Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/apS4HDv_OJ_CGV6gCbN9cY-dceM.asa
File:                     apS4HDv_OJ_CGV6gCbN9cY-dceM.asa (raw, json)
Hash identifier:          dFb3bz8xURN3Dp6ICXR2SfE63pU3+IOgDtF/Br/pUhU=
Subject key identifier:   6A:94:B8:1C:3B:FF:38:9F:C2:19:5E:A0:09:B3:7D:71:8F:9D:71:E3
Certificate issuer:       /CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
Certificate serial:       01A0E21A5F6019CE5BC90CC7367376132BE5
Authority key identifier: F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/apS4HDv_OJ_CGV6gCbN9cY-dceM.asa
Signing time:             Sun 27 Sep 2026 09:02:54 +0000
ASPA not before:          Sun 27 Sep 2026 09:02:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212532
Providers:                AS: 20473
                          AS: 34927
                          AS: 44324
                          AS: 50131
                          AS: 53667
                          AS: 61138
                          AS: 142064
                          AS: 212895
                          AS: 399646
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:1a:5f:60:19:ce:5b:c9:0c:c7:36:73:76:13:2b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
        Validity
            Not Before: Sep 27 09:02:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a94b81c3bff389fc2195ea009b37d718f9d71e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:9d:09:03:3c:96:47:5f:db:59:fa:e1:d8:
                    c8:bc:42:51:f6:e0:39:c1:0c:e6:e0:3c:5a:ad:d0:
                    71:e8:85:cd:68:a4:82:69:44:28:c5:00:df:9e:0f:
                    ef:04:69:d9:b9:94:0a:0e:ad:da:44:af:bd:e7:d5:
                    6a:2d:c8:ae:3b:72:1d:26:d6:ac:08:01:67:a3:3c:
                    08:43:cc:24:7c:08:5c:59:4c:86:bc:a2:7c:24:95:
                    b7:a5:ca:e7:5f:ac:d5:e7:c5:92:d6:12:d3:7c:09:
                    55:ee:da:63:a2:cd:a3:2a:92:b1:88:98:7d:05:a5:
                    be:62:bb:3c:a1:82:09:5b:c1:16:52:97:d4:30:be:
                    d0:0b:0e:82:62:59:0a:3d:5f:db:6e:84:89:d0:38:
                    1f:ce:f2:70:e3:da:f1:31:b9:c5:9f:3c:0c:11:0a:
                    02:dd:38:bb:ca:3a:be:a9:bb:57:bd:23:d0:c9:02:
                    9a:d4:2f:87:cb:b8:4a:b3:61:e8:51:a2:69:bf:5d:
                    e2:4c:0f:f3:cb:8b:da:a2:b2:78:8e:b6:a4:2a:c9:
                    9b:67:5a:4d:cd:d9:34:6a:a1:f8:4f:1f:72:43:a6:
                    c9:10:4c:fa:bf:20:43:9e:ea:5c:c3:94:8a:60:ca:
                    04:3a:2d:d7:a1:9a:c3:86:10:4f:15:ec:96:ae:c8:
                    8b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:94:B8:1C:3B:FF:38:9F:C2:19:5E:A0:09:B3:7D:71:8F:9D:71:E3
            X509v3 Authority Key Identifier:
                keyid:F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/apS4HDv_OJ_CGV6gCbN9cY-dceM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212532

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:1a:1e:8d:2f:a9:6f:cb:29:ae:6f:54:51:19:ef:9d:1a:
         6e:98:e1:b3:3a:8a:90:bb:de:40:a7:3a:d6:65:76:c5:32:a4:
         72:2c:3f:86:f1:4a:f1:74:99:d4:ad:6a:3e:2a:d4:b6:b9:93:
         a6:3d:35:6d:6c:07:d7:d2:04:ac:a8:8f:f1:a4:ec:ee:d2:83:
         0f:85:6e:87:44:b0:16:e0:89:6f:a4:4b:51:93:1b:1f:dd:52:
         77:86:f2:0b:23:2b:dd:8c:20:28:ba:c1:e6:28:da:ee:c7:e1:
         e6:6c:96:07:51:96:58:44:ec:03:e7:4a:55:f5:b9:76:b8:d0:
         27:70:e6:58:46:50:18:b2:d7:c1:fa:b9:78:d7:a6:92:f7:e7:
         6c:1e:c2:54:dd:fb:83:c6:6c:ff:d2:d7:a1:a8:78:79:35:17:
         af:a5:3a:a7:93:b7:68:fd:77:80:bb:31:9f:91:27:bb:b4:58:
         bf:c5:c6:ab:4d:d7:25:c5:b4:ac:99:a6:58:30:2d:f1:6e:b6:
         da:58:6d:82:8e:97:4f:15:57:ec:3b:6c:8f:0f:ad:5a:02:5c:
         37:ff:b3:d0:f8:0c:07:3e:af:1a:03:e9:ee:11:e8:a9:a8:78:
         3d:e2:a8:6e:c7:4b:68:50:b5:b5:bd:be:61:ce:7c:28:db:89:
         89:b9:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:56:26 2026 by rpki-client