Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa
File:                     SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (raw, json)
Hash identifier:          +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=
Subject key identifier:   48:3F:A9:26:BE:2D:B5:40:5A:67:54:B6:D1:3C:F8:02:E0:7A:3F:52
Certificate issuer:       /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial:       019CC336AF6996B935C023052E0310D815CF
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa
Signing time:             Fri 06 Mar 2026 12:54:26 +0000
ASPA not before:          Fri 06 Mar 2026 12:54:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57860
Providers:                AS: 202914
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 21:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c3:36:af:69:96:b9:35:c0:23:05:2e:03:10:d8:15:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
        Validity
            Not Before: Mar  6 12:54:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=483fa926be2db5405a6754b6d13cf802e07a3f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:28:8c:3d:76:28:24:99:35:3b:70:18:45:
                    03:24:9a:cb:d9:c1:33:a8:9f:75:12:a9:0a:5f:9a:
                    2c:29:59:ee:5f:4e:c0:a6:c6:65:e3:1c:00:1d:4c:
                    7a:2b:7b:ab:12:27:c4:c2:58:e8:40:9a:e4:7c:52:
                    ee:72:ee:4f:1a:4e:46:98:d6:1a:48:5f:94:4d:dc:
                    55:ea:78:7e:de:cc:7d:9b:69:1f:7d:d6:b0:64:bb:
                    1c:3c:a8:6d:2d:d3:cf:e3:88:54:d5:01:75:c5:ed:
                    c2:4c:92:54:32:84:67:a2:65:45:e5:1e:77:38:1e:
                    63:35:a6:3b:ba:5d:d2:c7:56:3f:38:ff:3f:76:9e:
                    cc:1a:74:79:99:57:69:8b:17:a2:10:4b:a7:6d:9d:
                    6c:ec:f8:b1:ee:71:24:d4:a8:7a:84:6d:36:9c:d7:
                    f2:63:27:1d:60:c9:17:e7:bb:50:2c:e1:77:e4:bc:
                    a0:6d:f9:65:41:11:14:9c:4b:ee:e4:57:ab:93:ad:
                    33:34:bb:b7:29:17:4b:d4:13:c7:b8:7d:d3:e7:92:
                    86:5b:b0:5d:29:76:b3:85:06:40:e4:b7:e0:76:6c:
                    9d:cf:ec:6e:5c:06:db:e5:19:03:ce:70:89:6e:72:
                    9d:b5:e3:37:01:b3:b7:42:b6:b6:a7:22:2b:6c:d5:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:A9:26:BE:2D:B5:40:5A:67:54:B6:D1:3C:F8:02:E0:7A:3F:52
            X509v3 Authority Key Identifier:
                keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57860

    Signature Algorithm: sha256WithRSAEncryption
         84:98:1d:08:d3:3e:c6:37:0b:d6:93:ad:7d:be:98:bd:2f:19:
         3b:ed:d9:11:7d:a1:8b:45:88:37:6b:45:2d:82:b8:2b:9f:e8:
         5d:d4:a2:63:a0:60:a9:4e:fa:40:d8:34:cd:59:05:f2:cd:50:
         d9:8b:95:a3:ed:f9:96:17:9c:53:18:e4:d4:2c:be:8d:53:bc:
         1e:0e:c2:07:f4:df:3b:57:ef:a6:66:f1:96:e0:24:7c:51:06:
         c6:d0:1b:9e:67:c6:81:1a:81:42:76:0c:5d:8b:c4:60:3d:e2:
         7e:77:42:d6:21:ca:9c:40:97:00:3b:65:15:49:21:9c:77:28:
         92:a4:58:be:f9:77:50:96:2a:3a:47:3b:fb:ee:8e:02:22:6d:
         19:94:f1:b6:2d:38:09:a3:9d:b6:44:c3:29:d2:b6:51:37:a9:
         9b:9b:dd:11:5b:5c:72:61:7b:d2:51:fd:5c:88:16:56:6f:03:
         99:2f:08:e8:a6:d6:14:d3:0e:d6:f8:1d:e2:d4:11:5b:75:18:
         c3:16:7c:46:4e:a2:11:4f:b1:7d:c5:21:89:aa:c8:d4:9f:85:
         92:80:df:fd:25:03:c7:90:3a:4e:b4:67:0e:aa:61:8e:9b:cb:
         b3:e4:c1:28:bd:34:94:60:14:82:d0:80:4b:98:f8:b9:cf:37:
         26:38:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:41 2026 by rpki-client