Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/pt-fhKQ2sRRBx8lpcYMYt8s_8d4.asa
File:                     pt-fhKQ2sRRBx8lpcYMYt8s_8d4.asa (raw, json)
Hash identifier:          61S3nZzWWm+wG81cqTpRHAavuHF+5x+9jg8cy1Dq+A0=
Subject key identifier:   A6:DF:9F:84:A4:36:B1:14:41:C7:C9:69:71:83:18:B7:CB:3F:F1:DE
Certificate issuer:       /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial:       019EFD3E89683078647802B27EDB9E51C5C8
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/pt-fhKQ2sRRBx8lpcYMYt8s_8d4.asa
Signing time:             Thu 25 Jun 2026 05:26:34 +0000
ASPA not before:          Thu 25 Jun 2026 05:26:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202986
Providers:                AS: 20473
                          AS: 56655
                          AS: 152900
                          AS: 200461
                          AS: 215467
                          AS: 394177
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 23:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:3e:89:68:30:78:64:78:02:b2:7e:db:9e:51:c5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
        Validity
            Not Before: Jun 25 05:26:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6df9f84a436b11441c7c969718318b7cb3ff1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:ed:3e:48:7c:f1:03:3b:74:23:88:d7:66:
                    dd:b6:5e:9d:33:9b:86:c7:fb:00:0c:f9:9e:48:87:
                    09:77:98:2a:47:be:7c:c7:e9:c2:02:55:76:71:e9:
                    6d:25:11:2f:21:e0:fa:c6:4f:8b:2b:b4:86:70:8f:
                    8d:44:da:cf:a5:33:cf:82:2a:d0:39:90:bd:39:c9:
                    56:90:f0:9f:f4:12:5b:4b:e7:40:6d:ed:70:b4:b5:
                    fd:1e:39:f3:68:df:28:ae:6a:0e:0c:7b:63:dc:90:
                    9d:85:b2:40:68:14:a5:c0:8c:ed:34:19:65:52:2f:
                    0f:4d:0f:01:d0:c7:8f:4a:d9:61:5e:52:4e:1d:6f:
                    11:ac:f3:9c:4b:12:38:af:1f:12:83:be:21:dd:8b:
                    1b:45:27:83:26:09:a3:4a:e8:3a:3e:d3:96:57:25:
                    ef:38:23:a9:10:c2:7d:2f:1f:50:40:22:8a:cc:c8:
                    3b:09:aa:9b:fc:a7:46:a5:79:e5:12:66:d8:1a:a5:
                    b1:8c:7e:76:f2:ba:5a:f4:de:be:32:b8:38:fe:7a:
                    f8:21:48:73:02:31:9b:6b:df:33:dc:ea:fd:54:c7:
                    da:ae:9d:75:8f:7b:6e:d6:a6:9b:3e:02:9a:4a:bc:
                    57:53:6f:0b:92:06:5b:e5:f9:74:da:28:da:08:01:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:9F:84:A4:36:B1:14:41:C7:C9:69:71:83:18:B7:CB:3F:F1:DE
            X509v3 Authority Key Identifier:
                keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/pt-fhKQ2sRRBx8lpcYMYt8s_8d4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202986

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:d5:5f:65:aa:e0:d7:c5:40:c2:16:2a:f3:69:86:d6:14:
         44:5c:9f:07:fb:81:74:dc:b1:71:b5:e4:d4:22:c0:b7:17:27:
         e4:fa:c1:24:4d:a5:8f:02:30:6f:ca:05:de:e6:ce:56:47:79:
         68:d9:95:40:5d:47:fd:f4:e4:90:0b:3e:85:4d:08:ff:e6:3b:
         2f:9a:cc:82:e4:17:cd:a5:0b:7e:91:c6:cd:c2:55:23:66:20:
         6e:c0:96:34:92:aa:e0:65:ae:d4:1b:b6:e2:38:67:22:82:22:
         28:40:66:5f:6b:37:94:64:da:a3:7d:75:b5:cc:b8:06:88:e4:
         53:94:2c:62:cb:9a:91:d8:de:49:e1:84:3c:92:9f:d7:f0:51:
         c5:6c:e5:58:bd:35:13:6a:1e:d5:bc:48:df:35:99:76:2a:38:
         1d:2b:50:7f:d5:40:f0:c5:da:54:75:d1:aa:96:7f:38:c9:d0:
         32:98:40:e9:6d:9a:cf:7a:dd:b7:d1:2f:ef:60:5f:d2:21:6f:
         63:18:ad:f4:82:16:8e:14:b3:2f:69:6c:38:4e:24:d9:6a:1f:
         41:b8:70:58:76:08:59:d6:3c:37:c3:a3:e2:69:68:d8:db:06:
         e6:d7:6e:4d:de:a5:4c:8d:3d:60:df:b6:63:5e:12:9f:cf:3d:
         28:09:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:55 2026 by rpki-client