Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/AS213605.asa
File:                     AS213605.asa (raw, json)
Hash identifier:          nB1VvqJdp3LTMxPZWJRw8GApNiisVibKM3k1IThtEvk=
Subject key identifier:   E9:F3:8B:A7:79:0C:BA:E3:FF:B3:F6:D9:F0:F6:C3:09:F6:71:95:9F
Certificate issuer:       /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Certificate serial:       70F9080DBF88E262B577D9BC9D7B7BB8B09FA5A4
Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/AS213605.asa
Signing time:             Thu 28 Aug 2025 02:40:24 +0000
ASPA not before:          Thu 28 Aug 2025 02:35:24 +0000
ASPA not after:           Thu 27 Aug 2026 02:40:24 +0000
Customer ASID:            213605
Providers:                AS: 6939
                          AS: 7720
                          AS: 17433
                          AS: 34927
                          AS: 44324
                          AS: 51087
                          AS: 53667
                          AS: 199310
                          AS: 209533
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Sep 2025 19:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f9:08:0d:bf:88:e2:62:b5:77:d9:bc:9d:7b:7b:b8:b0:9f:a5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
        Validity
            Not Before: Aug 28 02:35:24 2025 GMT
            Not After : Aug 27 02:40:24 2026 GMT
        Subject: CN=E9F38BA7790CBAE3FFB3F6D9F0F6C309F671959F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:2a:3a:07:c5:e0:bc:06:8f:b1:c6:59:ce:
                    6e:3e:06:c0:91:0b:39:0a:d3:09:49:5f:ca:9f:98:
                    a5:80:a5:5d:a0:2a:dd:f4:bd:ca:72:5e:f1:20:67:
                    bd:1b:40:28:2a:47:ba:41:23:f0:a8:eb:d8:27:7e:
                    f7:dd:31:a8:63:90:c5:5b:d9:16:01:71:67:6f:de:
                    1f:67:55:48:f2:5a:8e:d1:c4:d7:a9:35:69:1f:c5:
                    b9:40:fd:07:62:24:0b:9e:34:29:58:32:fc:fa:bb:
                    38:b8:a1:f4:a9:64:ff:59:37:de:cd:ea:09:4d:66:
                    5e:0b:86:11:95:85:ac:ff:da:58:2d:9b:20:64:c7:
                    42:ec:8a:34:90:d7:34:8e:44:75:5d:12:53:d1:4e:
                    4a:6a:dd:ef:87:b0:0d:cc:da:39:8c:0a:77:ae:e4:
                    10:ec:4a:ed:e2:53:a6:7b:c0:12:81:5b:27:bc:07:
                    f6:d1:27:3e:8f:d7:ba:96:8a:ab:a1:19:1b:c9:0b:
                    8e:6f:61:92:d3:c5:dd:db:a2:a4:96:22:51:ca:02:
                    71:3c:5a:3e:33:29:f0:c7:3a:4a:7f:86:fa:4a:b0:
                    35:c7:e3:d2:20:11:fa:60:20:21:d2:55:06:20:1e:
                    09:31:37:3d:9d:d4:ce:24:79:29:04:d6:0f:0e:5c:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:8B:A7:79:0C:BA:E3:FF:B3:F6:D9:F0:F6:C3:09:F6:71:95:9F
            X509v3 Authority Key Identifier:
                keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/AS213605.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213605

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:b2:26:d0:9d:49:4a:fe:14:da:ba:b8:94:93:f5:b8:4c:
         6d:5e:41:d3:72:2a:a2:77:16:4c:37:3c:47:30:d0:08:3f:66:
         67:b3:b4:90:1a:b5:6f:25:e8:f6:60:03:79:ce:b9:d4:ab:2e:
         39:36:4c:ce:52:16:bc:6d:e3:3c:02:5f:eb:e4:cd:80:4a:27:
         43:d1:1a:6f:75:fc:59:a1:de:2f:e3:80:e5:ea:8a:fe:c3:16:
         5f:c6:b9:79:bd:b7:c1:db:1a:47:65:02:9a:86:38:6b:1c:d1:
         e8:47:e0:f8:79:c2:3d:21:bd:0c:07:03:7e:62:45:ac:6f:94:
         9e:46:58:11:50:cc:eb:cf:21:25:62:15:ee:ff:2b:1a:aa:19:
         a4:83:b4:89:df:d9:55:53:57:69:48:63:4f:34:ee:d4:c7:25:
         7c:5e:37:17:01:be:b9:23:40:fe:b8:da:e7:5b:08:f6:6d:70:
         d8:d6:78:62:ae:12:1b:f4:a9:cc:a9:4e:d1:f6:c5:46:0c:90:
         50:78:b6:82:7c:b8:57:99:43:42:19:e5:e7:f3:f3:ec:7b:23:
         63:dd:37:c9:de:50:79:bb:29:09:34:b4:16:59:e3:b3:dc:02:
         62:26:63:e9:fc:c4:ad:11:43:ae:0b:93:35:c6:71:95:19:6b:
         86:16:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 09:43:17 2025 by rpki-client