Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/yI9EnZ3fZIzG4LXNJFAzwiR2T1c.asa
File:                     yI9EnZ3fZIzG4LXNJFAzwiR2T1c.asa (raw, json)
Hash identifier:          RWr2o+Fuq8BXHT24M7lWL2/tQ4WeLi7HiQyqBYF1xFE=
Subject key identifier:   C8:8F:44:9D:9D:DF:64:8C:C6:E0:B5:CD:24:50:33:C2:24:76:4F:57
Certificate issuer:       /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial:       F1
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/yI9EnZ3fZIzG4LXNJFAzwiR2T1c.asa
Signing time:             Wed 02 Sep 2026 04:20:25 +0000
ASPA not before:          Wed 02 Sep 2026 04:20:25 +0000
ASPA not after:           Sun 31 Jan 2027 00:00:00 +0000
Customer ASID:            148976
Providers:                AS: 20473
                          AS: 34927
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
        Validity
            Not Before: Sep  2 04:20:25 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a97a409-fc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8c:f5:06:49:5d:c8:8e:9a:42:12:4f:bf:2b:
                    04:af:32:2e:22:d6:5a:3a:0f:c1:71:f6:e2:ca:63:
                    54:fd:b2:4c:72:e0:5b:14:ff:6c:03:93:5e:b4:aa:
                    37:0a:d6:d8:dd:f7:0b:ae:72:a9:74:64:aa:41:7c:
                    fb:fe:09:eb:0f:d1:2b:7f:87:04:e6:e6:6d:af:78:
                    56:7b:fc:06:12:35:48:71:8c:d7:81:e0:40:c0:b8:
                    14:d5:dd:6c:3e:98:65:f4:8a:b1:77:08:11:a0:9b:
                    a1:e1:fe:d1:bf:d7:61:b3:6a:2b:ea:d0:dc:59:56:
                    ec:2d:52:7b:5f:83:f1:ef:74:17:e2:c1:db:33:88:
                    a5:ff:bb:ce:9d:58:81:ea:51:94:8d:2b:b8:a5:98:
                    90:29:97:73:e7:e8:4e:94:38:93:3a:9b:d9:8f:6f:
                    fb:e3:a9:85:3e:57:c9:97:0d:2c:04:4c:2e:d9:d9:
                    6e:73:5e:ec:c9:19:7c:b7:68:2a:5c:85:aa:e3:b6:
                    e0:65:25:6b:31:a0:00:b2:8c:b1:50:6c:af:f3:7a:
                    3c:4b:ef:d4:78:97:94:1d:27:dd:8c:0e:3c:75:87:
                    3a:ce:2f:bb:61:08:46:59:46:78:a1:c1:77:05:64:
                    ce:8f:41:14:26:35:b0:30:07:e2:ea:50:de:cd:bf:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8F:44:9D:9D:DF:64:8C:C6:E0:B5:CD:24:50:33:C2:24:76:4F:57
            X509v3 Authority Key Identifier:
                keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/yI9EnZ3fZIzG4LXNJFAzwiR2T1c.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  148976

    Signature Algorithm: sha256WithRSAEncryption
         9a:ed:40:cd:76:0a:29:35:c7:9a:f4:cd:66:fa:b1:0c:b6:42:
         c8:a8:1b:d7:18:8f:83:60:5d:b4:fc:55:d6:22:7b:e0:bb:2a:
         55:d5:06:ba:99:10:4f:57:50:1f:72:b3:0b:d3:91:d6:b2:33:
         6b:17:20:49:0e:3c:98:74:ca:fa:e9:ff:9a:37:5a:50:24:5f:
         af:a8:1b:48:be:75:f2:f6:61:1a:0e:7c:58:7e:01:c0:0c:34:
         55:6a:65:74:ae:61:06:a1:af:fb:54:4d:f0:56:78:9e:dc:67:
         11:32:78:2a:32:49:1b:77:3b:5b:c7:b4:dc:e6:07:9c:f0:56:
         f5:17:9c:de:1a:91:f3:2c:86:b9:be:48:ba:53:1e:64:17:06:
         c6:83:9b:ba:1d:16:5e:dc:01:af:60:31:a3:2f:5f:08:25:e8:
         5d:3b:ba:54:a5:5e:c3:94:3c:45:4c:75:e6:02:9c:83:6c:fd:
         eb:ca:80:90:69:39:06:cf:95:8c:9d:24:9e:38:af:aa:14:43:
         ec:2c:39:db:08:d2:d0:3f:d7:58:e5:5b:8c:4b:3b:44:d4:4c:
         d8:45:14:6e:dc:a2:f1:1b:76:cf:f2:63:0e:35:79:27:0d:b4:
         80:7d:44:b0:98:a3:45:b4:03:2c:4b:56:ee:3b:e4:22:94:8e:
         a0:c0:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:10 2026 by rpki-client