Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/CWf6fcBzm9Q5ZiIvKMmwAf8HrIo.asa
File:                     CWf6fcBzm9Q5ZiIvKMmwAf8HrIo.asa (raw, json)
Hash identifier:          MVNd7q/7pzzTEleYO0PY+F+hsu3N8Ak7dYRsANBQzbM=
Subject key identifier:   09:67:FA:7D:C0:73:9B:D4:39:66:22:2F:28:C9:B0:01:FF:07:AC:8A
Certificate issuer:       /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial:       019CED61B5BEE5A942BF992D18CEC8C93251
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/CWf6fcBzm9Q5ZiIvKMmwAf8HrIo.asa
Signing time:             Sat 14 Mar 2026 17:25:29 +0000
ASPA not before:          Sat 14 Mar 2026 17:25:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215842
Providers:                AS: 8283
                          AS: 34927
                          AS: 202585
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ed:61:b5:be:e5:a9:42:bf:99:2d:18:ce:c8:c9:32:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
        Validity
            Not Before: Mar 14 17:25:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0967fa7dc0739bd43966222f28c9b001ff07ac8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:88:7a:45:b8:0c:ee:6c:8c:61:d6:a4:3f:
                    d2:ec:2a:d2:a8:66:c6:fb:56:5a:3c:52:59:13:62:
                    18:b8:37:4a:7a:76:a3:6f:d5:87:35:ea:fe:a0:f4:
                    4e:4d:75:39:30:c6:15:8b:8c:1a:fd:e8:ea:04:4b:
                    0c:e0:75:6b:ef:72:2e:24:5f:7b:ec:46:f7:91:c9:
                    0d:39:08:84:07:08:67:6d:a7:75:65:49:91:f2:be:
                    0c:d3:28:f8:af:26:0b:1f:99:c6:e0:9c:2f:13:4b:
                    5b:ac:f7:04:e3:54:f1:3c:0c:c9:c9:bc:17:80:98:
                    c3:38:2d:82:75:e1:f2:08:ad:61:f0:29:47:85:3c:
                    71:7b:9e:37:9f:ae:25:4c:63:6e:7b:9e:c6:04:02:
                    0e:f6:04:ed:5e:88:3f:d6:f2:85:1d:d1:32:c1:c6:
                    0d:c6:b7:ed:fb:6d:fb:26:04:d7:4d:61:d1:38:ac:
                    c0:c9:d8:3d:4b:30:a0:e0:f8:ac:e3:3d:48:a4:e0:
                    a9:a7:4c:e4:35:91:ca:c4:aa:1f:f9:51:1f:fd:da:
                    4a:b7:72:f5:f6:e1:d0:16:bf:e3:5c:57:5b:a9:26:
                    db:07:b4:80:8a:7f:c3:b2:35:80:9c:36:02:8f:93:
                    e4:a4:f2:73:ba:74:fb:8c:72:0d:cb:eb:27:53:62:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:FA:7D:C0:73:9B:D4:39:66:22:2F:28:C9:B0:01:FF:07:AC:8A
            X509v3 Authority Key Identifier:
                keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/CWf6fcBzm9Q5ZiIvKMmwAf8HrIo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215842

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:c8:c5:f9:39:f4:37:a9:23:62:be:2f:c4:95:64:c6:ce:
         7b:7a:a5:63:b3:aa:e2:63:d4:6b:06:8a:ff:0f:08:8d:47:8f:
         01:fc:ff:3b:dc:f8:f4:53:2d:83:02:6b:ba:70:2f:f1:d1:cb:
         ba:7d:c4:bc:00:ea:55:5d:d8:77:11:3a:26:85:95:21:8f:c4:
         c3:d3:a7:c3:f7:29:f7:05:5a:6b:d3:55:04:32:58:0d:1a:1c:
         41:f4:71:cd:0a:73:b0:31:8d:ae:ca:ec:e4:1c:e7:0a:d8:f9:
         28:c6:5f:ee:92:d6:1b:07:57:76:44:f6:43:3c:94:f1:3d:c6:
         ca:7e:50:6e:27:e9:48:ae:4f:93:15:b7:df:f2:e0:4b:a7:00:
         6b:e5:25:1e:32:b9:83:9d:de:e9:01:a5:89:bf:13:69:09:78:
         82:ea:2a:f5:fd:3e:3e:2f:98:b7:de:6e:05:c3:c5:d2:28:e9:
         39:e9:e0:65:84:a6:f0:0a:22:12:c3:0a:7a:ef:70:bb:f4:ca:
         7e:aa:4a:f9:2f:7c:55:e8:d4:df:5b:2d:30:6e:44:65:82:67:
         b8:62:72:45:68:be:32:ba:d1:86:27:db:ae:a0:9e:5c:10:b3:
         de:af:f3:f3:f9:f9:04:a8:39:c9:e1:87:16:37:b4:bf:21:17:
         8d:79:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----