Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CUQblaz8ZIkaWtjrMWAh2x7pet0.asa
File:                     CUQblaz8ZIkaWtjrMWAh2x7pet0.asa (raw, json)
Hash identifier:          Ay851bYm9YY/DGHFAsMk9rzJgPup48b2NrgbSzrlgPI=
Subject key identifier:   09:44:1B:95:AC:FC:64:89:1A:5A:D8:EB:31:60:21:DB:1E:E9:7A:DD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FA20
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CUQblaz8ZIkaWtjrMWAh2x7pet0.asa
Signing time:             Sat 01 Aug 2026 10:11:23 +0000
ASPA not before:          Sat 01 Aug 2026 10:11:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            133260
Providers:                AS: 9829
                          AS: 9885
                          AS: 55824
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 15:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64032 (0xfa20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug  1 10:11:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a6dc64b-d68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:7e:60:8d:89:07:a9:ac:9e:f6:99:43:e3:
                    ba:45:4a:c2:0d:21:a8:c9:0f:60:1a:5e:07:1f:2d:
                    0e:44:2e:e4:54:3e:c0:56:a9:76:23:d5:39:84:f4:
                    81:6f:73:e9:d6:bf:50:1c:cd:0b:b6:9d:14:f4:ac:
                    c1:9a:ca:aa:c4:c7:ee:1c:34:ec:7b:4d:84:ee:fb:
                    bf:77:ec:b9:4f:14:df:19:dc:0a:11:c1:0c:00:50:
                    4f:79:1e:05:68:9a:30:05:ba:04:05:c9:b5:12:dc:
                    5a:d2:78:68:1c:a0:45:08:8a:0e:e3:66:75:89:c2:
                    cf:4c:df:46:09:1a:06:30:c7:f8:fd:68:0e:06:bd:
                    df:c9:d3:a5:53:63:32:1f:cf:1b:97:0b:4f:85:e0:
                    69:8c:fc:7f:bc:cb:a9:21:2a:5c:e4:75:97:1e:cc:
                    66:b6:71:70:ac:7c:fa:fc:81:3b:15:94:fd:72:20:
                    3e:b9:72:9f:f5:83:d7:c8:35:f2:f3:8a:a6:8d:ae:
                    62:2e:0c:de:73:1b:5b:88:c6:21:0d:c8:55:5e:df:
                    1d:77:cc:b8:30:45:47:3d:12:3f:91:22:83:2b:46:
                    ab:08:cc:b2:3a:8d:78:94:56:c1:3b:72:2d:7d:a4:
                    5b:79:27:06:fb:ec:ca:f5:06:8d:c8:01:0d:9b:25:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:44:1B:95:AC:FC:64:89:1A:5A:D8:EB:31:60:21:DB:1E:E9:7A:DD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CUQblaz8ZIkaWtjrMWAh2x7pet0.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133260

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:47:48:ca:85:da:08:13:58:91:64:e6:79:51:18:da:f7:
         af:64:34:42:11:8d:8b:55:42:5a:98:4d:78:51:d1:9a:29:d6:
         3b:1f:74:06:09:97:cb:96:ea:86:9c:51:ec:51:45:f4:85:62:
         e3:4e:54:9b:09:95:cd:81:d8:18:26:65:37:cc:df:ff:13:42:
         82:10:e6:ec:a1:19:41:d9:1d:55:4c:ed:2d:f3:2f:79:8b:ab:
         1e:de:82:72:ff:c8:31:f5:62:38:2f:2c:8f:bb:4f:20:b3:a9:
         de:1c:10:d6:ca:94:d5:58:23:d7:99:da:0c:62:30:8b:10:bb:
         aa:f7:7f:71:f1:c6:bc:a7:d6:1e:ad:b0:d4:d1:4a:d0:e7:6e:
         cf:01:25:ba:01:75:25:f4:73:40:23:a6:01:6b:5a:98:e7:56:
         46:8d:0c:68:c6:61:57:bf:d5:56:a0:f1:66:ea:27:15:41:50:
         da:ea:0b:42:5f:54:83:d0:a6:34:cd:94:4f:2f:0c:87:76:23:
         5a:6b:e5:32:bb:22:78:f9:66:56:08:d0:cd:e4:9c:74:ea:61:
         b1:4d:b9:67:1b:53:57:75:1a:7a:73:23:e6:df:1f:64:22:48:
         1b:f9:c2:fc:6d:d9:21:f9:37:fc:2b:33:c3:63:f5:f1:6f:c9:
         67:4d:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:21 2026 by rpki-client