Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/BC8-gxQGaNtNuMGtT8eg-pMTJqM.asa
File:                     BC8-gxQGaNtNuMGtT8eg-pMTJqM.asa (raw, json)
Hash identifier:          NdaLJNEIEHtPW4J7gY+eYuCg/MLuqQfahpsv3r026to=
Subject key identifier:   04:2F:3E:83:14:06:68:DB:4D:B8:C1:AD:4F:C7:A0:FA:93:13:26:A3
Certificate issuer:       /CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Certificate serial:       01A0E96E49CE9F0C3A1BFBC8F7B7E60FCB20
Authority key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/BC8-gxQGaNtNuMGtT8eg-pMTJqM.asa
Signing time:             Mon 28 Sep 2026 19:11:54 +0000
ASPA not before:          Mon 28 Sep 2026 19:11:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41783
Providers:                AS: 16083
                          AS: 21453
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:6e:49:ce:9f:0c:3a:1b:fb:c8:f7:b7:e6:0f:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
        Validity
            Not Before: Sep 28 19:11:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=042f3e83140668db4db8c1ad4fc7a0fa931326a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:41:c4:27:38:3b:0b:cf:78:05:ff:fc:c6:
                    cf:e1:1d:c7:89:ed:bb:b8:62:c7:2f:98:76:b2:c7:
                    e8:08:41:9c:fc:c3:dd:d4:06:06:65:82:ac:a3:c4:
                    72:b6:be:f5:c6:6b:db:dc:24:db:c3:b5:fc:7d:2d:
                    26:d9:eb:4d:65:c2:e6:b1:ed:72:09:9b:0b:a3:44:
                    e9:17:fc:74:9c:31:85:f5:04:f5:22:29:ac:c5:7e:
                    d9:91:c6:5e:fe:14:d8:9f:bf:3e:40:61:87:87:a5:
                    b7:fe:e0:09:54:e2:ea:eb:8e:4e:ce:6b:e0:92:5e:
                    57:b3:36:2d:94:56:92:ba:5c:ed:5a:67:ed:01:3b:
                    bb:0c:fc:c6:36:06:8a:41:8f:8b:c0:10:e7:e2:1c:
                    f2:ec:85:db:f1:f2:30:ed:46:b5:61:77:f7:4b:7b:
                    8b:81:69:c2:ea:13:19:93:e5:1c:12:e5:e5:16:c6:
                    df:0a:f8:65:41:6b:40:6a:32:8d:47:7f:74:5e:c5:
                    60:0a:18:92:89:39:2e:98:32:43:a5:9d:b0:b4:3b:
                    f7:20:b9:95:62:03:2b:92:2c:2b:df:eb:12:e6:0b:
                    7d:37:ab:fa:f1:f2:6a:5c:c5:5c:6d:f7:8d:d6:1d:
                    bb:0a:b7:08:e6:d0:0f:47:23:ac:eb:6f:52:ff:c3:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2F:3E:83:14:06:68:DB:4D:B8:C1:AD:4F:C7:A0:FA:93:13:26:A3
            X509v3 Authority Key Identifier:
                keyid:0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/BC8-gxQGaNtNuMGtT8eg-pMTJqM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41783

    Signature Algorithm: sha256WithRSAEncryption
         c1:ac:a7:ee:f4:8f:5b:81:44:d2:90:7c:f6:21:ab:dd:53:15:
         5f:3e:67:7f:8a:8f:4c:58:41:1b:4d:d1:93:88:79:9b:d8:55:
         16:53:b9:20:fe:a1:72:81:f2:eb:30:00:e6:91:07:db:f1:fd:
         a4:90:14:ef:af:9e:3f:8c:6c:77:81:24:db:98:2b:47:04:93:
         98:8d:e1:fe:37:75:d9:f8:85:46:b2:02:ca:f0:bd:e5:9e:6c:
         90:7d:d7:bf:10:34:11:45:9c:c7:bf:23:b3:1d:a5:7b:e8:fb:
         36:eb:e9:04:16:12:7f:40:3e:33:fe:85:53:7a:29:1c:96:d9:
         97:61:8b:92:30:fc:91:d3:d7:fd:4e:b2:30:36:36:4b:0a:1e:
         14:da:89:27:f2:c9:ec:0f:0b:3b:f0:d7:9e:12:6e:4c:f7:4b:
         3a:67:13:f3:46:84:1a:88:d2:e4:d6:d2:44:f4:a6:fd:72:cb:
         9f:7d:85:51:18:d8:bf:fb:88:58:14:89:10:09:fc:12:15:6d:
         42:4a:44:d2:ff:84:07:77:a9:31:3e:97:aa:47:d9:14:e6:49:
         6e:14:42:23:55:8c:4e:8e:c2:26:dd:c5:fb:7c:ca:7a:b7:17:
         ca:f5:af:f9:2d:ce:22:35:d0:12:ab:ab:be:91:98:3f:ab:db:
         0a:fe:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:43 2026 by rpki-client