Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/OujepPxEWJf76CUpCTyqTjOXKpU.asa
File:                     OujepPxEWJf76CUpCTyqTjOXKpU.asa (raw, json)
Hash identifier:          ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=
Subject key identifier:   3A:E8:DE:A4:FC:44:58:97:FB:E8:25:29:09:3C:AA:4E:33:97:2A:95
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019DB2FC364EBEB256542A968B0B9EF54911
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/OujepPxEWJf76CUpCTyqTjOXKpU.asa
Signing time:             Wed 22 Apr 2026 02:19:26 +0000
ASPA not before:          Wed 22 Apr 2026 02:19:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            25369
Providers:                AS: 174
                          AS: 1299
                          AS: 3223
                          AS: 3257
                          AS: 13335
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:fc:36:4e:be:b2:56:54:2a:96:8b:0b:9e:f5:49:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Apr 22 02:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3ae8dea4fc445897fbe82529093caa4e33972a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:4f:ba:86:04:9c:52:50:a6:c0:6a:c3:cd:
                    73:75:04:c0:ef:5b:04:32:2e:32:d0:d5:8a:f7:d8:
                    f9:2f:56:21:64:6a:46:d3:80:8c:c3:7a:8b:bf:78:
                    40:fd:e4:1d:45:05:ca:0c:f3:6c:f1:8c:02:c6:69:
                    12:d0:cc:3f:0f:f6:e0:0b:8a:91:fb:5c:e2:d5:b5:
                    2c:9f:3b:b6:6d:44:8f:ed:43:f8:3a:55:ba:7e:29:
                    28:d2:18:11:56:df:cb:8f:e7:f6:2e:fa:a4:3d:31:
                    7b:ad:5d:e8:fc:d7:18:7b:fa:fb:36:b5:2a:a1:f1:
                    a5:51:1c:c3:b6:ba:7e:ca:b9:59:30:22:c1:89:9f:
                    a1:fa:73:21:ac:a5:f8:18:6a:2f:f1:fa:86:17:29:
                    c8:cc:26:0f:e0:c1:da:65:14:46:db:63:94:d5:d0:
                    7a:71:da:54:88:c9:d6:73:de:26:82:6e:dd:58:b7:
                    ac:b5:63:6f:ff:fb:60:a3:69:cb:fc:2f:dc:53:0d:
                    16:f6:28:e0:66:b3:fa:1d:3e:f9:02:2d:28:7a:ec:
                    7d:21:b3:93:c2:12:f2:50:18:49:92:8a:0a:8a:42:
                    cb:49:63:d1:15:2f:bd:6a:c4:dc:48:78:14:74:ce:
                    a3:11:3d:0c:81:f6:54:8b:7b:15:16:9b:09:d3:4b:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E8:DE:A4:FC:44:58:97:FB:E8:25:29:09:3C:AA:4E:33:97:2A:95
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/OujepPxEWJf76CUpCTyqTjOXKpU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25369

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:df:b8:d6:3a:be:fa:f0:85:63:e8:40:d4:ed:18:a2:cc:
         b9:33:f7:d5:d2:57:1a:f7:6a:37:20:8f:48:66:79:a4:dc:82:
         0f:16:1d:11:a2:bd:cc:f5:a0:4a:31:56:36:f5:82:cb:b0:0a:
         4d:df:bc:4a:36:21:d3:c5:dd:7e:6f:91:1a:c9:42:bc:11:4a:
         c7:61:31:be:a6:0a:15:05:af:43:ed:5c:be:47:71:2b:f2:48:
         b3:99:e4:6f:7e:e4:29:d9:30:6d:3a:41:1a:5f:4c:d0:0f:7c:
         54:14:ad:59:c6:1b:c7:e9:2e:fa:b7:36:78:c4:d5:7b:d2:04:
         93:b9:4e:0c:80:0e:dd:2d:91:aa:b1:85:97:ff:ce:03:ab:05:
         07:66:a1:60:3f:16:15:82:9b:1a:b1:6b:c2:72:fb:bb:9e:d4:
         a1:a2:90:fc:49:02:37:d6:7c:90:30:49:b7:a2:cd:d0:ef:3c:
         20:d5:fd:b7:aa:06:bd:48:e9:ac:31:df:51:7b:ae:38:5a:a4:
         d7:c6:54:4c:61:82:ae:5d:3a:c8:7b:76:c3:fd:fd:d4:7d:bf:
         2d:93:95:cf:d8:ca:54:c5:5b:81:45:98:d2:ab:08:5d:1a:d7:
         f4:ff:37:e1:01:4e:db:7b:f9:19:30:73:99:10:da:8d:97:94:
         3e:24:4d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:32 2026 by rpki-client