Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/Nl_yi1QXIQ5ForZSQarCyISI-8I.asa
File:                     Nl_yi1QXIQ5ForZSQarCyISI-8I.asa (raw, json)
Hash identifier:          AajCKSsGi9WnrBsDdmR9RQ3tCTGoQ7cdjbFClS/xtCA=
Subject key identifier:   36:5F:F2:8B:54:17:21:0E:45:A2:B6:52:41:AA:C2:C8:84:88:FB:C2
Certificate issuer:       /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial:       019E34F7357BCFF64D6A258646D336D92D1D
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/Nl_yi1QXIQ5ForZSQarCyISI-8I.asa
Signing time:             Sun 17 May 2026 08:04:36 +0000
ASPA not before:          Sun 17 May 2026 08:04:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203662
Providers:                AS: 9002
                          AS: 19318
                          AS: 53667
                          AS: 63473
                          AS: 141409
                          AS: 142064
                          AS: 152900
                          AS: 200088
                          AS: 215467
                          AS: 263702
                          AS: 400212
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:34:f7:35:7b:cf:f6:4d:6a:25:86:46:d3:36:d9:2d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
        Validity
            Not Before: May 17 08:04:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=365ff28b5417210e45a2b65241aac2c88488fbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:7c:f6:c6:44:0c:02:58:b9:5e:20:7d:76:
                    65:e5:6f:a9:b2:5e:95:53:c2:74:b5:1b:1d:42:da:
                    1c:3c:c5:85:e8:d9:32:2a:4e:3c:c8:4d:13:1c:37:
                    80:8e:34:89:12:6f:06:5e:66:46:f6:f0:b0:07:3f:
                    db:b0:6d:f1:c5:f4:e4:37:5e:ab:23:84:f9:45:1d:
                    19:05:77:8e:13:41:d4:d0:b7:50:b0:7d:fc:f4:c3:
                    7a:e9:b1:38:cd:19:d9:b8:b3:05:44:23:f5:be:4e:
                    04:10:5d:07:7d:d6:f9:fc:08:be:d1:24:c6:39:6a:
                    d0:13:64:17:12:b1:ef:51:a3:80:7a:f6:eb:ae:8a:
                    19:d1:be:4e:a2:b2:b0:e6:35:2a:1a:ae:bd:d4:f3:
                    96:bd:db:c9:40:ce:9c:68:2f:93:98:61:d7:26:36:
                    cc:d4:6d:06:54:49:c9:c5:fd:e6:70:3b:93:e9:7d:
                    eb:62:e0:e8:b4:34:98:c0:30:fc:ae:9c:fd:b4:b6:
                    65:fb:54:a2:eb:b8:72:f5:38:4a:bb:12:1f:de:dc:
                    ba:98:0c:3c:00:aa:b3:ac:7e:f3:3d:b0:12:96:09:
                    58:1c:3e:96:bd:25:df:87:fb:3b:a0:3a:d8:e8:27:
                    83:a8:d2:97:d5:59:78:d1:91:42:a2:82:11:c4:f8:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5F:F2:8B:54:17:21:0E:45:A2:B6:52:41:AA:C2:C8:84:88:FB:C2
            X509v3 Authority Key Identifier:
                keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/Nl_yi1QXIQ5ForZSQarCyISI-8I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203662

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:8f:7e:87:4c:79:8b:cd:e1:93:4e:e9:43:33:25:c7:2f:
         85:71:5f:1a:85:c7:56:e6:aa:5b:d4:d9:00:2b:54:98:4e:36:
         5a:4f:15:fb:c0:2a:e9:ea:93:29:74:f2:06:c1:9f:0c:26:21:
         ab:62:4a:7f:82:74:a4:9b:85:8e:d8:52:a3:9f:4e:5f:fd:26:
         11:a9:bc:b3:01:2c:f4:62:78:36:5f:b1:67:5b:3c:78:b8:75:
         5e:98:1f:19:e6:5c:b4:6c:c2:b7:32:32:98:9f:df:7d:d2:da:
         5b:47:dc:4f:f7:e2:cb:77:85:3e:e8:ec:75:d6:bf:33:84:5c:
         ab:48:7d:0a:78:d7:ae:f0:8d:92:cd:57:e6:26:b4:ab:f5:51:
         69:45:40:7f:3c:80:58:ea:bc:03:b1:d2:41:c0:b0:29:fc:a4:
         c4:10:d3:4d:60:07:ee:59:35:2f:74:8a:0b:21:43:b3:9d:a6:
         73:9a:56:34:44:ba:37:45:2d:74:f8:5e:79:26:31:c0:92:b7:
         c7:aa:f4:80:ff:1f:37:80:6a:67:37:14:02:a3:2e:a6:8c:d2:
         1a:4f:4e:c4:27:c3:6a:fd:5a:1c:ca:4d:a9:0a:7d:7a:d4:af:
         0e:32:84:42:5f:d2:da:b9:2e:7c:5b:7c:01:54:5b:61:d2:41:
         55:76:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:40:01 2026 by rpki-client