Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/yS4U0hJKnoTnTE95NY8Wg3X7MN4.asa
File:                     yS4U0hJKnoTnTE95NY8Wg3X7MN4.asa (raw, json)
Hash identifier:          oSQpbir0L7gbDkVY3Mo7PNvJOT1D0a0yphtG9cBRQrA=
Subject key identifier:   C9:2E:14:D2:12:4A:9E:84:E7:4C:4F:79:35:8F:16:83:75:FB:30:DE
Certificate issuer:       /CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Certificate serial:       019CE288A20BDCC972F364265EBD04FBF7D2
Authority key identifier: 6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/yS4U0hJKnoTnTE95NY8Wg3X7MN4.asa
Signing time:             Thu 12 Mar 2026 14:52:11 +0000
ASPA not before:          Thu 12 Mar 2026 14:52:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200827
Providers:                AS: 29670
                          AS: 41051
                          AS: 41108
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:88:a2:0b:dc:c9:72:f3:64:26:5e:bd:04:fb:f7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
        Validity
            Not Before: Mar 12 14:52:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c92e14d2124a9e84e74c4f79358f168375fb30de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:a5:58:11:ef:1f:4c:e9:8c:4b:69:5b:54:
                    79:ca:81:4d:04:bb:ef:73:c1:d4:6e:fa:c9:03:3a:
                    80:96:8c:c8:29:c0:0a:c7:99:4c:48:24:3d:3b:2a:
                    39:82:e9:4d:9d:55:97:e8:c8:07:0c:aa:d9:e5:4d:
                    af:49:dd:00:22:56:9a:c2:e7:6d:2e:35:75:73:1d:
                    e1:33:e8:f5:75:77:11:e8:7e:55:16:e5:97:74:44:
                    5a:52:e5:78:7f:57:10:a9:7c:9c:31:18:dc:16:c1:
                    89:7e:87:6b:07:bb:27:5c:3c:45:93:03:0d:e6:bd:
                    76:ef:b7:c6:45:e1:35:22:e2:a9:d4:78:bf:35:10:
                    5f:c6:5b:c5:55:ac:5c:7e:b1:fd:69:0f:7f:e1:92:
                    e5:e6:53:83:13:d3:a1:1e:62:48:e2:77:3c:96:f9:
                    ec:32:da:6e:d9:78:12:b0:e6:d7:2e:47:1b:12:c2:
                    1b:9c:1e:8a:d9:28:5a:5e:17:65:eb:f5:02:ac:dd:
                    13:ac:db:4d:c7:48:ac:a8:cb:20:52:7f:ea:3d:61:
                    29:b2:46:43:c5:02:43:ea:7f:b8:bb:dd:20:66:83:
                    52:79:c8:9a:03:6d:b5:bd:e0:be:52:17:7a:34:60:
                    99:e1:c1:fb:7d:60:3f:7b:c5:57:04:f1:48:f0:f8:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2E:14:D2:12:4A:9E:84:E7:4C:4F:79:35:8F:16:83:75:FB:30:DE
            X509v3 Authority Key Identifier:
                keyid:6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/yS4U0hJKnoTnTE95NY8Wg3X7MN4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200827

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:1a:bc:ef:2c:49:e7:07:24:56:ae:81:2b:95:42:24:26:
         44:d5:55:c7:03:fb:c5:9b:0b:d9:a2:17:e1:85:d1:c4:f3:cd:
         41:ca:d9:7b:38:4c:a1:ae:fc:aa:f0:ba:d3:0f:9c:70:28:3a:
         a0:26:00:d9:5a:ff:08:04:9c:d4:bc:17:cd:d5:33:e2:77:d1:
         27:bb:8a:06:74:27:88:20:e0:61:f7:70:0f:76:76:61:96:2f:
         58:13:5b:bc:14:a9:fb:1c:1b:6f:16:50:b6:31:8d:25:40:f8:
         ca:da:e5:6d:a4:6d:16:a3:64:72:0c:bb:91:22:cf:39:c0:d0:
         b1:03:f3:e1:45:a5:b5:4c:13:2c:a3:d0:6e:ec:a8:62:93:1b:
         c1:03:45:9c:ea:3e:94:89:3f:36:f9:15:2f:01:86:e7:ec:56:
         60:a1:d3:54:a2:d7:76:23:fe:64:d7:76:56:8a:c0:42:e9:fb:
         2e:a3:57:09:c8:08:8f:e2:c3:26:6f:56:a1:f1:17:fa:2f:28:
         96:10:ce:4d:18:42:0c:23:5b:a1:ee:38:09:2d:d3:8e:86:f0:
         c4:4a:45:9a:1e:74:07:6b:79:be:5e:a4:31:85:b2:90:62:84:
         65:a0:54:2a:e9:da:c3:08:3d:2b:b3:9f:ff:61:2e:42:df:c9:
         3d:8c:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----