Autonomous System Provider Authorization

$ rpki-client -vvf krill.uta.ng/repo/pongery/0/AS200160.asa
File:                     AS200160.asa (raw, json)
Hash identifier:          2BzvFHcBMmp/M1ePB77IDIqyWHwXFyi4XEE3ug96dfQ=
Subject key identifier:   A3:15:D4:2B:33:41:D0:29:8D:1C:63:30:09:DB:B1:80:56:CB:BB:B3
Certificate issuer:       /CN=2cbf9f5d2601fcaafffbd2b4ee033f474a726352
Certificate serial:       43B0568614AE415A5A5006DA10C1C9C227771C3B
Authority key identifier: 2C:BF:9F:5D:26:01:FC:AA:FF:FB:D2:B4:EE:03:3F:47:4A:72:63:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer
Subject info access:      rsync://krill.uta.ng/repo/pongery/0/AS200160.asa
Signing time:             Fri 17 Oct 2025 19:06:32 +0000
ASPA not before:          Fri 17 Oct 2025 19:01:32 +0000
ASPA not after:           Fri 16 Oct 2026 19:06:32 +0000
Customer ASID:            200160
Providers:                AS: 945
                          AS: 6939
                          AS: 15353
                          AS: 21738
                          AS: 29632
                          AS: 34465
                          AS: 34549
                          AS: 34927
                          AS: 36369
                          AS: 48605
                          AS: 140731
                          AS: 150249
                          AS: 199762
                          AS: 203686
                          AS: 203913
                          AS: 210152
                          AS: 210475
                          AS: 212001
                          AS: 400304
                          AS: 400818
Validation:               OK
Signature path:           rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.crl
                          rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b0:56:86:14:ae:41:5a:5a:50:06:da:10:c1:c9:c2:27:77:1c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cbf9f5d2601fcaafffbd2b4ee033f474a726352
        Validity
            Not Before: Oct 17 19:01:32 2025 GMT
            Not After : Oct 16 19:06:32 2026 GMT
        Subject: CN=A315D42B3341D0298D1C633009DBB18056CBBBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:ce:ff:b9:ed:3d:d0:a2:cb:1b:1e:89:ee:
                    fd:0d:a8:8d:65:d7:e9:e0:18:fa:6a:01:8c:11:d7:
                    2c:31:cf:c5:43:74:99:b2:81:19:2e:a6:5e:bb:c0:
                    23:f3:87:a1:bd:04:5d:b8:bc:a6:6f:6c:8f:48:b4:
                    73:4a:ff:be:8a:dd:11:48:86:de:93:b9:46:8d:3b:
                    db:ea:6f:e7:7f:a5:d7:55:fa:99:32:5e:31:08:23:
                    83:eb:ac:4d:e7:b7:45:85:f8:46:96:03:f4:3f:41:
                    ac:6d:20:ae:be:ce:8a:00:16:4e:c9:f8:df:bf:17:
                    68:de:55:9e:71:d4:fb:74:de:74:52:2f:4c:b1:0b:
                    27:27:1d:a7:24:d4:8d:c6:7c:c3:0d:99:dc:9e:e4:
                    11:5c:55:b7:42:30:83:35:d7:86:13:66:19:86:cb:
                    06:25:77:12:89:b4:08:52:ca:cf:45:ec:a7:7c:bf:
                    72:08:66:a7:40:bd:f3:37:a6:aa:01:f5:41:70:b3:
                    2d:d6:35:98:01:20:5a:c9:8f:57:bb:dd:02:cd:3c:
                    dc:9c:a3:31:61:85:63:93:32:0b:5b:f6:b1:17:a5:
                    b7:1c:c2:07:b2:9f:dd:78:a8:66:13:f6:de:ef:06:
                    89:d2:1e:40:f4:0f:a2:8c:0d:c4:82:0a:3b:82:86:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:15:D4:2B:33:41:D0:29:8D:1C:63:30:09:DB:B1:80:56:CB:BB:B3
            X509v3 Authority Key Identifier:
                keyid:2C:BF:9F:5D:26:01:FC:AA:FF:FB:D2:B4:EE:03:3F:47:4A:72:63:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.uta.ng/repo/pongery/0/2CBF9F5D2601FCAAFFFBD2B4EE033F474A726352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL-fXSYB_Kr_-9K07gM_R0pyY1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.uta.ng/repo/pongery/0/AS200160.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200160

    Signature Algorithm: sha256WithRSAEncryption
         78:70:7f:9e:8b:f5:a7:53:c4:f0:77:6a:79:62:11:dd:5c:c1:
         5c:68:23:e5:df:47:6f:97:4d:fa:9a:c9:d0:ad:a0:62:bc:81:
         0d:d8:da:7c:3f:55:f0:8a:85:8f:52:1b:c3:ba:7e:09:a5:f1:
         98:a8:9f:fb:b3:16:fa:cd:70:a9:32:46:48:5a:04:5a:1c:79:
         2d:25:30:41:e8:19:31:36:18:14:20:5c:c4:c6:95:49:de:0e:
         32:77:e9:b1:c7:e1:44:11:c9:cd:79:58:a2:75:2a:f5:bb:61:
         ff:fd:82:99:ec:1b:a5:39:e1:a8:f7:b4:38:0e:75:e3:8a:cf:
         0d:34:f0:f2:9c:78:cf:d2:e3:39:3b:ae:dc:58:40:16:53:c0:
         3c:f5:af:12:e2:28:32:36:f3:01:3c:aa:89:ff:ff:e1:bb:d7:
         68:97:ec:4e:0c:25:f2:fb:83:18:2d:46:20:5f:74:10:41:b7:
         ae:34:0a:1c:05:e0:ef:44:be:40:71:3a:1b:4c:96:16:37:39:
         7a:8c:a8:0d:29:af:ad:90:70:00:5b:11:17:8e:44:b2:e5:55:
         5d:0b:a4:cb:97:ea:11:81:42:d7:78:9c:59:ac:57:aa:c6:e2:
         ef:95:90:f7:82:f6:0e:e4:94:df:80:1b:2d:aa:cc:cf:b6:80:
         77:fa:62:5f
-----BEGIN CERTIFICATE-----
MIIElzCCA3+gAwIBAgIUQ7BWhhSuQVpaUAbaEMHJwid3HDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmNiZjlmNWQyNjAxZmNhYWZmZmJkMmI0ZWUwMzNmNDc0
YTcyNjM1MjAeFw0yNTEwMTcxOTAxMzJaFw0yNjEwMTYxOTA2MzJaMDMxMTAvBgNV
BAMTKEEzMTVENDJCMzM0MUQwMjk4RDFDNjMzMDA5REJCMTgwNTZDQkJCQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhM7/ue090KLLGx6J7v0NqI1l
1+ngGPpqAYwR1ywxz8VDdJmygRkupl67wCPzh6G9BF24vKZvbI9ItHNK/76K3RFI
ht6TuUaNO9vqb+d/pddV+pkyXjEII4PrrE3nt0WF+EaWA/Q/QaxtIK6+zooAFk7J
+N+/F2jeVZ5x1Pt03nRSL0yxCycnHack1I3GfMMNmdye5BFcVbdCMIM114YTZhmG
ywYldxKJtAhSys9F7Kd8v3IIZqdAvfM3pqoB9UFwsy3WNZgBIFrJj1e73QLNPNyc
ozFhhWOTMgtb9rEXpbccwgeyn914qGYT9t7vBonSHkD0D6KMDcSCCjuChmuXAgMB
AAGjggGhMIIBnTAdBgNVHQ4EFgQUoxXUKzNB0CmNHGMwCduxgFbLu7MwHwYDVR0j
BBgwFoAULL+fXSYB/Kr/+9K07gM/R0pyY1IwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8va3JpbGwudXRhLm5nL3JlcG8vcG9uZ2VyeS8w
LzJDQkY5RjVEMjYwMUZDQUFGRkZCRDJCNEVFMDMzRjQ3NEE3MjYzNTIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9MTC1mWFNZQl9Lcl8tOUswN2dNX1IwcHlZMUku
Y2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5bmM6Ly9rcmlsbC51
dGEubmcvcmVwby9wb25nZXJ5LzAvQVMyMDAxNjAuYXNhMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAw3gMA0GCSqGSIb3
DQEBCwUAA4IBAQB4cH+ei/WnU8Twd2p5YhHdXMFcaCPl30dvl036msnQraBivIEN
2Np8P1XwioWPUhvDun4JpfGYqJ/7sxb6zXCpMkZIWgRaHHktJTBB6BkxNhgUIFzE
xpVJ3g4yd+mxx+FEEcnNeViidSr1u2H//YKZ7BulOeGo97Q4DnXjis8NNPDynHjP
0uM5O67cWEAWU8A89a8S4igyNvMBPKqJ///hu9dol+xODCXy+4MYLUYgX3QQQbeu
NAocBeDvRL5AcTobTJYWNzl6jKgNKa+tkHAAWxEXjkSy5VVdC6TLl+oRgULXeJxZ
rFeqxuLvlZD3gvYO5JTfgBstqszPtoB3+mJf
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:18:57 2025 by rpki-client