Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/SzMzAMGR1n44l9wjSMiDkP_2u8k.asa
File:                     SzMzAMGR1n44l9wjSMiDkP_2u8k.asa (raw, json)
Hash identifier:          /kYodvA9ywSCYdFNl7M0UF2fB5etYv2Czg5PZb60ur4=
Subject key identifier:   4B:33:33:00:C1:91:D6:7E:38:97:DC:23:48:C8:83:90:FF:F6:BB:C9
Certificate issuer:       /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial:       019FEC47B905B365C337C7A910ABAE3FCED8
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/SzMzAMGR1n44l9wjSMiDkP_2u8k.asa
Signing time:             Mon 10 Aug 2026 15:25:51 +0000
ASPA not before:          Mon 10 Aug 2026 15:25:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204647
Providers:                AS: 6823
                          AS: 12735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ec:47:b9:05:b3:65:c3:37:c7:a9:10:ab:ae:3f:ce:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
        Validity
            Not Before: Aug 10 15:25:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b333300c191d67e3897dc2348c88390fff6bbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:0b:79:b3:f7:36:57:62:c9:6b:99:74:b1:
                    5c:81:21:92:5a:3e:91:a4:df:42:7c:64:b1:63:9e:
                    d2:18:91:77:02:1b:47:61:72:2c:91:0f:0e:5d:e6:
                    a2:08:58:26:fa:0c:4a:3d:0c:60:aa:e4:67:b5:67:
                    b5:df:9a:ff:3b:39:ba:69:47:43:02:c9:26:0b:d5:
                    77:c9:30:15:46:78:a8:a0:8c:5a:d0:ac:8e:1b:f1:
                    d3:1b:9b:ae:5a:5f:43:24:98:97:1e:88:17:e3:b2:
                    6d:6f:04:0c:41:81:d8:3b:f1:6b:dd:90:55:d4:ee:
                    4f:83:6c:28:f9:7a:84:d7:70:4e:bf:d0:ca:4d:d1:
                    24:3c:6c:ea:3f:a4:20:90:fe:63:69:00:cc:08:83:
                    82:fb:3e:c8:6a:dc:11:21:b4:0e:27:ea:20:cd:ba:
                    ad:22:fa:49:69:08:77:59:e4:2a:1d:de:d2:9e:cc:
                    5d:58:88:b1:06:da:3d:c2:86:6a:a1:f9:9b:82:08:
                    1b:78:fc:34:85:8d:c4:ec:33:a8:6d:d4:20:7a:9b:
                    c7:c4:eb:4e:2b:9b:09:38:13:72:a3:d7:ee:5d:fa:
                    57:c8:3e:a5:b1:06:cd:e4:f5:2f:27:37:f9:54:ec:
                    b1:82:52:3d:89:97:84:3f:12:93:a6:a4:d3:d0:67:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:33:00:C1:91:D6:7E:38:97:DC:23:48:C8:83:90:FF:F6:BB:C9
            X509v3 Authority Key Identifier:
                keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/SzMzAMGR1n44l9wjSMiDkP_2u8k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204647

    Signature Algorithm: sha256WithRSAEncryption
         77:91:73:48:37:74:a8:db:39:a4:65:41:df:a6:59:8a:d9:7c:
         65:36:77:d4:64:26:38:cc:17:fa:09:09:11:eb:35:70:23:b9:
         69:d1:c0:28:f9:1d:86:b4:41:a1:c6:44:c4:2e:87:df:5b:d0:
         61:3d:c1:92:49:52:10:ec:1e:69:9b:8c:15:b1:ed:28:a7:84:
         45:90:5c:53:91:f2:d3:a6:d5:4c:11:9a:b9:82:17:c1:3c:da:
         55:2a:8e:b4:a4:7a:78:1f:ec:ee:ff:c7:14:a1:1b:3e:43:53:
         66:46:40:fd:8a:42:1b:31:2c:5f:b7:9f:8c:16:14:f0:b6:ec:
         18:1e:da:ca:ef:7a:4b:1d:ac:2c:71:85:5b:43:c5:76:07:ce:
         57:02:2e:88:22:47:1c:0b:d4:d9:2a:ba:f0:7f:05:98:7c:03:
         6a:8f:ed:1b:33:c6:e5:9f:31:a4:d8:24:57:57:31:7a:0f:11:
         da:c5:43:dc:25:d1:dc:53:2b:20:38:c4:9f:fd:53:e6:48:6f:
         4b:a5:75:1c:36:6a:87:1d:d6:7c:d5:5c:8a:dc:e0:be:d6:ae:
         f1:5e:1c:db:3b:4a:cb:fd:71:76:94:ad:b3:e9:ef:4a:3b:30:
         22:b3:f0:e2:a8:30:25:68:28:d8:59:38:cf:69:67:66:8f:a4:
         cf:83:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:42 2026 by rpki-client