Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/ZLRHKjbyROJgYledj7hMuO5rYPg.asa
File:                     ZLRHKjbyROJgYledj7hMuO5rYPg.asa (raw, json)
Hash identifier:          ai25UIHNK7E+Fi4eTgzTRInnGNc0MHRbhm8PoONvvOo=
Subject key identifier:   64:B4:47:2A:36:F2:44:E2:60:62:57:9D:8F:B8:4C:B8:EE:6B:60:F8
Certificate issuer:       /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A
Certificate serial:       01AA
Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/ZLRHKjbyROJgYledj7hMuO5rYPg.asa
Signing time:             Tue 07 Jul 2026 22:34:53 +0000
ASPA not before:          Tue 07 Jul 2026 22:34:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            132528
Providers:                AS: 1221
                          AS: 4637
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl
                          rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149987, serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A
        Validity
            Not Before: Jul  7 22:34:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4d7f0c-17b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:c0:6c:50:ef:db:20:cc:2c:aa:44:19:8b:
                    47:9d:c1:4d:2b:8d:28:c8:9c:a3:e1:49:5b:87:1c:
                    43:ef:90:6c:b0:3c:23:7c:cd:6b:7f:49:68:c9:d7:
                    38:b1:89:1b:29:4e:7b:ac:c0:2f:da:d1:61:50:87:
                    3c:3e:59:b7:05:08:63:8c:44:bd:71:51:a9:64:00:
                    75:a3:3a:3b:73:00:77:20:f8:da:32:ff:e6:72:61:
                    f8:bf:21:97:b2:9f:7f:3d:7f:74:3a:41:d3:07:c6:
                    47:62:11:5e:0e:a1:98:13:c0:3b:dc:79:2d:fc:59:
                    da:0f:8c:43:f6:7d:82:17:77:3d:ac:3f:88:61:eb:
                    49:97:b8:2c:c1:7a:f5:6a:c8:6d:00:91:ac:27:f9:
                    d4:42:66:df:e8:79:79:4a:ef:ce:7b:9e:f4:8a:99:
                    9c:1f:30:6b:8f:16:33:ea:d7:d3:7d:54:6b:a1:1a:
                    9a:ad:3b:d2:8d:78:5c:b8:a5:ad:24:49:08:c6:2d:
                    09:b0:62:92:3d:5b:8d:05:ad:45:73:88:49:1f:60:
                    0d:47:60:8d:9f:18:1f:f9:be:2b:85:de:12:92:42:
                    bd:de:b5:49:d8:56:f4:64:ee:86:d7:03:0f:c9:8a:
                    6f:cf:49:77:b9:b4:f5:51:3c:83:79:ef:19:dd:21:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B4:47:2A:36:F2:44:E2:60:62:57:9D:8F:B8:4C:B8:EE:6B:60:F8
            X509v3 Authority Key Identifier:
                keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/ZLRHKjbyROJgYledj7hMuO5rYPg.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132528

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:2c:5b:a4:ec:d4:5e:b2:d8:1b:a9:39:9b:21:1e:07:bd:
         07:5d:01:8b:25:6d:f3:78:e9:46:0f:7a:43:a5:71:67:d5:82:
         8d:e3:2a:9a:6c:81:3f:a1:12:78:03:23:1b:d0:55:3d:3f:c4:
         2f:2e:dc:a4:92:f8:ef:ed:57:f5:ad:d9:08:0f:72:4c:2f:27:
         7b:67:d0:81:fc:57:f1:9b:32:bf:34:4c:a9:38:dd:93:e7:a7:
         47:3c:d5:66:49:48:a3:95:cd:8c:40:19:74:56:cd:03:45:94:
         fa:3a:5c:df:40:c0:99:93:a7:3b:d1:c7:2a:ea:11:45:77:2d:
         35:fa:b6:8c:d7:1f:02:77:a1:87:46:d4:71:83:89:71:cf:d1:
         48:b7:24:49:51:0a:a4:74:6b:c9:01:e8:fc:59:f9:b5:cb:40:
         dd:3e:6f:85:40:a8:a9:c9:77:a2:78:c1:99:80:a8:90:c3:53:
         2e:d3:d2:8c:6f:00:d6:9c:f3:97:03:a8:ea:a9:3e:cd:93:5d:
         b7:be:c9:3d:fc:59:b6:55:8d:6b:29:df:90:bc:de:bd:33:b7:
         4e:90:cb:60:f9:4c:44:48:04:31:ec:64:84:c6:07:66:8b:b5:
         26:91:16:16:95:b3:2d:df:26:d4:0d:fe:a4:37:2c:a3:98:12:
         b9:d8:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:16 2026 by rpki-client