:d6:10:34:71:cd:
                    24:43:7e:aa:4f:bd:aa:74:18:57:2a:dd:4d:e0:2c:
                    db:ca:39:af:91:9a:81:73:e5:33:1e:52:8f:94:d1:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D1:D5:BE:AE:7A:D3:EA:9E:D5:70:0B:A1:B9:B9:97:4A:BE:D2:DE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4dHVvq560-qe1XALobm5l0q-0t4.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133266

    Signature Algorithm: sha256WithRSAEncryption
         71:39:fa:b2:b0:bc:ba:a5:d3:e7:6e:85:0d:88:ce:b4:7f:c2:
         97:9b:51:f2:73:6f:3b:c6:d1:14:a5:da:91:29:77:7d:05:13:
         25:1b:af:fd:fc:04:e4:24:f3:00:9c:93:18:31:9a:b4:c1:08:
         e9:99:1e:05:99:7b:d7:c4:04:7b:0b:2f:d5:0e:ac:82:26:9e:
         d9:04:c5:61:26:4c:5d:f1:7e:43:b3:78:a1:98:a7:ed:25:eb:
         97:f9:9c:20:82:6b:f2:35:e9:7b:80:bb:a3:5e:fb:92:9f:78:
         02:02:b0:50:b3:f6:95:d8:67:9d:86:70:43:b6:b8:9a:e4:65:
         40:c9:da:3a:94:81:02:69:b7:1f:0c:02:9d:83:eb:37:33:be:
         8b:ac:74:a3:30:f9:27:d9:d4:e7:36:39:7e:d2:2c:7c:91:ed:
         9b:57:d8:bb:1f:ef:2c:78:b5:21:3c:96:10:fa:0e:58:1e:23:
         61:0a:d2:5e:f0:31:fd:23:d4:33:56:dc:38:00:4f:65:1a:04:
         65:14:0d:f6:80:ab:96:e7:70:b5:d3:37:54:bc:5f:77:e6:80:
         e6:2d:5e:54:b4:3f:26:1c:32:cd:5d:19:5d:96:54:ba:9d:c2:
         78:11:45:4a:91:eb:d1:95:b2:de:5a:5d:aa:53:9a:e9:28:0d:
         bb:82:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:19 2026 by rpki-client