Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/16Z0OkWb0Dur5XwCN5u7vEudWIw.asa
File:                     16Z0OkWb0Dur5XwCN5u7vEudWIw.asa (raw, json)
Hash identifier:          79o/CH9AjYATd4cRUHGgcd4zfje42HRxj+qIvXvEvq8=
Subject key identifier:   D7:A6:74:3A:45:9B:D0:3B:AB:E5:7C:02:37:9B:BB:BC:4B:9D:58:8C
Certificate issuer:       /CN=cabf1934ffe9bf9ce351572ed2eb8207cb555358
Certificate serial:       01A133AF253CE9E30D1C68CC56C8EF9CF550
Authority key identifier: CA:BF:19:34:FF:E9:BF:9C:E3:51:57:2E:D2:EB:82:07:CB:55:53:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/16Z0OkWb0Dur5XwCN5u7vEudWIw.asa
Signing time:             Tue 13 Oct 2026 05:14:38 +0000
ASPA not before:          Tue 13 Oct 2026 05:14:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203154
Providers:                AS: 49581
                          AS: 58212
                          AS: 60068
                          AS: 62255
                          AS: 213229
                          AS: 215439
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:af:25:3c:e9:e3:0d:1c:68:cc:56:c8:ef:9c:f5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabf1934ffe9bf9ce351572ed2eb8207cb555358
        Validity
            Not Before: Oct 13 05:14:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7a6743a459bd03babe57c02379bbbbc4b9d588c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:61:9b:bd:61:5d:09:93:d9:c4:35:95:d9:
                    cb:be:a6:7a:b7:ad:3b:36:53:48:c4:ee:9b:8a:9b:
                    aa:a6:a0:c0:8c:d6:b3:f1:4a:f4:be:fe:d9:00:7e:
                    bb:07:f4:d3:38:d9:ec:1c:22:63:d2:0b:fa:c6:80:
                    12:3e:9a:70:91:71:54:11:a0:2f:12:d5:43:4e:b2:
                    8a:a4:78:d6:62:ef:6c:c6:90:09:31:2f:57:e1:e6:
                    11:68:a3:3b:5e:00:7d:4a:3c:83:99:9a:73:d2:47:
                    a9:50:b3:ea:5a:79:ca:78:e4:6a:2f:c9:af:29:76:
                    6f:5e:ca:69:24:7d:b2:4e:1e:38:b0:82:5d:db:90:
                    8f:35:ad:d2:5e:5d:5f:e9:5e:c0:b8:ec:a9:9c:72:
                    5e:3b:a8:17:45:73:f8:cf:41:d3:92:2f:01:03:9b:
                    f6:cf:72:42:da:7a:22:6e:25:38:89:a5:70:a5:5f:
                    3e:e2:35:7c:08:0d:45:2d:3a:c4:67:11:43:1e:2a:
                    1a:ec:1d:f3:3a:a7:5c:c5:6c:bc:22:07:2f:50:06:
                    04:c5:c0:50:2a:cf:05:85:74:1e:06:b1:a8:3f:fa:
                    9e:b5:a7:c1:1e:95:60:fb:c7:06:ea:8d:f5:d8:e8:
                    e7:42:d7:8a:73:a4:33:eb:78:f1:46:a5:3d:18:37:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:74:3A:45:9B:D0:3B:AB:E5:7C:02:37:9B:BB:BC:4B:9D:58:8C
            X509v3 Authority Key Identifier:
                keyid:CA:BF:19:34:FF:E9:BF:9C:E3:51:57:2E:D2:EB:82:07:CB:55:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/16Z0OkWb0Dur5XwCN5u7vEudWIw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203154

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:eb:1b:8e:45:83:cb:21:6a:bc:5f:63:6a:70:bd:cb:42:
         43:c9:22:93:9c:96:bd:c1:6c:48:d7:90:fa:4b:5f:29:77:fa:
         18:62:25:01:b2:7b:4f:f1:6f:10:89:df:99:23:6a:21:37:83:
         09:7b:22:74:e6:fc:9d:1a:82:a3:88:02:e5:71:7c:3a:20:c4:
         2e:1d:03:7e:66:35:34:b0:5f:e0:a8:cc:02:6a:9e:3b:e3:72:
         eb:c4:db:5b:61:82:af:c6:a8:ae:57:46:7c:0d:72:88:e2:10:
         61:59:1e:4f:08:36:68:c4:57:12:db:9a:c9:8e:df:f6:df:06:
         e0:f2:eb:a6:ab:df:91:82:2f:7b:99:54:d2:9e:8e:60:d1:ad:
         12:4c:7a:c0:01:b6:85:69:4a:54:eb:47:50:47:7e:6f:fb:58:
         4b:f8:f5:35:55:87:78:2f:cb:35:b6:49:40:50:c4:36:25:a1:
         25:5f:c7:1f:fd:90:8d:70:80:7c:d9:46:d0:80:40:db:aa:2f:
         e5:4d:db:e0:72:6a:c5:2d:4e:35:72:37:80:e7:6d:8a:0b:3c:
         72:12:b2:f6:27:07:fe:67:e2:dd:9a:29:35:5d:55:4a:fc:5d:
         05:47:6e:99:11:55:b3:2e:1a:1f:8d:98:90:a9:d9:2d:b7:cb:
         1c:d6:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 00:53:33 2026 by rpki-client