Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/k0f1TYUAOCLMgb_RiL3I816hr7I.asa
File:                     k0f1TYUAOCLMgb_RiL3I816hr7I.asa (raw, json)
Hash identifier:          cf8lnGdUUBdUAtIHmgXJi66ub4X+3/IB4t0h70mATzs=
Subject key identifier:   93:47:F5:4D:85:00:38:22:CC:81:BF:D1:88:BD:C8:F3:5E:A1:AF:B2
Certificate issuer:       /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial:       019E2A3D8B4CB3F490346FAAFCFB7C804703
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/k0f1TYUAOCLMgb_RiL3I816hr7I.asa
Signing time:             Fri 15 May 2026 06:05:36 +0000
ASPA not before:          Fri 15 May 2026 06:05:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216198
Providers:                AS: 6939
                          AS: 18040
                          AS: 52025
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:3d:8b:4c:b3:f4:90:34:6f:aa:fc:fb:7c:80:47:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
        Validity
            Not Before: May 15 06:05:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9347f54d85003822cc81bfd188bdc8f35ea1afb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:90:37:76:be:11:1c:b9:2e:49:a5:ef:cb:
                    22:96:2c:55:9c:cc:bd:4d:51:3e:49:48:90:0d:b4:
                    59:8d:ef:c8:ae:0f:15:7e:de:7a:7a:e4:f9:7f:7d:
                    1a:8d:02:cb:66:64:62:e8:66:eb:d5:77:ce:23:30:
                    fc:6f:f8:31:a2:e4:22:7e:3d:f9:5c:77:da:00:2c:
                    8c:56:35:2a:5c:c8:f2:91:e2:ee:14:60:2a:9e:dc:
                    fa:c7:a8:f7:62:51:46:40:4f:72:90:fa:95:59:4b:
                    55:15:39:a5:ef:ca:7c:a2:f4:1b:eb:e8:a9:d7:13:
                    ad:08:d1:6b:e1:23:06:2b:03:f5:92:82:68:81:d8:
                    9d:0e:c0:a8:69:86:3c:10:dd:3e:15:81:7c:ac:50:
                    4d:2b:cc:d9:36:55:34:26:f4:a4:30:fd:a9:13:2b:
                    1c:3e:7f:7f:63:21:b8:ac:93:30:60:19:74:de:6a:
                    f1:ee:71:b1:3c:08:a3:86:3d:28:29:76:f8:80:30:
                    b1:61:0e:b5:b1:fd:1e:27:46:ea:10:7d:81:9f:6c:
                    e3:bb:33:39:ae:46:60:29:a0:95:2d:a2:3c:ec:9a:
                    64:61:7e:44:71:91:53:e7:b1:ed:23:9c:a4:24:bc:
                    e4:b9:10:90:cc:74:42:59:50:74:d0:1b:61:47:51:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:47:F5:4D:85:00:38:22:CC:81:BF:D1:88:BD:C8:F3:5E:A1:AF:B2
            X509v3 Authority Key Identifier:
                keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/k0f1TYUAOCLMgb_RiL3I816hr7I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216198

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:69:1a:eb:09:a3:13:0e:bd:26:3c:37:5d:13:75:46:4b:
         5f:94:bc:76:97:83:d4:9e:a4:1a:bb:8e:f8:77:14:50:7b:95:
         89:f3:c1:12:c6:13:d7:08:f8:56:11:ad:7f:f2:54:a0:3a:5e:
         92:ae:08:d9:15:65:d4:52:75:b6:6d:2e:b2:8e:a2:29:9c:9e:
         6e:39:f7:66:c7:46:3c:d0:f3:f6:9c:3b:9a:a7:f5:e7:4f:53:
         36:e2:69:0e:07:ba:19:af:09:2f:7f:92:4b:df:39:f5:d6:42:
         3f:3e:2c:20:82:38:d3:7f:8a:d3:bc:2c:bd:70:44:a1:c6:bc:
         4b:39:0f:78:b5:9b:82:cc:5a:94:9f:d7:6b:16:26:84:05:80:
         9f:ca:1a:1b:69:ad:f3:c7:14:d9:7a:5d:fc:f3:bd:91:24:1b:
         43:93:2e:f1:e1:23:61:0c:e5:d3:92:af:d3:bc:fd:58:97:53:
         88:10:8b:93:ba:f1:f8:16:62:78:75:03:e9:2c:2f:f9:83:f1:
         b7:b5:40:99:e7:90:01:70:6a:66:d8:83:59:21:1c:47:ad:a8:
         97:77:64:0b:f8:1a:74:f5:80:34:13:f7:13:b1:7e:3c:63:c8:
         1d:f9:e9:a4:3a:ac:04:63:a8:4d:a5:40:d8:01:7e:38:be:c5:
         0f:a3:84:19
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4qPYtMs/SQNG+q/Pt8gEcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTZhOGViYjAxMTExOWIyZjY5NTMyN2ZiMTZlNTFmODg3
MDQ0NzkwHhcNMjYwNTE1MDYwNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzQ3ZjU0ZDg1MDAzODIyY2M4MWJmZDE4OGJkYzhmMzVlYTFhZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7CQN3a+ERy5Lkml78silixVnMy9
TVE+SUiQDbRZje/Irg8Vft56euT5f30ajQLLZmRi6Gbr1XfOIzD8b/gxouQifj35
XHfaACyMVjUqXMjykeLuFGAqntz6x6j3YlFGQE9ykPqVWUtVFTml78p8ovQb6+ip
1xOtCNFr4SMGKwP1koJogdidDsCoaYY8EN0+FYF8rFBNK8zZNlU0JvSkMP2pEysc
Pn9/YyG4rJMwYBl03mrx7nGxPAijhj0oKXb4gDCxYQ61sf0eJ0bqEH2Bn2zjuzM5
rkZgKaCVLaI87JpkYX5EcZFT57HtI5ykJLzkuRCQzHRCWVB00BthR1FVkQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJNH9U2FADgizIG/0Yi9yPNeoa+yMB8GA1UdIwQY
MBaAFGYWqOuwERGbL2lTJ/sW5R+IcER5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEt
ZWQzZDI3MDU1MDIwLzEvazBmMVRZVUFPQ0xNZ2JfUmlMM0k4MTZocjdJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEtZWQzZDI3MDU1MDIw
LzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNMhjANBgkqhkiG
9w0BAQsFAAOCAQEAKvppGusJoxMOvSY8N10TdUZLX5S8dpeD1J6kGruO+HcUUHuV
ifPBEsYT1wj4VhGtf/JUoDpekq4I2RVl1FJ1tm0uso6iKZyebjn3ZsdGPNDz9pw7
mqf1509TNuJpDge6Ga8JL3+SS9859dZCPz4sIII403+K07wsvXBEoca8SzkPeLWb
gsxalJ/XaxYmhAWAn8oaG2mt88cU2Xpd/PO9kSQbQ5Mu8eEjYQzl05Kv07z9WJdT
iBCLk7rx+BZieHUD6Swv+YPxt7VAmeeQAXBqZtiDWSEcR62ol3dkC/gadPWANBP3
E7F+PGPIHfnppDqsBGOoTaVA2AF+OL7FD6OEGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:41:32 2026 by rpki-client