Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/AS204464.asa
File:                     AS204464.asa (raw, json)
Hash identifier:          qjzhUzlM7ddTgdWjz3vsyJhe493aRAF64q9a6Azxnjs=
Subject key identifier:   91:B1:C4:C5:0A:D4:32:A7:9A:F6:4B:9A:AB:62:66:15:57:63:B5:C0
Certificate issuer:       /CN=3bd442b9d64fea0e55587ee1cfbe67ed413c8750
Certificate serial:       14924020CD3A95E3718DB6776F49671EECD128EC
Authority key identifier: 3B:D4:42:B9:D6:4F:EA:0E:55:58:7E:E1:CF:BE:67:ED:41:3C:87:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/AS204464.asa
Signing time:             Thu 30 Apr 2026 07:17:56 +0000
ASPA not before:          Thu 30 Apr 2026 07:12:56 +0000
ASPA not after:           Thu 29 Apr 2027 07:17:56 +0000
Customer ASID:            204464
Providers:                AS: 6939
                          AS: 52025
                          AS: 199746
                          AS: 201541
                          AS: 205305
                          AS: 213413
                          AS: 214915
                          AS: 215828
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:92:40:20:cd:3a:95:e3:71:8d:b6:77:6f:49:67:1e:ec:d1:28:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd442b9d64fea0e55587ee1cfbe67ed413c8750
        Validity
            Not Before: Apr 30 07:12:56 2026 GMT
            Not After : Apr 29 07:17:56 2027 GMT
        Subject: CN=91B1C4C50AD432A79AF64B9AAB6266155763B5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f9:e0:9a:8f:bc:90:0b:f1:8d:6b:fc:7b:a2:
                    4f:1d:84:f6:4d:5c:ee:96:ef:73:ee:e2:e9:f8:d6:
                    79:84:cc:16:f9:87:41:9c:27:cf:f2:91:88:56:da:
                    46:b1:78:27:f2:87:42:f2:f3:25:68:b9:d9:ab:b2:
                    d1:ff:d3:4a:2a:39:76:3d:ba:c4:fc:be:c9:c7:61:
                    25:a9:13:f1:b5:f4:f1:ba:0d:e9:57:e5:db:ac:f8:
                    dd:d0:3a:32:cb:0d:89:1d:a0:11:38:0a:ed:d1:43:
                    f3:2e:87:f9:44:86:6a:b7:00:ae:8d:08:0c:b4:c1:
                    36:2e:21:22:38:c6:53:a1:b5:bd:55:ec:a4:85:c9:
                    2b:b8:f2:40:93:82:b0:e6:9b:5c:b7:35:86:65:92:
                    12:5a:22:68:8a:86:ec:d0:f8:6a:48:3f:bf:29:47:
                    a0:3e:c1:bb:f9:d1:19:36:ba:de:d0:34:dd:1c:04:
                    e7:99:ce:d4:70:9b:c1:7b:6e:5c:b7:fa:71:4d:95:
                    c1:79:21:8e:d6:5c:30:4a:d9:9e:ff:4d:6f:29:ba:
                    f5:21:39:10:75:50:e5:5d:a8:67:2b:ec:7a:86:38:
                    ef:16:5c:55:bd:c8:d4:2e:8f:f1:72:02:21:87:d8:
                    95:b5:35:ed:de:ea:22:a5:25:5d:b0:4f:6c:b9:ec:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B1:C4:C5:0A:D4:32:A7:9A:F6:4B:9A:AB:62:66:15:57:63:B5:C0
            X509v3 Authority Key Identifier:
                keyid:3B:D4:42:B9:D6:4F:EA:0E:55:58:7E:E1:CF:BE:67:ED:41:3C:87:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/AS204464.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204464

    Signature Algorithm: sha256WithRSAEncryption
         65:2b:e8:42:8c:ff:c2:7d:7a:ae:af:9c:9e:23:d1:ad:22:3a:
         6d:55:7e:7f:29:1b:2f:13:9e:dc:36:ac:41:3a:94:f4:74:43:
         28:43:71:a7:3e:d2:06:15:e3:97:68:43:29:63:90:09:8a:70:
         bf:c1:58:4e:24:f9:f4:a1:11:dd:8b:30:58:9d:5f:b8:2e:5c:
         70:b8:a9:7d:4e:e5:99:91:4a:da:5f:34:3f:9c:42:d6:b1:be:
         87:0b:6c:1d:e0:b2:1b:91:d0:85:8c:ba:62:f0:17:f2:19:ae:
         0f:b9:f5:26:2a:45:56:bb:47:ce:b2:d5:54:14:c6:46:91:be:
         30:26:2b:d4:cf:5e:dd:78:65:3e:25:e6:96:07:d7:42:1f:85:
         ce:fd:d8:15:4b:20:2d:cb:d0:8b:63:ea:7d:49:0e:7a:07:05:
         ce:7a:53:b5:47:0d:75:b5:d8:63:5e:ed:bf:32:2f:2b:24:37:
         e7:d7:29:5b:67:b8:fc:da:30:6c:2d:cc:03:ca:a2:8f:2a:1c:
         1a:41:5c:12:a0:23:e3:46:65:70:d2:a2:70:b2:92:4b:7d:22:
         30:08:34:a6:97:65:0e:93:a6:66:f0:3f:18:bb:8e:00:fa:66:
         d9:bb:63:27:06:b1:4a:5e:4e:ed:02:7f:bd:e6:dd:1f:c6:1c:
         99:3f:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----