Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/AS211575.asa
File:                     AS211575.asa (raw, json)
Hash identifier:          nPJ1LprS9/u9GgaDNqu2HsXaB9B+xrAoBi5odzSyQpQ=
Subject key identifier:   03:FC:22:EE:52:AB:F8:F9:AE:73:44:79:E6:4F:68:8A:F4:66:F1:62
Certificate issuer:       /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial:       223887F4B6A4412EB1A34738B350C12537929C4B
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/AS211575.asa
Signing time:             Mon 06 Oct 2025 08:37:36 +0000
ASPA not before:          Mon 06 Oct 2025 08:32:36 +0000
ASPA not after:           Mon 05 Oct 2026 08:37:36 +0000
Customer ASID:            211575
Providers:                AS: 6939
                          AS: 7720
                          AS: 20473
                          AS: 31898
                          AS: 44324
                          AS: 53808
                          AS: 210352
                          AS: 212895
                          AS: 214439
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Oct 2025 09:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:87:f4:b6:a4:41:2e:b1:a3:47:38:b3:50:c1:25:37:92:9c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
        Validity
            Not Before: Oct  6 08:32:36 2025 GMT
            Not After : Oct  5 08:37:36 2026 GMT
        Subject: CN=03FC22EE52ABF8F9AE734479E64F688AF466F162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:db:db:bd:36:a8:fa:19:18:d5:fe:71:06:
                    e2:38:52:34:a3:ff:e8:2f:96:d6:44:4f:3e:a3:a1:
                    55:36:e9:99:f4:97:f4:69:39:83:38:42:2c:64:48:
                    af:3d:ab:b1:56:7f:a4:08:6f:1c:1a:b2:c5:4b:7a:
                    51:8d:f5:a2:89:51:1d:8b:4f:5f:43:f4:ea:07:6c:
                    29:a2:95:5a:4b:1d:02:d6:a1:96:00:49:fb:a4:29:
                    e7:5b:53:92:dd:83:1b:24:be:8e:d9:65:1f:b4:68:
                    f6:02:09:32:74:e2:a5:67:5a:73:bd:01:31:c7:9d:
                    0e:b2:d5:d2:cb:37:67:f1:64:21:6b:ad:a3:db:04:
                    94:e6:48:0d:58:16:2d:e9:2f:52:fb:9d:f4:8b:d2:
                    80:a6:67:ac:e3:23:ec:14:a2:33:7e:7d:46:f5:1d:
                    61:f5:bb:2e:59:0a:af:65:10:e1:59:a5:c5:d3:28:
                    75:09:a6:9a:94:de:d7:3e:6f:e6:42:5c:32:9f:34:
                    99:10:4f:50:f4:b6:55:fd:51:ab:73:29:7c:30:d5:
                    04:7c:26:7a:9d:36:e7:5c:ea:fd:e2:ff:79:6f:a7:
                    02:22:d2:6c:73:c1:d0:82:9e:7a:1e:f2:0d:59:b8:
                    ca:dc:d5:41:80:35:2e:24:ed:8f:1f:b8:16:a1:bd:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FC:22:EE:52:AB:F8:F9:AE:73:44:79:E6:4F:68:8A:F4:66:F1:62
            X509v3 Authority Key Identifier:
                keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/AS211575.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211575

    Signature Algorithm: sha256WithRSAEncryption
         a0:53:8a:7a:65:e8:94:5d:a0:3b:1b:fb:2d:3a:a2:d2:03:fc:
         9b:53:4f:7c:36:c4:58:70:16:fe:00:6a:34:9c:12:1f:5d:0e:
         6c:57:0c:2f:42:a5:d8:39:49:4c:83:fa:0d:16:c5:08:a3:f2:
         39:2f:c4:82:66:b4:62:50:55:62:a2:9c:dc:96:37:f0:6c:99:
         79:f4:db:89:07:95:70:94:97:a8:74:5a:a8:ad:e0:64:ff:69:
         c5:af:4b:1c:ab:05:b4:fc:c7:95:7c:3f:3f:fe:a8:de:52:3c:
         2e:c0:7a:d9:df:6a:67:bf:32:7e:0d:93:35:9a:7d:87:e2:a7:
         24:39:6a:9b:23:7b:da:16:49:86:ef:83:73:86:bc:33:a8:65:
         d6:58:e1:15:18:3b:62:af:0d:af:40:12:41:42:34:9d:bf:07:
         59:7d:5d:f5:0f:35:d0:aa:54:ee:d6:cf:9f:dc:bb:e7:f6:e2:
         e5:c4:62:dc:ab:ae:16:d3:26:d9:1c:35:ab:c2:ca:c1:63:07:
         cb:95:7c:13:bf:06:f1:67:8d:70:53:01:10:90:ea:9a:58:d4:
         c8:31:da:03:0f:00:c0:09:7d:be:c6:18:5b:bb:00:7d:83:9e:
         49:fd:0f:55:88:78:fd:1c:1e:10:d4:08:c2:d2:13:80:e1:a9:
         54:b1:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 00:01:42 2025 by rpki-client