Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/DSTpj0lvBXHGwwYzlFuWhpm9ZsI.asa
File:                     DSTpj0lvBXHGwwYzlFuWhpm9ZsI.asa (raw, json)
Hash identifier:          n8ZpDYfPuN5skzEakH1VK23lQlhNp9dsMw0LKFT/2tM=
Subject key identifier:   0D:24:E9:8F:49:6F:05:71:C6:C3:06:33:94:5B:96:86:99:BD:66:C2
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       019CC0B13D69D178D58CA0BCE0085BA10A98
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/DSTpj0lvBXHGwwYzlFuWhpm9ZsI.asa
Signing time:             Fri 06 Mar 2026 01:09:26 +0000
ASPA not before:          Fri 06 Mar 2026 01:09:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200819
Providers:                AS: 917
                          AS: 20473
                          AS: 21700
                          AS: 34872
                          AS: 34927
                          AS: 47272
                          AS: 52025
                          AS: 199829
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c0:b1:3d:69:d1:78:d5:8c:a0:bc:e0:08:5b:a1:0a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: Mar  6 01:09:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0d24e98f496f0571c6c30633945b968699bd66c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:40:b5:1d:f4:46:4e:00:3a:7d:dd:d8:cc:
                    a1:f4:c7:1f:1d:43:90:08:a2:46:f1:c7:36:9a:5e:
                    c2:55:e3:cc:79:ae:b3:bb:05:f5:71:d6:06:33:37:
                    dc:fc:fa:92:10:b9:bf:0c:e9:a9:ce:51:2d:06:00:
                    f2:ec:5a:9c:03:e8:37:b1:0a:09:c3:a6:76:b5:98:
                    28:72:5a:8c:9d:2e:88:97:27:6b:29:54:b8:4c:c1:
                    af:4b:79:35:67:7a:0b:11:88:35:ed:be:37:6d:52:
                    88:8f:c3:9d:95:93:b0:6b:28:17:92:5a:89:7c:d3:
                    bf:43:02:89:92:46:76:9f:0f:6c:3d:48:01:bb:97:
                    7e:2f:eb:d9:9f:9c:ee:f8:be:86:a0:df:c5:c9:2f:
                    e1:4b:bf:b7:0e:20:6b:5d:d6:a6:af:18:f6:6b:21:
                    56:87:f3:58:8e:be:d5:e5:d9:14:2a:f3:5a:d4:4a:
                    d5:8e:32:95:d3:68:43:ad:bb:78:1a:aa:0d:00:db:
                    6a:3e:36:e6:79:9c:cf:6c:2f:89:be:7e:26:c8:68:
                    c5:fe:8b:a9:30:ec:bf:b4:37:06:fc:3a:83:4e:f6:
                    57:c9:9e:4c:5e:71:39:ce:a2:f3:70:94:ac:c1:f7:
                    1b:54:9b:52:36:c8:02:a1:8c:b1:cc:bc:c9:42:c4:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:24:E9:8F:49:6F:05:71:C6:C3:06:33:94:5B:96:86:99:BD:66:C2
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/DSTpj0lvBXHGwwYzlFuWhpm9ZsI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200819

    Signature Algorithm: sha256WithRSAEncryption
         27:38:a9:93:63:61:85:06:9d:48:fe:c3:32:21:63:80:f8:96:
         4b:eb:c1:f3:db:29:d3:56:83:97:ba:0b:85:62:e6:53:fc:01:
         b7:09:85:38:3c:7c:41:04:07:5b:cd:cf:8e:a2:5d:9f:80:28:
         4d:bc:77:b9:6c:ce:8e:b4:5f:c7:a9:ad:a3:23:e4:76:02:29:
         05:f5:28:6e:f3:b8:13:9b:31:6a:bc:bd:31:cb:7f:8b:05:31:
         ed:5c:63:08:ef:ba:9d:4f:f6:95:cd:2f:a9:ec:2c:10:a8:ef:
         87:63:29:05:1c:7d:b8:f8:c9:fd:cc:b8:5c:79:cd:21:6b:5a:
         48:3b:2d:fe:78:51:c8:0e:ec:a2:57:61:2c:78:ec:14:ec:d7:
         16:af:80:88:5b:13:d6:2f:95:79:15:09:2f:98:ae:61:2f:1f:
         1d:f1:9c:0b:48:1e:cb:48:f9:46:5a:61:fa:d0:c2:b7:ce:1d:
         30:2b:f7:bb:70:08:d6:7a:09:e2:a8:fa:a7:7a:00:4d:c6:6f:
         16:c5:eb:12:c4:20:2e:31:32:cd:e8:bf:25:e0:bd:4c:17:db:
         72:cd:03:c1:df:bb:09:55:e0:b9:03:32:c1:a6:02:8d:b8:57:
         e0:46:58:7a:25:cf:13:90:c2:ce:0c:49:e5:c2:8e:d9:51:a4:
         9b:6e:0b:18
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzAsT1p0XjVjKC84AhboQqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjEwZmIxNjViMjdmOGFhNzYyMTkwOWViODM3OGFiMTZm
YjhkMGEwHhcNMjYwMzA2MDEwOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDI0ZTk4ZjQ5NmYwNTcxYzZjMzA2MzM5NDViOTY4Njk5YmQ2NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uFAtR30Rk4AOn3d2Myh9McfHUOQ
CKJG8cc2ml7CVePMea6zuwX1cdYGMzfc/PqSELm/DOmpzlEtBgDy7FqcA+g3sQoJ
w6Z2tZgoclqMnS6IlydrKVS4TMGvS3k1Z3oLEYg17b43bVKIj8OdlZOwaygXklqJ
fNO/QwKJkkZ2nw9sPUgBu5d+L+vZn5zu+L6GoN/FyS/hS7+3DiBrXdamrxj2ayFW
h/NYjr7V5dkUKvNa1ErVjjKV02hDrbt4GqoNANtqPjbmeZzPbC+Jvn4myGjF/oup
MOy/tDcG/DqDTvZXyZ5MXnE5zqLzcJSswfcbVJtSNsgCoYyxzLzJQsQv1wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFA0k6Y9JbwVxxsMGM5RbloaZvWbCMB8GA1UdIwQY
MBaAFL1hD7Flsn+Kp2IZCeuDeKsW+40KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldFUHNXV3lmNHFuWWhrSjY0TjRxeGI3alFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85MGFkYzUtNWM1MS00ZjkyLWIwZGMt
ODg5Mjk2OTE2MjAzLzEvRFNUcGowbHZCWEhHd3dZemxGdVdocG05WnNJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85MGFkYzUtNWM1MS00ZjkyLWIwZGMtODg5Mjk2OTE2MjAz
LzEvdldFUHNXV3lmNHFuWWhrSjY0TjRxeGI3alFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMQczANBgkqhkiG
9w0BAQsFAAOCAQEAJzipk2NhhQadSP7DMiFjgPiWS+vB89sp01aDl7oLhWLmU/wB
twmFODx8QQQHW83PjqJdn4AoTbx3uWzOjrRfx6mtoyPkdgIpBfUobvO4E5sxary9
Mct/iwUx7VxjCO+6nU/2lc0vqewsEKjvh2MpBRx9uPjJ/cy4XHnNIWtaSDst/nhR
yA7soldhLHjsFOzXFq+AiFsT1i+VeRUJL5iuYS8fHfGcC0gey0j5Rlph+tDCt84d
MCv3u3AI1noJ4qj6p3oATcZvFsXrEsQgLjEyzei/JeC9TBfbcs0Dwd+7CVXguQMy
waYCjbhX4EZYeiXPE5DCzgxJ5cKO2VGkm24LGA==
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:59 2026 by rpki-client