Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/rjxf5Ppv88saIf4NMrBg7Lnjt88.asa
File:                     rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (raw, json)
Hash identifier:          8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=
Subject key identifier:   AE:3C:5F:E4:FA:6F:F3:CB:1A:21:FE:0D:32:B0:60:EC:B9:E3:B7:CF
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019DB2FC37510913DADFA11A4A0D79819619
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/rjxf5Ppv88saIf4NMrBg7Lnjt88.asa
Signing time:             Wed 22 Apr 2026 02:19:26 +0000
ASPA not before:          Wed 22 Apr 2026 02:19:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49999
Providers:                AS: 25369
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:fc:37:51:09:13:da:df:a1:1a:4a:0d:79:81:96:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Apr 22 02:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ae3c5fe4fa6ff3cb1a21fe0d32b060ecb9e3b7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:44:4d:82:80:88:25:cf:44:d5:bd:e2:f2:
                    d4:d8:27:7a:64:50:1a:8c:68:96:35:de:e4:76:98:
                    d8:b6:9d:31:ac:1a:61:8c:66:37:48:85:1d:39:76:
                    c9:77:81:f7:75:1a:fe:fc:e1:82:36:5f:e3:06:4f:
                    83:be:32:ae:03:41:00:66:a3:ff:da:f1:01:72:61:
                    6c:b0:dd:bb:9b:f5:9f:23:cb:d9:b4:88:34:09:5f:
                    c3:79:ac:7a:76:f6:c3:f0:8c:7e:0e:d3:d3:e0:3e:
                    d9:91:fc:0c:3f:1c:8a:aa:93:3a:bc:89:89:49:44:
                    c0:74:e5:28:88:ef:d5:fb:21:87:70:0e:29:69:39:
                    18:8a:0b:11:e8:25:e4:76:88:79:66:94:7b:e7:2e:
                    71:39:43:df:10:84:d5:1c:79:1c:22:78:82:3d:ff:
                    3d:ad:bc:e1:f9:ae:67:93:e4:be:86:4d:56:7c:31:
                    1c:b7:4b:25:1b:72:c9:bb:5d:fe:92:04:11:ff:f2:
                    93:64:22:6e:bb:44:b9:45:55:b6:9f:a1:a4:f6:4d:
                    5b:99:59:30:e9:46:59:8d:05:b7:82:ae:1d:4e:24:
                    c0:d2:86:3d:58:b9:53:3e:21:03:dc:e0:42:48:87:
                    5f:86:14:a1:a0:d4:f8:76:e7:28:fe:52:b5:ac:e7:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3C:5F:E4:FA:6F:F3:CB:1A:21:FE:0D:32:B0:60:EC:B9:E3:B7:CF
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/rjxf5Ppv88saIf4NMrBg7Lnjt88.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49999

    Signature Algorithm: sha256WithRSAEncryption
         bf:9d:bd:6b:b2:91:75:19:88:ae:01:d0:dd:13:62:a9:54:88:
         2c:13:11:04:8f:b5:60:da:6f:4d:81:7b:3d:75:0a:37:d2:bf:
         90:7a:f0:30:ab:5b:0c:59:e2:9c:4a:51:6b:fa:c5:15:b9:41:
         a5:eb:d0:f3:d0:bf:76:e9:e9:f8:7b:e2:08:7b:25:9d:33:fc:
         53:7f:26:8d:e0:36:1b:36:e6:b3:f6:2a:f5:8b:cd:b2:88:ab:
         54:9d:6c:fe:1f:21:0b:13:19:54:28:62:73:cd:80:b5:8d:88:
         ff:c3:8a:ad:e5:7e:05:3d:54:42:13:ab:c1:91:cc:ea:12:bf:
         c8:79:31:3b:5a:6f:ad:98:df:49:b3:84:c9:ff:57:af:68:25:
         e5:a9:25:c0:24:3b:ce:27:48:2d:76:87:40:c0:0a:a5:3d:f0:
         da:a1:e1:e7:3e:06:94:22:27:7c:e0:f4:51:1a:e9:44:f7:20:
         70:76:53:eb:f8:9f:73:fa:b6:72:2d:9b:6d:92:60:17:e1:54:
         9c:b5:8e:54:b5:74:7e:44:b3:fe:53:81:12:94:67:2b:46:2e:
         db:2c:db:99:19:69:b0:03:b8:2a:19:17:9a:38:af:6d:df:5c:
         97:a9:5c:aa:e8:a7:5a:26:14:69:5e:f2:1e:3b:55:d2:65:ec:
         c1:c5:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:04 2026 by rpki-client