Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS945/4/AS49867.asa
File:                     AS49867.asa (raw, json)
Hash identifier:          Uyn2PMUOiTUlufM+tur76Zocs+n0EbKQOfOAPIdt6wc=
Subject key identifier:   B6:9A:95:D7:01:5D:27:82:AC:34:F8:B8:88:2F:DB:35:47:79:3C:1D
Certificate issuer:       /CN=3FF5D408DA7870E6667792E8F8613A14C6562654
Certificate serial:       4A37582E9AC76D9FE29DCC9F1359B048CFD36689
Authority key identifier: 3F:F5:D4:08:DA:78:70:E6:66:77:92:E8:F8:61:3A:14:C6:56:26:54
Authority info access:    rsync://rpki.co/repo/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer
Subject info access:      rsync://rpki.co/repo/AS945/4/AS49867.asa
Signing time:             Tue 11 Apr 2023 01:07:27 +0000
ASPA not before:          Tue 11 Apr 2023 01:02:27 +0000
ASPA not after:           Tue 09 Apr 2024 01:07:27 +0000
Customer AS:              49867
Provider Set:             AS: 1299
                          AS: 6939
                          AS: 50058

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.crl
                          rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.mft
                          rsync://rpki.co/repo/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer
                          rsync://rpki.co/repo/August/10/67965BF43B445B16051D4A03B9F0D6BE5AD0E2A6.crl
                          rsync://rpki.co/repo/August/10/67965BF43B445B16051D4A03B9F0D6BE5AD0E2A6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5Zb9DtEWxYFHUoDufDWvlrQ4qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Apr 2023 00:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:58:2e:9a:c7:6d:9f:e2:9d:cc:9f:13:59:b0:48:cf:d3:66:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF5D408DA7870E6667792E8F8613A14C6562654
        Validity
            Not Before: Apr 11 01:02:27 2023 GMT
            Not After : Apr  9 01:07:27 2024 GMT
        Subject: CN=B69A95D7015D2782AC34F8B8882FDB3547793C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:ee:1f:0e:fd:3a:5d:18:a3:4e:e5:32:f8:
                    7b:f2:5e:1d:5f:cc:f0:f3:79:e4:db:b6:b0:53:b8:
                    be:ae:3f:e1:9e:54:ad:33:c2:b8:39:8d:ce:b5:46:
                    3c:a1:f1:5f:16:ee:89:84:9a:38:6c:af:84:17:5a:
                    51:9c:8a:0d:6d:4e:43:5d:20:58:cf:90:93:1c:00:
                    29:03:94:79:57:d8:88:52:6c:3f:ed:50:c6:e2:d7:
                    8e:55:02:5b:c2:a8:6f:d8:b6:3a:29:61:e5:73:c2:
                    28:c1:39:dd:49:63:40:d1:2a:02:3c:d9:dd:bc:83:
                    e2:0f:4e:85:0a:f0:3e:3e:b2:07:48:0f:67:40:57:
                    a5:04:bd:87:29:10:c0:09:f9:64:30:19:f6:46:89:
                    0b:1d:4d:12:08:4e:70:44:38:72:0a:b7:7a:b2:6e:
                    07:d2:9a:d3:49:8b:0b:a5:eb:95:6f:28:5d:38:d2:
                    43:53:28:d4:9b:3b:de:af:48:2f:08:3e:45:12:56:
                    38:53:f0:9c:e3:77:87:4c:5b:d1:f8:34:b7:47:b5:
                    8f:fc:5b:55:ba:37:de:fb:19:d4:db:6a:b0:bb:44:
                    97:5d:3d:e5:1a:93:00:2f:52:3e:40:14:63:ca:17:
                    ee:ad:04:65:f6:d3:dd:d2:ac:ec:ab:ce:10:00:38:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B6:9A:95:D7:01:5D:27:82:AC:34:F8:B8:88:2F:DB:35:47:79:3C:1D
            X509v3 Authority Key Identifier: 
                keyid:3F:F5:D4:08:DA:78:70:E6:66:77:92:E8:F8:61:3A:14:C6:56:26:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/4/3FF5D408DA7870E6667792E8F8613A14C6562654.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.co/repo/August/10/3FF5D408DA7870E6667792E8F8613A14C6562654.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS945/4/AS49867.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         31:41:aa:55:21:1e:75:59:ff:0c:56:c7:a9:80:fa:e9:ae:d0:
         c0:20:8c:49:11:1e:1d:b7:cd:c9:7b:d3:e8:e7:5e:6a:c6:30:
         26:1f:31:eb:21:3f:e4:17:47:67:37:e0:c0:ec:79:18:4e:4d:
         64:63:1b:f3:46:ba:e3:33:8a:71:90:ae:4d:08:4d:e4:c5:d7:
         86:fe:2e:a6:3f:d6:2d:5f:dd:d2:13:c6:c1:3a:f8:3d:ef:54:
         37:78:49:64:56:69:ad:d6:70:39:a3:52:c0:75:3c:ae:9d:a7:
         71:58:e5:1d:3a:17:70:17:1a:a6:54:09:3a:01:0b:b6:35:55:
         2d:aa:f5:96:f5:13:a6:b4:dc:04:5e:c5:75:e3:a6:28:d9:a8:
         d8:da:1e:8f:61:2f:a8:fb:d7:63:15:a7:80:33:1f:bf:f3:93:
         e9:ff:62:6e:3e:3e:67:a7:08:4f:ef:69:10:37:ff:d8:86:a9:
         ea:ba:9e:b7:94:85:3e:b7:33:d0:43:31:9a:1b:d1:1c:07:33:
         ad:00:1c:ca:62:0a:13:ab:40:5f:3b:72:83:b7:2c:4c:98:5e:
         62:e3:4e:30:62:f2:2e:b4:a4:84:22:19:83:6e:bf:ba:c4:0f:
         7f:c9:2e:ad:d4:ec:39:0c:3a:68:f3:55:c9:22:e8:a5:bb:e4:
         42:80:9d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 11 01:29:08 2023 by rpki-client on console-fra.rpki-client.org