Autonomous System Provider Authorization

$ rpki-client -vvvf repo.nkn.in/repo/PDNS/0/AS59182.asa
File:                     AS59182.asa (raw, json)
Hash identifier:          pXwD2tP85p381hInItCcU8eeYnhn4s+LctK+pQb7c68=
Subject key identifier:   CC:AF:CA:C2:04:92:96:D1:45:EE:5C:64:1F:BC:8C:A0:4F:28:F1:AA
Certificate issuer:       /CN=B9262144237A3404C105DA97D69318D9BE295E42
Certificate serial:       6BD95C27D8EAD2569D657F67FB26558ED3908206
Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
Authority info access:    rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject info access:      rsync://repo.nkn.in/repo/PDNS/0/AS59182.asa
Signing time:             Mon 26 Oct 2026 11:06:21 +0000
ASPA not before:          Mon 26 Oct 2026 11:01:21 +0000
ASPA not after:           Mon 25 Oct 2027 11:06:21 +0000
Customer ASID:            59182
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
                          rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
                          rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 17:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d9:5c:27:d8:ea:d2:56:9d:65:7f:67:fb:26:55:8e:d3:90:82:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42
        Validity
            Not Before: Oct 26 11:01:21 2026 GMT
            Not After : Oct 25 11:06:21 2027 GMT
        Subject: CN=CCAFCAC2049296D145EE5C641FBC8CA04F28F1AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:6e:36:a7:9e:1f:e9:66:31:16:4c:de:fc:
                    19:95:6d:e4:13:2b:70:74:2e:4a:d6:99:f8:5e:d5:
                    4c:e4:e8:53:b0:9c:c0:1d:1f:4c:c9:98:ef:7e:e9:
                    b4:59:a4:7a:12:9d:a5:f4:0a:66:33:34:f8:80:8b:
                    8e:cb:f2:9f:b1:95:4a:95:41:9e:c9:32:25:84:f5:
                    21:a8:84:0c:ee:b4:b4:2e:ae:71:a5:41:a3:73:14:
                    c8:db:15:9f:f5:47:78:2e:0e:93:1a:c9:fe:45:53:
                    63:f7:a4:15:0c:f0:e3:ec:77:db:73:3a:91:07:5c:
                    e1:f5:e1:7b:5e:6b:ca:e0:c4:fc:2c:be:82:87:5b:
                    d8:20:6e:aa:f6:ca:35:5f:34:c9:b9:93:df:96:f9:
                    d3:01:f3:6d:43:ff:82:94:0e:c4:9c:cc:6a:49:ee:
                    98:4e:1b:85:c0:47:39:93:67:63:48:da:b9:91:2e:
                    68:3f:ad:7b:f9:02:49:bb:ed:10:39:cd:30:87:7c:
                    8c:d4:0c:bc:a1:c3:47:67:13:84:23:ab:1f:3f:16:
                    3f:01:53:a5:87:b3:0e:da:66:3c:1f:1d:0d:29:df:
                    1e:55:3a:13:38:5e:12:e5:b3:aa:d9:eb:15:bb:7e:
                    1b:8e:d4:36:0f:83:82:75:f2:29:34:87:a0:00:1f:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AF:CA:C2:04:92:96:D1:45:EE:5C:64:1F:BC:8C:A0:4F:28:F1:AA
            X509v3 Authority Key Identifier:
                keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/AS59182.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59182

    Signature Algorithm: sha256WithRSAEncryption
         ab:7d:7d:65:bc:fb:4d:18:03:32:1f:97:e6:af:68:d7:18:b6:
         e4:53:eb:a3:28:a0:97:ff:18:6f:15:60:59:7f:1b:fa:fe:36:
         f1:0a:d8:5d:fe:19:97:4c:91:b9:0c:44:8f:21:9f:71:4c:36:
         db:7e:77:74:25:d7:f8:b5:cf:72:53:d6:6c:ba:d8:3f:c8:b8:
         b3:09:8e:a2:c7:60:45:3b:a4:41:23:1a:9a:ee:59:ad:a9:8d:
         cf:da:40:2a:2f:b8:44:46:54:03:87:e7:f9:fb:81:b9:5b:98:
         73:ea:aa:95:1a:37:61:28:fb:b1:b4:9a:9f:2c:47:ac:c5:23:
         5f:5f:9c:ea:e0:d2:46:14:37:32:e5:fa:fd:c1:0c:72:51:9f:
         b7:25:e2:7a:65:1c:d4:76:51:37:ca:c3:3d:45:4c:a5:4f:57:
         0d:1d:d1:4e:87:9c:70:a7:43:3e:80:c6:78:c9:36:27:b8:9f:
         45:a4:54:4f:58:c5:4a:d1:fd:66:7a:ed:16:7e:32:b7:cd:0b:
         d0:d1:46:7a:c5:6a:fe:cd:6d:2d:a1:e3:c7:92:10:ef:ff:1a:
         b1:50:1f:73:06:01:ad:01:d4:3f:40:75:76:f8:68:3e:38:9c:
         e3:9f:69:aa:31:13:9f:af:8d:ab:63:96:80:d5:6c:b4:6b:c2:
         df:bd:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:24:27 2026 by rpki-client