Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/kTUWxCZUTqfdmKZJOr848XkO4R0.asa
File:                     kTUWxCZUTqfdmKZJOr848XkO4R0.asa (raw, json)
Hash identifier:          HVnESxCuLk1+9MJ5dl30y1AKIa30snRqP2BPRnaEJvQ=
Subject key identifier:   91:35:16:C4:26:54:4E:A7:DD:98:A6:49:3A:BF:38:F1:79:0E:E1:1D
Certificate issuer:       /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Certificate serial:       2209
Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/kTUWxCZUTqfdmKZJOr848XkO4R0.asa
Signing time:             Tue 29 Sep 2026 05:41:08 +0000
ASPA not before:          Tue 29 Sep 2026 05:41:08 +0000
ASPA not after:           Wed 31 Mar 2027 00:00:00 +0000
Customer ASID:            133179
Providers:                AS: 4007
                          AS: 17501
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8713 (0x2209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
        Validity
            Not Before: Sep 29 05:41:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6abb4f74-4565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:57:b7:a7:25:67:64:8b:ce:8d:88:b6:94:
                    38:fc:3d:27:20:67:07:1f:38:21:ea:bc:d4:0a:7e:
                    4e:44:c6:7b:ae:e1:99:fe:4f:f1:70:b9:43:d0:5e:
                    0d:52:2c:80:59:41:11:92:06:c2:28:07:ea:01:3a:
                    7e:6a:d9:08:98:a7:80:16:f4:87:7f:66:a8:dd:1c:
                    4a:5a:2e:61:07:36:fb:3b:ce:c1:7e:54:ba:92:8f:
                    c4:8f:ad:fd:6a:1d:0c:44:38:1d:9b:50:7a:7c:36:
                    a5:71:02:3c:87:ca:ab:93:0a:12:f5:d9:aa:2d:c5:
                    dc:34:35:e3:42:e7:fb:ce:b4:d6:75:cc:21:88:fa:
                    39:5e:34:e7:06:70:49:3b:0a:29:83:35:a6:28:b8:
                    7f:48:10:03:85:04:c0:54:4f:1e:bb:6e:67:c5:8e:
                    a6:9a:f6:5d:2f:69:17:65:55:c5:a5:cc:d8:50:b9:
                    75:38:31:9e:86:10:2e:a0:9a:e3:14:e5:8f:2a:1c:
                    59:84:ad:45:c5:3a:73:dd:ed:57:b4:a7:3f:c6:05:
                    76:7d:2d:cb:83:86:44:53:75:bc:fa:6c:0b:ba:24:
                    8e:b6:24:13:fe:80:87:36:db:b5:e8:e0:c6:0e:a3:
                    cb:26:72:86:d6:57:e2:07:04:2a:a1:6b:07:f2:49:
                    6f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:35:16:C4:26:54:4E:A7:DD:98:A6:49:3A:BF:38:F1:79:0E:E1:1D
            X509v3 Authority Key Identifier:
                keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/kTUWxCZUTqfdmKZJOr848XkO4R0.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133179

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:23:fb:2d:e2:37:5f:8d:35:02:de:b1:4e:77:24:28:91:
         16:3e:5a:77:f0:d3:0b:81:3a:a3:e3:26:52:de:e5:f8:d6:ac:
         72:23:33:03:3a:e6:b0:95:f1:32:f0:64:1e:2b:90:82:e1:43:
         cf:8e:aa:28:9b:36:f0:26:0d:de:0e:9d:1b:42:37:ec:92:7b:
         ad:9f:c1:64:40:c9:89:7c:2c:46:29:37:a8:bd:21:e3:b7:53:
         44:ac:cf:f2:11:61:64:4f:e5:a0:d7:db:b5:d7:3b:c2:79:fd:
         7c:b8:63:20:51:c8:84:c9:e8:2b:0f:6b:bf:9e:f9:08:7f:63:
         5c:fa:79:42:9b:4c:55:f5:d4:5e:37:41:48:15:5f:99:ee:e8:
         b6:62:5a:a2:e2:17:1f:0e:f3:77:4e:38:6a:71:af:e6:c0:e7:
         e0:dd:e5:71:71:18:6d:95:2f:a7:51:63:6e:5c:68:50:93:38:
         6f:0f:0a:fb:82:9a:b5:ff:43:91:d8:97:f3:b4:3d:ab:f1:23:
         41:78:7b:2c:d6:f1:95:fd:02:06:63:f5:51:63:f0:d3:fe:63:
         65:0a:c7:2e:28:24:ab:6c:31:86:35:4c:7c:4f:2b:0b:ee:fb:
         db:43:7e:4a:60:90:a9:e3:37:29:a7:70:19:5f:42:0a:b7:ab:
         32:6c:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:55:36 2026 by rpki-client