Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/UjEm5kabhW9vr-i3NwoF0aw5w6s.asa
File:                     UjEm5kabhW9vr-i3NwoF0aw5w6s.asa (raw, json)
Hash identifier:          Td7JO2SZVJYr3H8UIyYpWtvYcdHpVvCG4vUJYY1jjbc=
Subject key identifier:   52:31:26:E6:46:9B:85:6F:6F:AF:E8:B7:37:0A:05:D1:AC:39:C3:AB
Certificate issuer:       /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial:       01CD
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/UjEm5kabhW9vr-i3NwoF0aw5w6s.asa
Signing time:             Mon 14 Sep 2026 07:07:43 +0000
ASPA not before:          Mon 14 Sep 2026 07:07:43 +0000
ASPA not after:           Tue 31 Aug 2027 00:00:00 +0000
Customer ASID:            152735
Providers:                AS: 7131
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
                          rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
        Validity
            Not Before: Sep 14 07:07:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6aa79d3f-53aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:b7:b2:d5:52:2b:13:fa:3c:24:42:a9:2f:
                    10:db:01:41:5b:e3:4c:2e:93:46:ac:1c:64:a3:47:
                    7d:de:65:2e:5c:fe:0d:78:43:2d:34:5b:6a:2f:0c:
                    9f:4b:e4:93:f7:0e:dc:de:87:37:63:a1:07:34:15:
                    3c:fb:57:72:8e:db:e4:6e:46:24:86:0d:02:d8:8d:
                    df:a3:d6:e9:f4:36:51:8f:b4:1a:61:0c:ef:34:3b:
                    3f:54:9e:a6:65:a0:f5:76:f7:a1:eb:54:56:e9:9a:
                    72:34:22:1c:23:80:55:6b:c6:74:b0:e8:0e:58:c7:
                    f9:03:f8:dd:46:55:de:be:42:e8:62:a5:49:ba:ef:
                    1f:3b:43:c4:d2:8b:b1:bd:a6:4c:d2:e2:c2:66:2b:
                    4e:dc:dd:4f:b5:c0:a0:b9:ac:6e:5d:8b:dd:25:c0:
                    3c:53:bf:ff:7e:2c:6d:82:0a:f0:c8:a2:22:33:35:
                    08:8b:e2:03:74:1f:91:30:8d:8e:92:ad:86:49:20:
                    f1:57:bb:86:da:bc:2b:07:25:22:72:33:49:07:5a:
                    6f:41:5b:ef:cf:bd:3c:18:8b:a2:85:10:03:89:51:
                    bd:40:2a:79:8b:40:35:d9:cd:e9:ed:5c:f6:8d:ee:
                    21:3f:b4:91:25:3f:09:0b:01:db:70:df:b4:af:56:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:31:26:E6:46:9B:85:6F:6F:AF:E8:B7:37:0A:05:D1:AC:39:C3:AB
            X509v3 Authority Key Identifier:
                keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/UjEm5kabhW9vr-i3NwoF0aw5w6s.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152735

    Signature Algorithm: sha256WithRSAEncryption
         69:69:02:2e:bf:be:9c:f5:dc:5e:1c:08:ea:06:b8:94:4d:28:
         eb:2a:e9:17:66:24:e2:f2:72:b8:aa:29:e5:22:7d:d0:d9:52:
         e8:98:9f:46:77:17:a0:42:2d:ee:93:58:b2:02:28:52:af:13:
         0c:d4:36:9a:ed:4c:f7:06:72:3a:9f:17:f2:bc:b5:9e:38:58:
         c7:65:ce:b6:52:c4:fd:7b:28:62:f6:b0:65:5e:1e:d9:cd:44:
         28:f2:13:f1:6c:5f:3b:21:fb:e3:b8:32:1e:2c:b4:91:08:5e:
         47:f1:a3:1f:fe:c9:ef:3d:46:46:7f:65:d3:a4:0b:0c:51:71:
         4d:c5:ac:35:cd:c5:1c:aa:0c:d0:3a:dd:78:0f:ca:08:15:18:
         bf:35:c5:93:4b:0c:15:ea:af:ec:5e:cf:74:99:3e:09:04:e2:
         85:11:c6:b0:35:3e:e2:b1:01:02:f7:3c:0f:da:4d:52:74:e1:
         7c:88:48:a6:07:f2:6d:7f:fc:fc:2d:5a:9f:5f:00:13:34:c9:
         e4:53:b3:83:b0:c7:13:d0:1d:43:f8:a6:10:da:2d:e5:cd:cb:
         b0:1b:30:b0:a0:92:54:6c:d3:0c:06:77:11:0b:d5:ec:47:c6:
         73:f7:f7:6a:ed:ca:7f:79:9f:17:61:4e:87:fa:e5:68:57:b5:
         d0:93:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:03:42 2026 by rpki-client