Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Mlgt/0/AS204508.asa
File:                     AS204508.asa (raw, json)
Hash identifier:          VoDAGOi1ILCASEPuwA9YHFDunAr3V/ispLASfemsOno=
Subject key identifier:   BE:FC:8F:49:5A:06:9A:A3:F9:8F:51:32:64:F5:C3:B6:37:8B:4B:56
Certificate issuer:       /CN=2b9ff00d2bc32dfe3323e9343833022b0bd6670b
Certificate serial:       0F09EE1397B139AEB32D70B95794C420D37D16A3
Authority key identifier: 2B:9F:F0:0D:2B:C3:2D:FE:33:23:E9:34:38:33:02:2B:0B:D6:67:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5_wDSvDLf4zI-k0ODMCKwvWZws.cer
Subject info access:      rsync://rpki.co/repo/Mlgt/0/AS204508.asa
Signing time:             Tue 25 Apr 2023 18:17:18 +0000
ASPA not before:          Tue 25 Apr 2023 18:12:18 +0000
ASPA not after:           Tue 23 Apr 2024 18:17:18 +0000
Customer ASID:            204508
Provider set:             AS: 6939
                          AS: 29632
                          AS: 34872
                          AS: 34927
                          AS: 38230
                          AS: 41051
                          AS: 50058
                          AS: 60326
                          AS: 200105
                          AS: 208753
                          AS: 210633
                          AS: 211411
                          AS: 212271

Validation:               OK
Signature path:           rsync://rpki.co/repo/Mlgt/0/2B9FF00D2BC32DFE3323E9343833022B0BD6670B.crl
                          rsync://rpki.co/repo/Mlgt/0/2B9FF00D2BC32DFE3323E9343833022B0BD6670B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5_wDSvDLf4zI-k0ODMCKwvWZws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 06:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:09:ee:13:97:b1:39:ae:b3:2d:70:b9:57:94:c4:20:d3:7d:16:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b9ff00d2bc32dfe3323e9343833022b0bd6670b
        Validity
            Not Before: Apr 25 18:12:18 2023 GMT
            Not After : Apr 23 18:17:18 2024 GMT
        Subject: CN=BEFC8F495A069AA3F98F513264F5C3B6378B4B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:88:a0:03:60:39:9c:e9:6d:aa:c0:ee:0b:
                    46:72:84:f1:5e:55:c9:20:4d:96:82:85:d1:fc:12:
                    1e:78:d2:85:7d:89:99:5c:18:ce:7f:9b:0f:14:be:
                    dc:98:e8:a7:a8:79:5a:ed:9c:6e:e8:b7:16:f2:13:
                    f2:8f:36:c2:5f:ef:57:0b:a5:f9:7c:de:27:02:35:
                    19:09:10:45:92:57:15:74:88:c3:47:df:70:eb:06:
                    8b:ca:92:17:68:30:61:0e:1e:47:43:97:22:0d:c0:
                    32:d9:bc:b3:c0:84:ea:18:50:93:6c:a4:b3:6f:63:
                    85:b6:23:1e:62:68:24:fc:bf:89:0c:1f:dd:ff:fa:
                    53:4c:e1:77:e9:a8:b6:9b:3b:51:42:14:a1:13:bc:
                    02:25:fd:ad:59:0c:98:cf:43:ef:59:4a:4e:79:27:
                    bc:83:aa:cd:de:1a:a5:31:f9:d4:2a:1a:e9:e3:04:
                    dd:e4:30:2b:ac:21:ed:e4:01:f1:5f:d3:25:9a:a2:
                    28:ce:88:79:a8:eb:ab:8b:d8:0d:75:1a:9e:b0:dc:
                    65:21:f6:4b:f6:a6:79:b4:ab:28:5f:b3:ee:8c:c2:
                    ed:e4:1c:21:c0:8b:74:55:05:a7:c0:93:4d:25:d1:
                    d7:0c:28:9b:f2:8a:64:f6:dc:8e:6d:14:58:0c:17:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BE:FC:8F:49:5A:06:9A:A3:F9:8F:51:32:64:F5:C3:B6:37:8B:4B:56
            X509v3 Authority Key Identifier: 
                keyid:2B:9F:F0:0D:2B:C3:2D:FE:33:23:E9:34:38:33:02:2B:0B:D6:67:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/Mlgt/0/2B9FF00D2BC32DFE3323E9343833022B0BD6670B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5_wDSvDLf4zI-k0ODMCKwvWZws.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/Mlgt/0/AS204508.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204508

    Signature Algorithm: sha256WithRSAEncryption
         0c:61:e4:66:13:8f:4e:48:3c:91:55:9a:6b:25:7e:ae:a5:a3:
         83:0b:9e:7d:9e:f2:6d:45:e0:75:be:9b:ba:61:81:35:ba:19:
         f7:d6:0f:9a:3d:ee:19:5d:71:5d:ec:16:f6:59:86:56:56:3c:
         37:8c:69:e6:c8:bc:e9:cd:df:46:47:6d:57:f6:26:b1:94:e3:
         cf:26:78:56:59:12:b4:e8:84:30:df:64:18:3d:a8:69:e8:fb:
         68:7e:a0:fd:b6:64:5c:58:cf:81:fb:54:96:3e:84:6e:d5:c6:
         4b:d4:45:e3:19:8e:46:15:76:95:75:c9:21:f2:84:b8:4c:16:
         04:4e:a0:76:8d:7c:06:5a:8f:0a:4d:e2:90:de:b5:69:f2:3e:
         35:bc:16:e2:88:37:93:9b:c8:a5:40:a6:d2:cb:52:f1:0b:c7:
         ab:22:70:63:8b:84:87:22:c7:17:6f:de:c7:75:38:24:93:57:
         92:73:38:bb:fc:f5:7b:a5:0b:de:68:1a:8a:c9:26:3a:78:49:
         ee:1f:83:18:3b:c7:38:96:d0:8f:c5:b1:d8:06:24:ad:eb:9c:
         b2:a1:e2:f8:04:d7:d6:b0:95:60:6e:25:7b:fb:64:3f:64:c8:
         95:2c:48:2d:be:b1:b1:23:2e:b9:85:f0:0e:da:66:8a:39:b9:
         1a:ef:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----