Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/AS153176.asa
File:                     AS153176.asa (raw, json)
Hash identifier:          kth9aLs5m8kPFdFTGtiW1jVWpJRnklrh1xbRTNAGuIA=
Subject key identifier:   03:64:20:66:AC:D7:0E:CB:86:E3:1A:9D:BC:6B:40:30:72:91:B4:0A
Certificate issuer:       /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Certificate serial:       0771315906DD5D6CD222B8C0D7BFB30401ABF280
Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/AS153176.asa
Signing time:             Fri 29 Nov 2024 17:13:32 +0000
ASPA not before:          Fri 29 Nov 2024 17:08:32 +0000
ASPA not after:           Fri 28 Nov 2025 17:13:32 +0000
Customer ASID:            153176
Providers:                AS: 15353
                          AS: 34872
                          AS: 47311
                          AS: 208210
                          AS: 215084

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Dec 2024 08:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:71:31:59:06:dd:5d:6c:d2:22:b8:c0:d7:bf:b3:04:01:ab:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
        Validity
            Not Before: Nov 29 17:08:32 2024 GMT
            Not After : Nov 28 17:13:32 2025 GMT
        Subject: CN=03642066ACD70ECB86E31A9DBC6B40307291B40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:3b:f2:24:d8:95:61:51:fe:28:df:97:43:
                    ea:fd:61:0a:ed:77:7e:a9:06:87:25:c7:83:52:b7:
                    a5:48:0d:33:7a:b9:1b:3d:30:b2:78:ec:9e:91:15:
                    6a:e7:4d:38:ca:b5:9b:5e:3e:12:06:67:a9:e4:54:
                    75:77:dc:a3:df:e8:60:97:f0:c0:fd:a8:ff:9d:6b:
                    3b:6e:d2:f5:b8:6a:5d:bd:e9:f6:8b:e3:2c:f9:99:
                    e8:a9:8d:c4:57:64:8a:7d:d7:60:cb:7a:4d:9a:01:
                    5d:87:f3:28:9a:2f:5c:9c:04:56:d5:cc:c3:79:43:
                    62:fc:61:1c:28:c9:c3:d1:15:68:db:a4:f1:ad:8e:
                    23:42:ca:4d:c5:f0:fb:46:4a:56:16:35:50:8c:5e:
                    55:68:b3:87:49:d6:35:4d:fc:11:ab:ae:04:1b:86:
                    82:a3:23:7d:c7:78:b1:f4:ff:ae:c0:f2:d8:2a:40:
                    d3:5e:22:57:33:dd:e4:79:39:99:23:10:b9:c8:2a:
                    11:4e:48:22:ce:5c:a0:26:5b:2d:8c:e1:64:6e:74:
                    54:a6:42:72:9f:80:98:2b:a2:f1:88:e9:57:7a:f1:
                    ff:5f:15:a0:e9:3f:b8:dc:eb:48:af:95:e4:0d:0a:
                    b9:e8:b7:37:1e:bd:90:46:f0:34:18:2a:90:b2:1e:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:64:20:66:AC:D7:0E:CB:86:E3:1A:9D:BC:6B:40:30:72:91:B4:0A
            X509v3 Authority Key Identifier:
                keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/AS153176.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153176

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:82:cc:68:2c:d7:a6:9f:93:1d:cc:4e:53:a0:39:27:ac:
         22:25:4e:4d:d4:90:d3:98:2f:bb:06:84:fd:77:0d:91:68:c8:
         45:2a:0e:0b:9b:94:b9:95:ac:cc:f9:93:dd:1d:a6:78:e7:7c:
         72:6d:8f:88:c0:c3:f3:bf:20:82:d2:78:05:0f:97:0a:99:9c:
         95:56:4c:fe:24:50:fb:90:cb:8f:76:74:b2:dc:1b:30:10:a6:
         f2:40:b3:d1:e1:da:3d:7b:fa:d6:30:4a:39:43:80:d6:ce:91:
         1e:87:18:5b:4e:f7:6c:86:20:4f:a4:df:48:21:02:9b:32:f1:
         a1:79:c7:b4:eb:9f:dc:a4:40:88:38:0a:0a:69:57:5a:6e:6a:
         3c:a3:c1:56:d4:1a:73:d1:b4:06:e6:32:3c:b6:ec:3b:85:65:
         f6:a5:04:38:c6:26:76:56:72:a2:34:75:55:20:d3:a6:0d:ea:
         0d:0f:eb:ea:91:ca:2d:2f:0f:1a:1f:75:32:99:c2:e5:32:01:
         5e:0d:9b:c2:1b:37:b7:3a:ee:ff:f7:86:f7:0d:24:37:b5:48:
         00:24:3b:cb:24:f7:c7:df:8e:ee:cd:14:2e:b7:95:9a:19:65:
         fa:b4:59:44:ec:08:7b:30:6d:2e:e1:9b:f5:92:0c:a0:66:27:
         d0:d2:65:0d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUB3ExWQbdXWzSIrjA17+zBAGr8oAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0
MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI0MTEyOTE3MDgzMloX
DTI1MTEyODE3MTMzMlowMzExMC8GA1UEAxMoMDM2NDIwNjZBQ0Q3MEVDQjg2RTMx
QTlEQkM2QjQwMzA3MjkxQjQwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMegO/Ik2JVhUf4o35dD6v1hCu13fqkGhyXHg1K3pUgNM3q5Gz0wsnjsnpEV
audNOMq1m14+EgZnqeRUdXfco9/oYJfwwP2o/51rO27S9bhqXb3p9ovjLPmZ6KmN
xFdkin3XYMt6TZoBXYfzKJovXJwEVtXMw3lDYvxhHCjJw9EVaNuk8a2OI0LKTcXw
+0ZKVhY1UIxeVWizh0nWNU38EauuBBuGgqMjfcd4sfT/rsDy2CpA014iVzPd5Hk5
mSMQucgqEU5IIs5coCZbLYzhZG50VKZCcp+AmCui8YjpV3rx/18VoOk/uNzrSK+V
5A0Kuei3Nx69kEbwNBgqkLIeMZcCAwEAAaOCAh8wggIbMB0GA1UdDgQWBBQDZCBm
rNcOy4bjGp28a0AwcpG0CjAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG
xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01
ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3
QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO
R2tCc1UuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01ZjYz
LTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy9BUzE1MzE3Ni5hc2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCVlgwDQYJ
KoZIhvcNAQELBQADggEBABC1gsxoLNemn5MdzE5ToDknrCIlTk3UkNOYL7sGhP13
DZFoyEUqDgublLmVrMz5k90dpnjnfHJtj4jAw/O/IILSeAUPlwqZnJVWTP4kUPuQ
y492dLLcGzAQpvJAs9Hh2j17+tYwSjlDgNbOkR6HGFtO92yGIE+k30ghApsy8aF5
x7Trn9ykQIg4CgppV1puajyjwVbUGnPRtAbmMjy27DuFZfalBDjGJnZWcqI0dVUg
06YN6g0P6+qRyi0vDxofdTKZwuUyAV4Nm8IbN7c67v/3hvcNJDe1SAAkO8sk98ff
ju7NFC63lZoZZfq0WUTsCHswbS7hm/WSDKBmJ9DSZQ0=
-----END CERTIFICATE-----
Generated at Mon Dec 9 07:38:32 2024 by rpki-client on console-fra.rpki-client.org