Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AS214720.asa
File:                     AS214720.asa (raw, json)
Hash identifier:          hnP8GbqTWKybeF2t8CLvmja+ltaRCzJDrYHHLB8PYL8=
Subject key identifier:   39:94:CF:01:3C:90:2E:4B:34:92:F4:5B:E4:68:CD:A9:60:AC:7F:91
Certificate issuer:       /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial:       3DBA6D7FF1C48F7D96F952DE4D11989FDD0100C1
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AS214720.asa
Signing time:             Fri 24 Oct 2025 15:41:53 +0000
ASPA not before:          Fri 24 Oct 2025 15:36:53 +0000
ASPA not after:           Fri 23 Oct 2026 15:41:53 +0000
Customer ASID:            214720
Providers:                AS: 44324
                          AS: 53808
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ba:6d:7f:f1:c4:8f:7d:96:f9:52:de:4d:11:98:9f:dd:01:00:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
        Validity
            Not Before: Oct 24 15:36:53 2025 GMT
            Not After : Oct 23 15:41:53 2026 GMT
        Subject: CN=3994CF013C902E4B3492F45BE468CDA960AC7F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:bd:a3:e3:b8:3d:c5:e6:87:c0:d0:27:2e:
                    97:7f:29:30:85:49:d7:24:c2:ba:51:cc:70:df:7a:
                    a4:63:a2:40:c3:72:fe:31:fd:10:d7:17:82:80:d4:
                    f4:6f:f9:fc:f1:1f:53:0a:c7:b7:29:68:6f:a7:37:
                    ac:16:2c:d1:2e:d1:8a:fc:86:37:dd:59:d4:4d:8c:
                    b4:f3:da:15:da:22:b6:cc:5f:d7:29:0a:9a:ae:02:
                    21:4d:29:ef:f3:eb:87:8d:7a:82:90:c6:b7:25:4a:
                    0e:2b:3c:f0:35:b2:17:a7:5e:85:30:dd:40:fd:b3:
                    45:f2:b5:4d:90:d0:0d:12:c9:72:56:27:48:03:3c:
                    28:6d:03:ff:af:57:71:b7:05:9d:2a:f6:ba:d8:29:
                    9c:5c:39:63:9c:0a:8c:d5:76:15:77:7f:7b:51:27:
                    46:19:5e:16:69:ea:21:0c:ba:76:bb:d2:0c:8d:52:
                    96:02:b1:5f:ec:cb:86:3d:3b:c7:d0:f7:bc:19:05:
                    f7:82:84:7a:d3:83:2d:3a:ac:96:10:7e:28:1a:0a:
                    53:f3:26:34:88:17:95:64:49:46:93:68:5f:c1:dd:
                    6c:43:f8:03:17:bb:79:3f:15:48:89:e9:3f:84:a3:
                    35:e9:cb:1a:14:1c:cb:bc:56:dd:4f:bb:cb:78:bf:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:94:CF:01:3C:90:2E:4B:34:92:F4:5B:E4:68:CD:A9:60:AC:7F:91
            X509v3 Authority Key Identifier:
                keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AS214720.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214720

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:26:a1:f9:45:31:e9:72:32:ff:1c:79:e4:1d:de:a5:c6:
         04:85:78:67:34:9f:3a:20:07:e6:d7:29:75:de:7a:61:48:2b:
         ed:52:5b:90:8c:5b:6d:e8:a8:11:14:6f:5d:e3:ff:db:b1:92:
         a0:de:35:1a:86:5c:ca:f2:e9:df:65:a2:28:56:9b:ef:a8:89:
         4a:6d:49:d7:5f:cb:9d:83:e2:9c:36:2e:c7:ad:54:fa:c1:99:
         1e:79:82:24:3c:12:1a:81:d7:3b:00:3b:0a:54:b2:0f:75:2d:
         1c:88:3f:b6:6f:fa:f0:ea:1f:d1:9b:79:8f:d6:35:dd:fc:51:
         82:4e:9f:37:6e:bf:7c:29:a8:0b:b1:9b:ad:60:ba:76:4e:4b:
         cf:e7:83:cf:96:d1:63:b4:41:99:27:bb:6f:3c:6c:1d:b5:27:
         ec:b8:4b:d8:c9:4a:26:50:15:1d:16:86:0a:aa:e6:6f:ed:5a:
         c7:46:1d:bc:b8:18:c5:f6:be:34:41:06:4d:64:0c:75:3f:d7:
         39:2c:06:07:3d:76:46:f3:bd:e4:57:39:8d:6c:f8:f1:e1:79:
         a7:ac:6c:2d:e4:fb:1a:4f:e0:83:98:2f:e9:d3:8d:75:5c:3a:
         12:59:0b:54:e0:6f:45:ae:dd:67:d4:24:f6:cf:4b:a4:73:4f:
         ae:85:86:b2
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUPbptf/HEj32W+VLeTRGYn90BAMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3
YjY0YmMwZTAeFw0yNTEwMjQxNTM2NTNaFw0yNjEwMjMxNTQxNTNaMDMxMTAvBgNV
BAMTKDM5OTRDRjAxM0M5MDJFNEIzNDkyRjQ1QkU0NjhDREE5NjBBQzdGOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0er2j47g9xeaHwNAnLpd/KTCF
SdckwrpRzHDfeqRjokDDcv4x/RDXF4KA1PRv+fzxH1MKx7cpaG+nN6wWLNEu0Yr8
hjfdWdRNjLTz2hXaIrbMX9cpCpquAiFNKe/z64eNeoKQxrclSg4rPPA1shenXoUw
3UD9s0XytU2Q0A0SyXJWJ0gDPChtA/+vV3G3BZ0q9rrYKZxcOWOcCozVdhV3f3tR
J0YZXhZp6iEMuna70gyNUpYCsV/sy4Y9O8fQ97wZBfeChHrTgy06rJYQfigaClPz
JjSIF5VkSUaTaF/B3WxD+AMXu3k/FUiJ6T+EozXpyxoUHMu8Vt1Pu8t4v8XPAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUOZTPATyQLks0kvRb5GjNqWCsf5EwHwYDVR0j
BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj
MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50
a3ZBNC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUt
NGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8wL0FTMjE0NzIwLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNGwDANBgkq
hkiG9w0BAQsFAAOCAQEAC08moflFMelyMv8ceeQd3qXGBIV4ZzSfOiAH5tcpdd56
YUgr7VJbkIxbbeioERRvXeP/27GSoN41GoZcyvLp32WiKFab76iJSm1J11/LnYPi
nDYux61U+sGZHnmCJDwSGoHXOwA7ClSyD3UtHIg/tm/68Oof0Zt5j9Y13fxRgk6f
N26/fCmoC7GbrWC6dk5Lz+eDz5bRY7RBmSe7bzxsHbUn7LhL2MlKJlAVHRaGCqrm
b+1ax0YdvLgYxfa+NEEGTWQMdT/XOSwGBz12RvO95Fc5jWz48eF5p6xsLeT7Gk/g
g5gv6dONdVw6ElkLVOBvRa7dZ9Qk9s9LpHNProWGsg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 00:11:02 2025 by rpki-client