Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/AS213768.asa
File:                     AS213768.asa (raw, json)
Hash identifier:          h3rS3JyeiVp8FsFljS/efb0MZnxctnTuSuQjoONj0XI=
Subject key identifier:   76:1F:70:AD:F5:89:5D:A2:B7:A6:8C:7C:7F:0F:9C:67:F0:62:04:C3
Certificate issuer:       /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial:       72E75A5AE610BCCF3F234CAA34AA6C27C5A08F7B
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/AS213768.asa
Signing time:             Tue 15 Jul 2025 08:05:18 +0000
ASPA not before:          Tue 15 Jul 2025 08:00:18 +0000
ASPA not after:           Tue 14 Jul 2026 08:05:18 +0000
Customer ASID:            213768
Providers:                AS: 6939
                          AS: 34927
                          AS: 52025
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 15:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e7:5a:5a:e6:10:bc:cf:3f:23:4c:aa:34:aa:6c:27:c5:a0:8f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
        Validity
            Not Before: Jul 15 08:00:18 2025 GMT
            Not After : Jul 14 08:05:18 2026 GMT
        Subject: CN=761F70ADF5895DA2B7A68C7C7F0F9C67F06204C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:b2:97:01:58:59:92:d8:45:5e:99:1f:2e:
                    12:00:9e:a9:4d:c8:d8:73:86:6e:90:ca:bd:0f:cd:
                    61:4e:33:5b:a8:4c:2b:6c:76:97:68:08:9e:b2:63:
                    d9:8d:7b:b0:e3:ca:4c:53:6f:1c:95:e7:fc:38:0f:
                    fe:70:49:0a:92:ad:ad:8a:02:35:8c:b6:52:b9:12:
                    7e:89:79:92:d5:9e:78:d8:df:af:87:b6:7c:f6:d6:
                    a2:a7:82:c8:42:bd:db:84:c9:d5:c7:c0:69:78:32:
                    fa:bd:a6:46:3d:2e:c1:8c:36:d3:71:ff:d2:37:1c:
                    0d:ba:58:5d:08:43:60:fd:dc:ad:07:ec:d2:df:b1:
                    5c:f4:7a:d5:8a:1d:cc:ff:15:34:42:a3:2f:2f:41:
                    dd:c7:a1:5b:6c:8d:aa:7f:14:1b:cc:47:b7:08:a1:
                    4b:7f:71:5d:f9:7f:fa:29:27:3d:a9:57:a1:f6:4f:
                    14:13:c1:a7:e2:e2:d9:96:25:b6:7b:2c:8c:0c:d5:
                    17:e6:f9:91:34:50:49:1a:0e:d9:09:b1:ec:69:46:
                    20:b2:f4:ab:37:20:58:1c:cd:53:6e:a3:df:d3:3a:
                    f9:6a:3b:2b:ed:0a:72:ab:50:21:70:a6:dc:0c:68:
                    99:da:28:51:f9:70:52:88:d5:26:fd:dc:31:c7:77:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1F:70:AD:F5:89:5D:A2:B7:A6:8C:7C:7F:0F:9C:67:F0:62:04:C3
            X509v3 Authority Key Identifier:
                keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/AS213768.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213768

    Signature Algorithm: sha256WithRSAEncryption
         e2:51:8d:a7:05:1e:77:26:02:e0:8b:be:9c:97:7d:6c:9f:9a:
         f0:1e:fd:29:a4:92:b4:e5:f0:3a:df:ec:4f:c7:32:e6:82:90:
         7a:92:6f:fd:b9:51:d0:48:c8:38:99:ab:53:75:3f:c2:e3:ee:
         da:42:a9:49:2f:b2:ec:a0:35:48:6f:59:27:57:73:8f:35:73:
         25:32:f9:d5:df:cc:40:42:81:2a:d3:a3:50:fd:55:d9:7d:3f:
         0c:37:46:b5:1e:dc:92:50:78:ad:66:8a:c4:27:f9:31:2c:b4:
         a0:5f:f2:f4:ee:cd:b5:9c:e0:a8:94:d3:d0:a9:12:c4:37:5b:
         bc:4c:5e:2f:1d:2a:a0:d0:96:7d:95:18:d8:82:b5:dc:72:76:
         d9:0b:7e:4d:1a:21:76:67:68:be:e0:94:ec:d7:25:f9:d6:26:
         c8:43:47:57:71:3b:6c:9c:75:67:7f:3a:05:a1:c0:7c:a1:e5:
         4c:0a:ea:c5:78:cb:71:97:41:8c:f7:78:a1:7b:5c:55:59:60:
         d9:25:5e:03:24:b0:b5:3d:d6:03:fe:52:26:d6:19:27:d2:45:
         6d:54:51:c2:cf:e0:8c:e9:4d:4e:1a:e0:a3:aa:5e:e2:7f:cf:
         1c:e6:a1:43:b4:dd:31:06:91:cf:90:d5:48:d6:9a:48:1d:b3:
         cf:90:40:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----