Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/3DNXim_rxu4Pnd5ugOUjjSvE6Ls.asa
File:                     3DNXim_rxu4Pnd5ugOUjjSvE6Ls.asa (raw, json)
Hash identifier:          WhNNCHjbJ98rH71QjjRS9IlM7whZEYOPtS0/H+MhUis=
Subject key identifier:   DC:33:57:8A:6F:EB:C6:EE:0F:9D:DE:6E:80:E5:23:8D:2B:C4:E8:BB
Certificate issuer:       /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial:       094D
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/3DNXim_rxu4Pnd5ugOUjjSvE6Ls.asa
Signing time:             Mon 26 Oct 2026 05:40:08 +0000
ASPA not before:          Mon 26 Oct 2026 05:40:07 +0000
ASPA not after:           Wed 01 Dec 2027 00:00:00 +0000
Customer ASID:            141002
Providers:                AS: 16509
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
                          rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 20:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
        Validity
            Not Before: Oct 26 05:40:07 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6adee7b7-beaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:b1:bf:2d:be:c5:47:0a:74:34:0d:f3:12:
                    a7:12:48:83:bc:01:5d:e0:b6:98:f3:2a:bc:87:9b:
                    cf:58:4c:3b:0d:9f:50:7c:26:27:77:2c:40:67:62:
                    0f:2d:68:a5:9b:d1:38:95:3f:52:91:d5:ca:a5:e1:
                    13:89:ec:80:50:a4:05:6e:90:42:4c:2f:40:8f:fc:
                    ec:c1:d2:e1:68:5e:91:0b:cb:74:d3:0c:34:89:30:
                    10:5f:59:9d:ce:3c:e4:5d:b0:24:a7:7c:1f:92:22:
                    13:66:79:26:fe:64:01:46:8d:c3:47:16:0e:9f:3f:
                    d6:d1:b5:a7:b2:32:42:0c:2d:a2:4d:06:35:61:d1:
                    4f:34:53:1e:f0:92:6a:ec:b1:f9:8a:e1:6e:8f:2e:
                    2c:12:d1:77:97:b1:3e:f1:b2:8e:3f:a7:23:70:5b:
                    05:2e:18:3b:b9:3c:3e:52:9e:d0:1e:ec:a7:ee:a6:
                    5c:e6:c5:16:fe:1c:2d:23:0f:6f:c0:bb:65:e5:8b:
                    32:a2:12:28:a4:de:4c:b6:fd:30:34:86:d0:5b:dd:
                    46:21:f9:5d:90:eb:91:f3:8b:1f:90:ca:a0:71:c2:
                    08:f2:83:22:fb:3a:31:80:27:56:e4:9b:8a:d0:94:
                    ce:3c:01:29:7a:49:0c:b8:4c:0a:bf:0c:34:50:bc:
                    c3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:33:57:8A:6F:EB:C6:EE:0F:9D:DE:6E:80:E5:23:8D:2B:C4:E8:BB
            X509v3 Authority Key Identifier:
                keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/3DNXim_rxu4Pnd5ugOUjjSvE6Ls.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141002

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:e8:89:a2:fd:48:00:02:41:4d:5a:e1:a9:2b:15:bc:53:
         12:31:53:38:cb:79:a5:39:0f:8b:63:9f:0a:61:52:cd:26:90:
         f7:a4:78:a6:ea:2e:3e:4f:e5:15:ff:8f:99:f6:7f:77:68:ed:
         a8:3a:24:e5:cd:5f:e0:9c:42:97:c2:1e:4b:19:47:f0:2e:54:
         09:5a:72:e6:ba:35:cf:6b:84:59:3c:0e:29:9c:58:3e:ad:bd:
         9e:91:da:ee:82:d4:2f:72:50:9a:b5:23:a3:c8:0b:ed:e1:43:
         47:16:da:ce:0e:81:98:f8:6f:74:46:39:7a:f7:c8:c4:74:9d:
         ef:18:e0:90:b5:d5:12:64:59:fd:37:52:0a:97:17:bc:53:08:
         62:82:06:f7:ce:04:8b:16:62:ac:36:88:94:b1:d3:22:32:f2:
         06:ac:bb:e0:a1:2e:ae:b7:2a:95:4b:b4:c8:30:d5:1b:3a:fb:
         02:42:cd:6a:13:dc:3a:44:20:1e:af:e4:e0:ec:96:a7:72:6e:
         7d:bf:b9:4d:f8:04:08:2e:1c:8f:f6:28:12:40:65:5a:e8:d6:
         b0:8e:4f:d3:7a:c4:e3:f7:72:26:4a:6f:4d:3e:53:ad:5c:a5:
         80:ef:7a:4c:14:ab:67:8a:34:05:6b:88:5e:87:5f:21:d6:ba:
         b5:bb:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:38:12 2026 by rpki-client