Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa
File:                     AS48070.asa (raw, json)
Hash identifier:          g8nZ+0797JM2RRPSAMOVry4oQ3UIESPrss4OXPuwkjo=
Subject key identifier:   0D:C5:23:67:4D:2B:0D:14:ED:DD:D8:4E:93:C3:A3:5B:BB:2E:10:A8
Certificate issuer:       /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial:       135C7AA91D341D19892536139C17CFDDC4A3F45A
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa
Signing time:             Thu 28 Aug 2025 11:31:20 +0000
ASPA not before:          Thu 28 Aug 2025 11:26:20 +0000
ASPA not after:           Thu 27 Aug 2026 11:31:20 +0000
Customer ASID:            48070
Providers:                AS: 174
                          AS: 1299
                          AS: 61049
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 31 Aug 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5c:7a:a9:1d:34:1d:19:89:25:36:13:9c:17:cf:dd:c4:a3:f4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
        Validity
            Not Before: Aug 28 11:26:20 2025 GMT
            Not After : Aug 27 11:31:20 2026 GMT
        Subject: CN=0DC523674D2B0D14EDDDD84E93C3A35BBB2E10A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:12:04:86:7d:59:55:91:dc:22:51:dd:3e:
                    e1:b7:cf:73:c8:92:ad:1f:f1:b7:ec:3d:76:50:95:
                    cc:f0:40:55:c4:8a:0e:87:1a:cc:f1:e5:53:56:d3:
                    73:23:ce:43:65:fe:cc:a4:44:03:35:8f:62:54:14:
                    98:98:1c:c2:07:5a:c3:16:f2:43:1b:2e:18:96:48:
                    e9:78:2a:4f:b6:7e:01:7f:d5:8a:49:13:b4:bd:b1:
                    5d:11:02:84:9f:2c:fd:32:e8:63:77:9a:50:2c:d2:
                    06:b5:e2:bf:61:fb:cd:64:c7:11:da:fd:8f:95:38:
                    5a:70:27:4e:08:88:1e:bf:a8:87:1c:bc:92:0b:7f:
                    5f:04:d9:a5:ba:0b:b1:e3:88:ea:82:3a:c2:91:dd:
                    54:cc:c9:f2:d3:40:25:0a:39:9a:48:16:85:02:0c:
                    db:60:6c:fa:00:32:29:4c:ce:02:e2:51:0a:ee:58:
                    bd:9e:bd:ed:7f:85:1f:cd:f3:9c:bd:17:71:ba:ef:
                    62:cf:7a:40:18:f2:bf:53:ec:92:0c:fd:f1:20:9f:
                    57:fd:4a:6e:ed:02:d7:83:7f:9d:76:7c:d3:21:43:
                    be:c3:97:a7:8d:19:59:1a:5f:45:f5:ec:4c:ae:6d:
                    98:94:88:3b:5c:2f:b8:9a:ca:81:ea:34:0b:fa:20:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:23:67:4D:2B:0D:14:ED:DD:D8:4E:93:C3:A3:5B:BB:2E:10:A8
            X509v3 Authority Key Identifier:
                keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48070

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:a4:9d:7d:ae:c8:84:20:e0:4a:f7:7c:83:a9:39:34:e2:
         56:33:de:bc:32:f4:b5:61:c1:0e:95:9b:81:01:ef:45:54:d4:
         3d:5c:0b:73:ba:e6:3e:15:b7:74:b4:41:82:34:4b:25:5b:2e:
         e6:67:d9:87:58:f3:89:d8:15:7a:1e:16:51:f0:02:83:ec:d5:
         ab:eb:90:8c:24:5a:45:10:69:6c:dd:6a:79:be:02:6a:99:9e:
         02:cf:1b:76:78:e6:77:37:21:d6:b9:d3:18:43:eb:83:c9:01:
         4d:19:93:ce:2c:35:36:1c:13:5f:da:28:0c:4d:de:88:a8:d4:
         00:93:34:58:32:e4:a9:0e:42:22:1a:f7:66:1f:e4:cf:8e:78:
         1f:99:83:31:c0:ef:b9:9f:9e:40:2b:ff:c2:1d:c6:1f:d8:eb:
         12:9e:a6:e8:6a:f6:27:cd:6b:6b:ae:8a:7b:0a:e0:4e:bf:e0:
         70:dc:78:54:66:b2:54:ec:68:16:32:05:46:51:de:17:e3:f1:
         64:b9:49:7c:b0:76:22:d8:cc:b4:d5:75:5f:2a:21:3e:bd:26:
         9d:95:93:54:47:cb:89:d1:0a:56:d3:e5:c4:34:4a:99:90:88:
         ef:8d:fe:de:c7:9a:f9:69:02:a3:49:68:9f:9c:ea:00:44:6f:
         69:ab:4c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 01:45:43 2025 by rpki-client