Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/U7OnkqcyhfMgmglldgw8h28z5gg.asa
File:                     U7OnkqcyhfMgmglldgw8h28z5gg.asa (raw, json)
Hash identifier:          ZjXLQs/77DxpmRE31AeCtRotD+epvHkYNJ67Muowo1I=
Subject key identifier:   53:B3:A7:92:A7:32:85:F3:20:9A:09:65:76:0C:3C:87:6F:33:E6:08
Certificate issuer:       /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial:       019FC6249ADF6063DBF3413EF62162AC13D0
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/U7OnkqcyhfMgmglldgw8h28z5gg.asa
Signing time:             Mon 03 Aug 2026 05:41:55 +0000
ASPA not before:          Mon 03 Aug 2026 05:41:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203021
Providers:                AS: 3249
                          AS: 8240
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c6:24:9a:df:60:63:db:f3:41:3e:f6:21:62:ac:13:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
        Validity
            Not Before: Aug  3 05:41:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=53b3a792a73285f3209a0965760c3c876f33e608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:ef:b3:85:00:9c:3e:38:0f:54:62:37:66:
                    81:9d:6c:8f:30:e3:0b:0a:30:a8:a8:4f:06:f7:19:
                    7e:57:94:29:11:d9:de:d8:41:db:2d:ad:9c:ad:57:
                    01:65:09:a4:77:fe:ab:e0:7f:eb:05:af:0d:48:c1:
                    48:c6:a0:f5:7a:30:50:5f:b1:f5:49:8e:56:f5:13:
                    88:ab:f5:55:4c:7e:66:9e:d1:b5:5d:80:38:73:0d:
                    47:03:63:74:d8:af:73:7c:bb:29:a4:83:44:a9:69:
                    9a:82:c9:75:7a:82:77:41:8b:fb:26:ab:95:e0:a0:
                    ba:31:52:c3:59:60:35:1f:8d:85:18:5e:dd:69:45:
                    37:01:be:58:45:28:9a:62:23:91:bc:d7:de:f4:d0:
                    a2:f6:80:63:80:05:cf:75:85:81:e5:e2:14:04:27:
                    05:f1:ec:c9:bf:71:5a:4d:d0:40:56:9c:4a:f4:a5:
                    92:78:e6:70:c9:9a:3f:43:00:14:cb:2c:64:c9:b9:
                    10:ce:60:20:37:46:ec:c0:3d:9a:ed:c0:ee:99:9a:
                    ae:84:9e:7e:d0:7d:76:0f:04:d0:da:60:37:5f:ba:
                    ce:fe:88:7a:b9:4b:02:c5:66:1f:d8:ab:58:1f:7d:
                    32:f7:96:f3:1c:b8:3c:7f:aa:6e:85:19:65:59:64:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B3:A7:92:A7:32:85:F3:20:9A:09:65:76:0C:3C:87:6F:33:E6:08
            X509v3 Authority Key Identifier:
                keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/U7OnkqcyhfMgmglldgw8h28z5gg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203021

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:32:50:8c:6a:97:35:b7:9d:ed:b2:a1:7f:d5:eb:ab:f3:
         e4:b6:24:45:19:98:57:66:80:0a:1b:4c:1f:d4:f1:39:1d:59:
         a7:ee:0d:fc:5d:e5:c9:eb:9a:22:46:a1:6c:ed:48:b6:d0:c0:
         c0:37:82:62:37:6e:a9:3c:82:84:8a:41:82:b5:11:a0:19:6a:
         5e:9d:71:d4:43:bc:a7:11:53:f3:fc:94:27:15:43:0c:aa:c8:
         aa:60:1c:de:85:cf:9f:3d:2b:6f:36:77:af:2f:fe:d6:b2:70:
         7a:a9:d7:da:bd:fa:47:59:5f:c5:32:f3:ba:ac:d0:2c:e2:1d:
         e4:81:2e:5d:42:ef:6d:fc:cb:b2:18:74:e8:0d:c4:01:6e:b7:
         2e:df:63:b8:8e:11:2e:a1:ff:14:74:f3:de:fa:fc:43:1f:bc:
         79:19:24:ac:f3:ee:c3:46:85:07:29:1e:51:f0:65:6d:be:62:
         05:24:9f:59:ea:09:70:d0:4f:dd:92:00:6b:82:c7:7d:c8:cf:
         1f:82:fa:a4:6a:a7:f8:7e:0a:43:0d:08:5c:e6:ab:36:97:ab:
         b4:72:42:64:52:8c:f8:90:f7:b1:89:a9:b7:56:9f:64:cf:e9:
         0d:40:0e:5b:38:08:a5:31:5b:5b:48:48:22:f1:3e:67:62:a6:
         3d:fe:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:40 2026 by rpki-client