Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/o-Sj-H8a3T_Xvk0R_FCyCrdRMvE.asa
File:                     o-Sj-H8a3T_Xvk0R_FCyCrdRMvE.asa (raw, json)
Hash identifier:          y3EFp6J5onJ0tD3nTztBMeEPywK5QBWrYlx3jpacAK8=
Subject key identifier:   A3:E4:A3:F8:7F:1A:DD:3F:D7:BE:4D:11:FC:50:B2:0A:B7:51:32:F1
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       02E4
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/o-Sj-H8a3T_Xvk0R_FCyCrdRMvE.asa
Signing time:             Mon 31 Aug 2026 00:51:17 +0000
ASPA not before:          Mon 31 Aug 2026 00:51:17 +0000
ASPA not after:           Wed 30 Dec 2026 00:00:00 +0000
Customer ASID:            131471
Providers:                AS: 17557
                          AS: 58470
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: Aug 31 00:51:17 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a94d005-c868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:f2:d4:eb:13:a2:d6:4c:e9:1d:26:c3:d6:
                    58:26:2e:b3:a4:9a:32:31:87:c5:f9:f6:65:56:84:
                    26:88:13:95:a9:df:a6:3f:c6:29:96:09:1d:a6:f9:
                    b6:90:33:99:a0:af:da:c7:bb:e5:e4:0d:b7:bb:80:
                    c9:fd:74:33:d0:41:e9:be:25:36:e2:a5:ec:0d:34:
                    56:ae:f1:6a:e6:31:6f:0b:d4:88:fe:d9:c2:98:08:
                    6c:07:a8:fd:79:d4:29:e1:33:1b:46:b3:3f:bb:c4:
                    6f:cf:8e:0a:9a:7d:e3:f9:03:a4:3e:b1:20:7e:d3:
                    8d:9f:c0:38:91:47:88:57:50:0f:c0:b9:fd:6d:f4:
                    53:95:6b:aa:1e:49:14:30:e9:98:4d:40:92:e5:f8:
                    dd:91:b6:a9:39:16:f9:59:2f:e8:b4:d1:49:76:e0:
                    ea:9a:21:92:18:d2:01:f6:d1:b3:80:86:3f:aa:d9:
                    01:55:86:77:12:c3:d3:6d:5c:d6:31:09:5f:de:61:
                    78:e7:6a:ab:ba:eb:1c:ec:9a:01:e4:f1:3e:0f:7f:
                    a0:9c:ce:20:d3:8a:05:bb:71:26:4d:7d:0d:8a:43:
                    07:cd:53:ed:80:ab:d2:9d:95:5a:3f:7a:79:e8:85:
                    e5:4e:70:2d:5f:d4:40:0a:0e:4e:70:8e:ee:93:0c:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E4:A3:F8:7F:1A:DD:3F:D7:BE:4D:11:FC:50:B2:0A:B7:51:32:F1
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/o-Sj-H8a3T_Xvk0R_FCyCrdRMvE.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131471

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:c8:3b:e1:60:63:9f:15:d3:20:c6:94:ed:e7:dc:ec:89:
         7a:42:2d:77:9c:53:4d:2f:91:cb:f8:61:6c:53:e3:78:97:2a:
         86:29:a4:51:09:ef:c5:16:34:c2:77:9c:37:21:f3:29:76:dc:
         c3:27:b7:bb:9c:ca:64:8e:89:56:ad:7c:0a:70:5d:86:2c:82:
         ce:03:3a:50:a0:2d:fb:13:b0:15:32:1d:07:2d:0a:fe:46:23:
         23:cc:9a:3a:e0:bb:ee:7b:a1:2d:eb:6c:87:92:7c:0d:f5:a3:
         b2:ec:2a:75:df:53:f7:31:fd:93:49:13:97:40:cd:ac:e1:c5:
         9d:d2:cc:4a:2e:3b:8f:6e:c1:ca:27:a2:b5:d3:e4:77:b8:96:
         86:a4:ac:76:ad:2e:b0:1b:17:2a:c4:ad:09:46:3d:41:d8:13:
         52:8d:37:4c:21:1f:fe:f8:f0:fd:3d:bd:fe:83:b1:5a:01:83:
         aa:ee:c1:03:f4:fe:0e:de:8a:70:60:88:4a:d6:4d:6a:55:cc:
         df:03:33:b4:fe:d3:03:a3:45:69:10:1f:fa:4d:25:30:97:a7:
         b2:80:76:71:b0:bd:99:e4:ae:5d:8e:c1:02:20:97:70:cf:54:
         d5:8d:11:16:3e:c7:6b:4a:92:d6:98:14:44:ce:77:b6:f5:76:
         39:5e:01:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:35:06 2026 by rpki-client