Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/AS51818.asa
File:                     AS51818.asa (raw, json)
Hash identifier:          6col/9GeyzBgYSqnc0Job2AIvTTY9JCtvOZbRbMXdPU=
Subject key identifier:   BA:E7:8E:F8:20:C3:4C:2D:81:F0:A6:43:EE:DF:F7:53:54:FF:8F:FD
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       0B1239CE6ABE484B830BF3A784720C2204CA3FC5
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/AS51818.asa
Signing time:             Tue 11 Apr 2023 01:44:07 +0000
ASPA not before:          Tue 11 Apr 2023 01:39:07 +0000
ASPA not after:           Tue 09 Apr 2024 01:44:07 +0000
Customer AS:              51818
Provider Set:             AS: 0

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
                          rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
                          rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
                          rsync://rpki.co/repo/August/1/50EB1AF38EABDE95EBD68D9164228B647488E874.crl
                          rsync://rpki.co/repo/August/1/50EB1AF38EABDE95EBD68D9164228B647488E874.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOsa846r3pXr1o2RZCKLZHSI6HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Apr 2023 00:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:12:39:ce:6a:be:48:4b:83:0b:f3:a7:84:72:0c:22:04:ca:3f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 11 01:39:07 2023 GMT
            Not After : Apr  9 01:44:07 2024 GMT
        Subject: CN=BAE78EF820C34C2D81F0A643EEDFF75354FF8FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:26:c5:df:4e:e5:90:73:63:e5:12:72:3e:
                    68:fe:a1:e6:a1:fc:c6:d8:dd:8d:ab:89:4f:4e:e5:
                    a6:5d:ce:4b:91:f9:89:df:d0:bf:3e:c4:3a:5a:9f:
                    ef:44:43:98:e5:57:8c:ea:71:51:5f:72:a7:36:e3:
                    ae:26:57:a2:61:2e:e3:04:c4:e9:83:0e:ae:0f:59:
                    f5:34:c2:d7:3d:48:ac:d5:0f:19:9f:ba:7e:a1:03:
                    f1:09:06:f3:ea:2f:49:34:62:c2:b9:36:3e:d2:9c:
                    7e:d2:53:39:ab:ad:4e:99:ac:e5:5a:c1:38:bb:5a:
                    2b:66:5c:8c:64:0d:f6:96:2e:1f:e7:ff:e8:1e:55:
                    48:e4:75:9c:24:04:ce:46:e7:94:ac:11:01:20:63:
                    43:4f:c6:f7:4b:1c:29:e0:23:e7:5e:ac:e0:d7:ef:
                    8b:e7:ad:54:12:a7:d3:52:ad:c5:15:01:57:6c:59:
                    49:ad:6c:c1:7b:5e:54:f0:dc:a9:e7:e7:04:2b:f9:
                    25:15:29:64:6d:b2:f6:ad:e0:a9:5e:15:e8:8a:e7:
                    f2:c0:61:3b:ff:d6:f9:2f:15:3b:40:6e:71:31:be:
                    70:a3:47:84:56:24:75:2a:4e:70:92:68:8e:56:39:
                    05:b0:42:5e:37:c7:8b:38:1a:d8:62:13:4a:29:a3:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BA:E7:8E:F8:20:C3:4C:2D:81:F0:A6:43:EE:DF:F7:53:54:FF:8F:FD
            X509v3 Authority Key Identifier: 
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/AS51818.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:c2:1c:c6:81:26:f5:03:fc:04:5f:26:f3:97:53:f3:c1:
         7d:e0:2e:51:42:3f:2a:5e:71:1e:0c:9d:51:c3:ef:02:fa:7c:
         84:b9:b8:b4:f8:19:ea:a2:91:c0:e7:da:96:79:b0:b5:79:98:
         1a:c3:3a:78:a0:92:ae:08:27:69:8f:78:a6:8f:2b:fa:fa:19:
         1e:7a:0f:cd:74:76:81:cc:2b:2e:cd:c2:62:ce:88:32:26:92:
         67:b3:ee:93:01:2f:a4:55:f8:8e:e8:b9:69:c9:8f:6a:16:76:
         e8:01:f1:50:e6:73:6a:6c:ae:b1:6e:c1:e2:10:16:23:59:1e:
         90:6b:a3:5d:fb:76:98:6e:01:7c:54:57:37:63:e1:68:4a:59:
         a3:c8:d8:dc:b2:fd:86:d3:08:b8:1f:59:7e:44:73:e7:8d:a3:
         5d:9b:4e:37:e1:94:4d:8d:24:0c:bd:ef:a8:f1:55:3c:56:30:
         b9:8f:47:3e:40:80:32:08:1d:af:e1:c7:c5:f2:d1:53:6d:26:
         29:7d:45:9e:ad:d3:03:2c:8f:32:b7:d2:89:37:eb:63:0a:c1:
         32:36:7c:3f:88:03:6d:40:77:fa:cc:f6:f3:92:be:1f:1e:c4:
         43:02:25:4f:46:4e:e0:70:39:43:36:4d:38:c2:18:30:22:90:
         00:41:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----