Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.xindi.eu/repo/XINDI/0/AS57984.asa
File:                     AS57984.asa (raw, json)
Hash identifier:          i3FK9lGThkMcrxrj3az1ZN/kqkL2f7O875lgPqBEJ2w=
Subject key identifier:   1C:83:B2:B8:A0:22:D5:A8:86:18:A7:CA:04:AE:C0:EC:11:7A:46:B8
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       0E9F6F8B9C2FCC1237B46825B89DB5CF7174566C
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/AS57984.asa
Signing time:             Sat 10 Oct 2026 09:14:35 +0000
ASPA not before:          Sat 10 Oct 2026 09:09:35 +0000
ASPA not after:           Sat 09 Oct 2027 09:14:35 +0000
Customer ASID:            57984
Providers:                AS: 8283
                          AS: 31477
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 20:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9f:6f:8b:9c:2f:cc:12:37:b4:68:25:b8:9d:b5:cf:71:74:56:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Oct 10 09:09:35 2026 GMT
            Not After : Oct  9 09:14:35 2027 GMT
        Subject: CN=1C83B2B8A022D5A88618A7CA04AEC0EC117A46B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:4c:3a:12:03:a6:ee:29:e5:f4:03:e8:65:
                    c5:c2:1e:dc:91:32:14:cb:f4:66:84:e9:37:c3:8c:
                    bf:58:ca:41:ff:5a:59:84:42:69:ef:4e:a8:7a:82:
                    49:da:21:44:3b:a4:d2:3d:70:ff:d0:32:ce:66:1a:
                    46:57:06:2d:bc:68:25:57:06:1d:16:30:b0:60:3a:
                    89:7e:d7:43:42:01:26:4d:ad:e0:8d:a0:df:83:f3:
                    e7:65:86:88:ce:48:c3:73:2d:bd:56:cb:32:6d:6b:
                    fe:d7:03:c2:83:c3:c9:e4:00:db:b9:3b:7f:48:ee:
                    82:5c:75:26:a5:f1:37:ce:ad:72:01:05:02:1b:32:
                    a1:8f:0b:48:91:ef:46:8f:54:1c:ba:06:8d:39:c5:
                    43:ce:69:68:0e:3b:bd:bf:ba:de:4f:40:b3:11:51:
                    26:c6:91:9b:70:77:3a:7c:45:a1:0b:e0:a2:26:92:
                    1f:a3:5f:e5:49:8d:49:29:e9:d7:f1:56:c8:92:cd:
                    9a:e4:c1:4f:b5:3c:ec:a4:3c:2b:88:92:c1:a8:21:
                    f0:47:c8:90:56:77:b8:c1:f0:41:7b:e6:e6:e0:41:
                    5c:20:ea:fc:82:0f:a8:ef:f3:7b:57:76:38:da:ed:
                    f4:29:db:9f:35:32:de:78:ba:a2:91:bb:3b:0c:ab:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:83:B2:B8:A0:22:D5:A8:86:18:A7:CA:04:AE:C0:EC:11:7A:46:B8
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/AS57984.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57984

    Signature Algorithm: sha256WithRSAEncryption
         89:ff:d3:89:2a:24:e0:be:95:d2:44:3e:11:5b:46:7f:f9:68:
         e8:84:d4:e4:ff:30:09:a1:39:5e:fa:6d:89:71:54:c1:f4:a6:
         4a:ff:bc:9b:11:a2:0a:77:71:48:a5:9f:a7:84:7f:3d:7d:c8:
         7b:56:d3:ed:ae:1d:9c:dc:6d:d3:1b:2f:5d:cf:55:33:96:ed:
         dd:1c:0c:89:7c:de:5a:8a:be:6d:b5:cd:4e:85:18:1c:13:b8:
         64:a5:05:9b:a6:14:6d:79:2b:44:92:d2:9a:39:d6:90:a1:d3:
         6d:77:bd:59:df:7b:4f:a6:9f:d5:93:f1:07:75:d3:c8:63:6d:
         c9:dc:f7:6d:b5:4a:8a:82:9b:4e:1e:28:be:6a:dd:5b:f3:9d:
         15:8e:3b:f0:42:9a:8f:e4:90:0a:e4:8c:10:69:e0:bb:06:ea:
         ff:69:2f:5f:1d:68:4c:18:f9:5c:fa:fa:8a:06:c7:0a:6e:0c:
         37:31:66:ec:75:34:fd:fd:19:d3:3c:4b:a8:cf:17:b0:75:72:
         3a:96:f5:66:92:42:7e:9e:1f:41:27:c8:45:5b:4a:a3:0f:69:
         a2:82:2b:a6:70:8b:9e:4c:64:4c:3a:c4:1d:1f:25:98:da:4c:
         db:23:b2:81:2b:df:c5:9e:12:57:4a:83:e8:fc:20:eb:4a:2c:
         6b:3b:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:58:46 2026 by rpki-client