Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/AS205329.asa
File:                     AS205329.asa (raw, json)
Hash identifier:          bO1aR+g5FlFCTFRF/4Bm8O87N5QgNwEYM6lqrTrqZFM=
Subject key identifier:   B0:12:4C:92:3A:8F:98:AF:F8:FD:D4:CA:4F:B0:9A:BC:81:99:16:3B
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       31EB05DEED8973233842F358934D9341229F129E
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/AS205329.asa
Signing time:             Sat 05 Jul 2025 16:22:26 +0000
ASPA not before:          Sat 05 Jul 2025 16:17:26 +0000
ASPA not after:           Sat 04 Jul 2026 16:22:26 +0000
Customer ASID:            205329
Providers:                AS: 945
                          AS: 983
                          AS: 6939
                          AS: 7720
                          AS: 8894
                          AS: 9409
                          AS: 20473
                          AS: 34927
                          AS: 41051
                          AS: 131657
                          AS: 134823
                          AS: 151364
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 16:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:eb:05:de:ed:89:73:23:38:42:f3:58:93:4d:93:41:22:9f:12:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Jul  5 16:17:26 2025 GMT
            Not After : Jul  4 16:22:26 2026 GMT
        Subject: CN=B0124C923A8F98AFF8FDD4CA4FB09ABC8199163B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:73:dc:f6:1b:e1:92:a6:7a:9e:39:1c:84:
                    ed:93:43:db:ba:35:74:e7:fb:7a:9a:1b:fb:e5:0c:
                    eb:28:ea:e3:66:90:48:e9:bd:11:d4:04:08:a0:b3:
                    88:d3:37:d9:1f:92:e5:c0:62:0b:c5:b4:e2:2e:17:
                    42:4f:df:ff:23:59:0a:0d:f4:04:d9:ff:de:84:f5:
                    2b:80:a4:52:a0:48:f3:ea:4d:ec:97:a7:fd:27:25:
                    fc:31:67:01:56:91:14:d5:a7:d6:ac:9a:e6:ab:20:
                    1c:f3:8f:57:18:a2:66:f8:2b:f8:ee:c6:47:39:53:
                    94:bf:b4:2c:ff:24:bc:b3:8e:a9:29:be:b1:a1:26:
                    24:a8:49:6e:55:46:2e:fa:6d:6f:84:0e:22:1b:9f:
                    75:45:5a:f7:d7:c1:61:72:c6:8b:18:b0:e2:53:ff:
                    00:2b:7b:a8:61:06:e0:46:69:25:b2:a0:09:c3:01:
                    f0:67:93:58:16:77:b0:01:a6:67:6f:0d:af:71:58:
                    14:9f:4d:82:39:3d:68:2f:a3:9b:d9:19:94:17:48:
                    49:12:ed:f2:2c:56:c1:e6:10:30:84:34:e3:14:95:
                    65:98:4f:83:a5:0c:d2:ff:96:2f:3c:e0:f3:23:0c:
                    da:75:5f:e8:cc:8b:5a:10:e3:a6:82:88:c7:5e:93:
                    9e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:12:4C:92:3A:8F:98:AF:F8:FD:D4:CA:4F:B0:9A:BC:81:99:16:3B
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/AS205329.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205329

    Signature Algorithm: sha256WithRSAEncryption
         99:ae:b3:ba:a3:7c:18:fe:73:a7:4f:0e:22:4c:67:b1:2f:c4:
         10:5b:7d:14:48:f7:19:4d:64:14:e8:5c:fd:a4:6d:ee:3b:42:
         d2:03:a2:e6:e3:9a:87:49:17:7a:6b:a0:75:cc:47:05:b2:ff:
         ba:8d:15:dd:12:a4:b7:4e:1b:4a:54:4a:c7:58:b3:c5:d9:45:
         13:a6:20:f9:1f:f5:3d:bf:d0:59:46:0f:cd:f9:b9:e1:3d:39:
         49:8c:54:d5:f0:6e:56:e3:be:e4:0b:bd:97:a2:c6:b8:f8:43:
         f6:60:35:c9:ed:44:33:95:76:cc:59:ce:e9:d3:74:27:d9:f2:
         72:f0:e7:be:51:a0:47:ad:dc:6c:4b:40:6f:1c:aa:5b:17:2e:
         94:d3:c8:23:a1:ce:c5:2b:9d:be:b7:70:16:c4:c6:4d:d8:56:
         5e:a0:18:ab:f2:b3:6c:03:fc:b9:d0:67:1e:39:c6:12:9e:db:
         39:5c:17:ac:fd:f9:39:8e:31:e7:e5:0b:7d:b9:ce:6a:95:17:
         97:b8:78:39:31:25:2d:cf:bc:90:d2:82:44:0d:0e:b1:e3:a3:
         3e:f2:88:9d:5f:66:5d:dd:07:c1:57:10:a0:12:fb:86:0c:ad:
         0e:0d:7d:4c:ce:af:5c:36:3c:dd:96:81:7e:04:9c:31:77:e5:
         15:5a:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:41:46 2025 by rpki-client