Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/bDEqnQyVqJJZee-bPxJqsi9H-hY.asa
File:                     bDEqnQyVqJJZee-bPxJqsi9H-hY.asa (raw, json)
Hash identifier:          uB4jimVg9AJug1vowzFw3i0rrWs1dHC24k4kx0MdyIQ=
Subject key identifier:   6C:31:2A:9D:0C:95:A8:92:59:79:EF:9B:3F:12:6A:B2:2F:47:FA:16
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       01A0F93D0065F90018FBEDBFA72772E2D58D
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/bDEqnQyVqJJZee-bPxJqsi9H-hY.asa
Signing time:             Thu 01 Oct 2026 20:51:59 +0000
ASPA not before:          Thu 01 Oct 2026 20:51:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202032
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3356
                          AS: 5398
                          AS: 6730
                          AS: 6939
                          AS: 8220
                          AS: 13335
                          AS: 43141
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 17:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:3d:00:65:f9:00:18:fb:ed:bf:a7:27:72:e2:d5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: Oct  1 20:51:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c312a9d0c95a8925979ef9b3f126ab22f47fa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:2b:cf:17:01:d2:5a:80:bc:c7:98:c8:3b:
                    5a:d8:0a:85:18:c9:9b:43:69:69:72:59:4b:31:14:
                    8a:08:0c:b7:d0:77:b8:b1:9d:1d:94:c6:49:a4:d2:
                    c8:63:00:67:6b:dc:d1:43:3e:de:b0:b0:63:fd:a8:
                    d7:69:b8:47:be:f1:60:85:f8:ee:bc:fe:8c:55:4a:
                    c4:4b:2b:b7:e8:10:2c:28:ce:c3:26:7d:18:5f:27:
                    22:6b:ac:98:45:1a:be:75:e2:8c:1f:23:2f:25:01:
                    a3:87:9c:72:a3:90:a0:b8:03:9d:9c:77:8a:ce:5b:
                    1c:02:b0:5e:57:9c:62:2c:c0:c2:9d:d6:8a:ca:9a:
                    79:81:b7:86:91:e8:f1:a6:fe:72:3a:b1:35:27:b6:
                    85:01:fc:e3:4a:12:fb:df:6f:30:d3:69:a3:7d:75:
                    dc:8e:62:0d:42:b7:32:b6:ac:5a:0e:5a:81:2d:fe:
                    4c:bf:03:ee:69:8e:14:ad:4f:29:fc:ed:9a:d2:9e:
                    bf:a0:37:48:9e:6e:87:e5:f3:a9:35:90:62:fa:79:
                    5c:2b:f0:1d:48:17:f7:65:8f:77:74:ed:68:17:75:
                    79:d6:76:ee:e1:9b:42:f8:b5:bd:f7:93:7d:99:56:
                    5b:cc:b0:c0:c8:3f:05:4e:97:18:e3:f5:f7:60:be:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:31:2A:9D:0C:95:A8:92:59:79:EF:9B:3F:12:6A:B2:2F:47:FA:16
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/bDEqnQyVqJJZee-bPxJqsi9H-hY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202032

    Signature Algorithm: sha256WithRSAEncryption
         b3:77:4c:b0:0c:b8:47:96:20:e0:57:c7:e5:77:0d:ac:63:69:
         22:55:4b:99:b6:7d:60:c2:9b:c0:96:23:35:e9:22:c8:d0:25:
         12:a5:f4:1b:ab:2b:77:01:26:b8:86:40:3b:d6:6a:ea:6a:c5:
         28:fe:20:7c:08:2b:d3:09:54:bb:d5:76:76:7c:9e:07:ff:69:
         d3:a2:8d:97:ea:5e:36:c3:77:d2:c6:9b:44:b8:e9:95:ed:82:
         7d:78:16:76:20:d8:08:ea:57:92:0b:4c:94:cd:f5:cd:e3:00:
         9c:71:9f:a7:45:fa:8a:1c:a9:ae:f7:3f:bf:8b:f4:7a:29:77:
         be:b7:28:94:03:84:ed:cd:01:2f:22:ea:21:c4:5c:63:ae:05:
         8e:29:b3:5d:c5:7a:2c:dd:e7:59:48:8b:0e:1b:30:af:57:16:
         13:0d:f6:90:91:97:fc:0c:bb:75:9b:c8:4a:d7:62:d0:f8:75:
         33:4b:66:8c:6d:5c:1c:14:da:52:5f:38:40:4a:fa:9a:f9:a7:
         07:07:a9:6e:a7:dd:cb:78:ab:59:4a:52:d3:02:a3:e0:ef:ec:
         80:3e:1e:c2:45:f3:5a:8d:ed:43:b9:09:73:97:4e:01:42:f1:
         cc:e1:8f:24:7f:6e:5f:75:f7:a9:c0:60:96:7c:87:78:b8:25:
         78:19:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:17:02 2026 by rpki-client