Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/vm-m4NmypyOFpQCYpZK4hhgAvvg.asa
File:                     vm-m4NmypyOFpQCYpZK4hhgAvvg.asa (raw, json)
Hash identifier:          DOI9hPKC1i4e0v5+qepnp8+dbckDpzsHh7vM8oGqjpY=
Subject key identifier:   BE:6F:A6:E0:D9:B2:A7:23:85:A5:00:98:A5:92:B8:86:18:00:BE:F8
Certificate issuer:       /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial:       D1
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/vm-m4NmypyOFpQCYpZK4hhgAvvg.asa
Signing time:             Mon 31 Aug 2026 02:14:33 +0000
ASPA not before:          Mon 31 Aug 2026 02:14:33 +0000
ASPA not after:           Sun 31 Oct 2027 00:00:00 +0000
Customer ASID:            153952
Providers:                AS: 153371
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
                          rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
        Validity
            Not Before: Aug 31 02:14:33 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a94e389-5c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:3b:98:47:c1:60:21:61:f2:dd:d4:7d:05:
                    11:7a:9b:59:2e:d3:f2:fd:08:92:06:b4:ec:cb:fe:
                    1e:46:20:82:d8:a4:de:fc:6f:c2:cb:83:f8:cb:c1:
                    fd:d6:ca:d2:91:6f:c9:c9:78:8e:36:dd:c3:ac:e3:
                    76:ec:2d:d3:dd:df:35:5e:51:98:ff:38:49:50:8e:
                    83:e4:cd:f7:0e:52:3a:25:a6:b5:1e:3d:0d:63:06:
                    a8:0e:3d:5a:31:96:ff:b9:78:57:a5:60:e6:7a:ac:
                    ba:7c:bf:4f:51:f4:06:92:a8:1e:80:f2:ef:78:b5:
                    aa:e8:07:70:17:4b:e6:96:a4:f7:6a:65:7a:20:bf:
                    27:38:a2:85:07:43:ca:f6:07:bb:fa:66:ae:32:d5:
                    ba:b2:7d:ba:57:4d:79:f0:68:48:80:0d:c4:ed:24:
                    64:e6:f9:fd:16:0a:74:4d:8b:a0:8a:04:52:3a:6a:
                    39:cc:d5:57:7f:88:06:bb:03:b0:46:32:03:f3:3a:
                    83:9a:ab:44:83:24:a1:86:47:fe:01:de:40:22:24:
                    84:6b:58:99:ff:20:e3:5e:91:37:e3:b9:18:de:4e:
                    e2:c3:ff:17:9c:38:79:fc:46:96:77:52:56:69:b5:
                    5b:77:20:35:56:0e:7d:00:cb:1b:5d:0b:e7:d8:7f:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6F:A6:E0:D9:B2:A7:23:85:A5:00:98:A5:92:B8:86:18:00:BE:F8
            X509v3 Authority Key Identifier:
                keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/vm-m4NmypyOFpQCYpZK4hhgAvvg.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153952

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:5b:a4:d1:9e:f0:91:d4:23:64:31:ce:2a:6b:1e:e3:7b:
         26:1a:67:07:7a:cd:fc:b0:0d:87:5c:93:b6:0e:08:ce:1e:e0:
         67:5b:39:fc:6e:e0:92:73:ae:d0:4e:8d:36:33:79:5a:70:9b:
         b6:b9:c9:8c:bf:24:46:80:cd:05:f6:ce:20:02:11:f2:01:a1:
         e5:03:a4:58:87:2b:4b:69:7a:1e:fa:ce:7b:73:5b:11:c5:91:
         f9:fe:05:a7:1f:7f:d7:a4:0e:27:26:c0:06:a9:36:16:38:a4:
         c4:44:6d:a6:f0:37:b3:e7:99:40:c7:77:92:3d:e2:4d:8e:9c:
         fb:bb:ea:0c:6b:db:13:7e:09:f3:0a:5c:03:9c:ff:c6:8f:54:
         48:93:27:02:5a:48:a1:ef:9a:25:6b:18:18:75:d7:27:2d:47:
         d4:4a:20:fd:5e:a6:f3:13:6e:6d:8f:9e:97:39:b1:9f:13:20:
         6d:cd:d0:25:b4:1e:a8:90:f2:45:76:7a:10:90:3e:59:e4:0b:
         43:e3:31:27:48:1a:3e:8d:dd:e6:ea:20:12:f3:99:a4:85:82:
         96:77:95:65:c4:22:a9:7b:95:2b:04:49:61:bc:30:38:7a:83:
         e4:81:2d:91:cf:df:b5:ff:10:90:d1:96:b2:08:d9:ec:b4:22:
         e9:aa:37:7d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg0MzIxMTAvBgNVBAUTKDk2RkMzRDFGODc5NUJFRTlFQUExRUI5NUQyOUE1OUM4
QTQwMjczRDMwHhcNMjYwODMxMDIxNDMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0ZTM4OS01YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmmQ7mEfBYCFh8t3UfQUReptZLtPy/QiSBrTsy/4eRiCC2KTe/G/Cy4P4y8H9
1srSkW/JyXiONt3DrON27C3T3d81XlGY/zhJUI6D5M33DlI6Jaa1Hj0NYwaoDj1a
MZb/uXhXpWDmeqy6fL9PUfQGkqgegPLveLWq6AdwF0vmlqT3amV6IL8nOKKFB0PK
9ge7+mauMtW6sn26V0158GhIgA3E7SRk5vn9Fgp0TYugigRSOmo5zNVXf4gGuwOw
RjID8zqDmqtEgyShhkf+Ad5AIiSEa1iZ/yDjXpE347kY3k7iw/8XnDh5/EaWd1JW
abVbdyA1Vg59AMsbXQvn2H+CzQIDAQABo4ICVTCCAlEwHQYDVR0OBBYEFL5vpuDZ
sqcjhaUAmKWSuIYYAL74MB8GA1UdIwQYMBaAFJb8PR+Hlb7p6qHrldKaWcikAnPT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQzMi9GQjY4NUIxRTZD
NTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1bnFvZXVWMHBwWnlLUUNj
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODQzMi9GQjY4NUIxRTZDNTAxMUYwODk5ODA3NEJDNEY5QUUwMi92bS1tNE5teXB5
T0ZwUUNZcFpLNGhoZ0F2dmcuYXNhMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJZ
YDANBgkqhkiG9w0BAQsFAAOCAQEAXsFbpNGe8JHUI2QxziprHuN7JhpnB3rN/LAN
h1yTtg4Izh7gZ1s5/G7gknOu0E6NNjN5WnCbtrnJjL8kRoDNBfbOIAIR8gGh5QOk
WIcrS2l6HvrOe3NbEcWR+f4Fpx9/16QOJybABqk2FjikxERtpvA3s+eZQMd3kj3i
TY6c+7vqDGvbE34J8wpcA5z/xo9USJMnAlpIoe+aJWsYGHXXJy1H1Eog/V6m8xNu
bY+elzmxnxMgbc3QJbQeqJDyRXZ6EJA+WeQLQ+MxJ0gaPo3d5uogEvOZpIWClneV
ZcQiqXuVKwRJYbwwOHqD5IEtkc/ftf8QkNGWsgjZ7LQi6ao3fQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:27:12 2026 by rpki-client