Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/af-zPo0siQNIyWuWlPAaFTV5JrE.asa
File:                     af-zPo0siQNIyWuWlPAaFTV5JrE.asa (raw, json)
Hash identifier:          qXExYR4uREIU9z6G8z6b/I2nd02vgo6aaHViiZ0ixao=
Subject key identifier:   69:FF:B3:3E:8D:2C:89:03:48:C9:6B:96:94:F0:1A:15:35:79:26:B1
Certificate issuer:       /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial:       01A0F79CCAA548D2B8A223FB06F2C245CC2D
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/af-zPo0siQNIyWuWlPAaFTV5JrE.asa
Signing time:             Thu 01 Oct 2026 13:17:22 +0000
ASPA not before:          Thu 01 Oct 2026 13:17:22 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206562
Providers:                AS: 6848
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:9c:ca:a5:48:d2:b8:a2:23:fb:06:f2:c2:45:cc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
        Validity
            Not Before: Oct  1 13:17:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ffb33e8d2c890348c96b9694f01a15357926b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:df:8d:c4:d5:70:b9:60:76:cf:ae:82:06:
                    9e:b4:de:15:f8:9d:31:b7:82:e7:c7:54:9d:1c:ac:
                    f8:61:b7:24:cb:86:b4:19:d5:40:fe:b4:d0:af:51:
                    c1:fa:08:d0:7e:89:71:ba:1b:a9:d6:6a:e1:fd:99:
                    56:20:e2:ea:e9:7b:b3:a8:28:25:a0:05:0b:cb:08:
                    f8:96:34:4b:8d:a5:40:62:71:5d:9a:c5:65:1e:c4:
                    a6:ed:2a:ef:6f:d4:4c:94:73:5a:77:d6:61:f8:f0:
                    d3:52:fe:6f:de:eb:e9:4f:23:cc:42:1a:5b:0e:12:
                    5f:42:5b:46:4a:3a:4f:5c:77:75:58:5d:d6:01:b2:
                    2d:b0:59:b4:f5:f0:25:4f:24:14:68:88:68:25:94:
                    b1:26:e6:b0:05:9c:dd:6c:a7:51:f7:9e:d0:e9:f8:
                    a5:da:36:0e:2a:76:36:54:83:72:71:9e:89:03:60:
                    c3:dd:39:51:7a:68:81:dc:56:ad:9c:8a:a6:18:2c:
                    0a:a5:85:70:b8:cb:2b:4b:87:2c:fa:5b:32:b3:cd:
                    e9:fb:74:51:b3:f1:c9:a0:fd:c3:36:34:42:4c:99:
                    37:0e:03:a7:45:b0:6e:43:d4:04:b5:6d:c4:d3:21:
                    38:b0:95:56:8e:22:ca:85:7e:1f:b8:a8:ca:b6:05:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FF:B3:3E:8D:2C:89:03:48:C9:6B:96:94:F0:1A:15:35:79:26:B1
            X509v3 Authority Key Identifier:
                keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/af-zPo0siQNIyWuWlPAaFTV5JrE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206562

    Signature Algorithm: sha256WithRSAEncryption
         11:eb:93:a9:aa:d6:d3:8c:91:70:8a:85:46:36:9a:56:2e:ed:
         ba:90:7e:69:d2:e8:0b:9c:8b:46:42:88:69:ce:1a:d4:36:ae:
         fd:35:be:b4:ea:64:67:fb:f1:a6:60:fd:03:86:3f:44:f7:a8:
         7a:74:65:5d:fb:00:7e:e6:cb:bf:83:d5:8a:7a:fb:73:ca:81:
         8c:ec:64:e5:ec:65:dc:26:84:75:4c:85:85:df:f5:a7:b0:6a:
         64:a9:25:f7:7b:57:67:ae:e4:3b:52:01:86:2d:10:0c:b0:08:
         7c:5b:1d:fa:79:0c:91:b9:fe:62:82:50:24:0f:c3:3f:bd:2b:
         f3:10:df:eb:14:22:2d:1b:10:04:d8:1c:a3:0b:e8:f9:92:60:
         b1:ec:6d:01:59:a7:5e:03:c9:42:7d:a8:2c:f1:b5:f4:58:86:
         81:2d:38:6d:3b:86:5c:d9:30:3f:76:a0:fa:cd:4d:49:3e:95:
         23:18:3f:ff:90:95:50:f8:10:9e:5b:0e:a8:41:43:4c:04:4c:
         59:a4:24:bd:8b:7b:9b:50:72:8f:e6:89:d5:c0:33:6a:e7:ed:
         eb:be:8f:25:64:3b:94:f8:c6:46:34:e1:6e:02:02:b3:f3:72:
         35:c0:05:e4:39:78:27:17:4d:94:4c:d3:5d:9c:fb:80:c7:c8:
         60:96:74:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:01:05 2026 by rpki-client