Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/ZS-ppPjt8opYJHcdG7fYKHkDkZo.asa
File:                     ZS-ppPjt8opYJHcdG7fYKHkDkZo.asa (raw, json)
Hash identifier:          MLD41Ka89WGkgVftoVmQ8WO7uVk8k1eWEGfBvHuaahM=
Subject key identifier:   65:2F:A9:A4:F8:ED:F2:8A:58:24:77:1D:1B:B7:D8:28:79:03:91:9A
Certificate issuer:       /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial:       0317
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/ZS-ppPjt8opYJHcdG7fYKHkDkZo.asa
Signing time:             Sat 03 Oct 2026 06:50:18 +0000
ASPA not before:          Sat 03 Oct 2026 06:50:18 +0000
ASPA not after:           Sun 31 Jan 2027 00:00:00 +0000
Customer ASID:            150371
Providers:                AS: 17557
                          AS: 23674
                          AS: 138655
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
                          rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
        Validity
            Not Before: Oct  3 06:50:18 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac0a5a9-f292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:c6:14:af:b4:fb:6f:0d:97:6b:48:5b:9e:
                    03:0f:c7:92:3b:8f:6c:3f:ee:3e:ff:08:d2:99:ae:
                    16:f6:e7:e6:68:5f:3d:98:6d:76:2c:54:f1:50:cd:
                    22:72:c5:2f:93:14:7a:d4:3b:16:40:8f:af:84:ef:
                    2a:d8:ac:90:87:c1:c0:ec:9f:9a:04:6f:7d:85:66:
                    ef:7e:e0:6d:a2:87:3b:c6:64:8e:b9:2e:e5:83:40:
                    1a:3c:b6:18:28:8b:91:e4:c0:cd:af:7d:33:18:f0:
                    88:ad:ec:af:a2:fa:91:47:9b:65:21:71:c4:47:3b:
                    49:10:18:32:0c:d7:d6:2c:44:e6:7f:3f:31:53:16:
                    ce:98:f2:f6:2a:f8:72:27:33:2b:be:4e:41:4d:91:
                    ca:0d:3a:48:d8:58:3e:3e:98:48:f6:3e:4e:b7:72:
                    21:89:3b:60:3d:d6:11:84:42:93:c5:c1:4f:61:44:
                    a6:27:77:f2:70:6d:34:20:46:2b:b2:6f:56:bc:e6:
                    76:7f:54:15:0a:a0:9b:51:24:05:cd:1a:85:f8:65:
                    fd:84:59:2a:f1:e1:e8:8a:c2:e0:e7:9b:2e:af:c0:
                    ac:32:d4:3e:72:ff:01:3f:4c:c2:43:2d:d0:a8:be:
                    e8:2a:05:21:48:9a:ae:62:9b:0a:a0:98:3e:56:7a:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2F:A9:A4:F8:ED:F2:8A:58:24:77:1D:1B:B7:D8:28:79:03:91:9A
            X509v3 Authority Key Identifier:
                keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/ZS-ppPjt8opYJHcdG7fYKHkDkZo.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150371

    Signature Algorithm: sha256WithRSAEncryption
         7c:e7:41:cc:90:67:c2:d2:47:df:b8:cc:56:3b:bc:5e:f0:32:
         c0:46:d7:48:e7:45:89:ef:54:b7:5a:ad:99:81:22:2c:b2:4c:
         58:cb:fc:6c:f3:e4:2c:fb:56:42:1e:db:6c:44:7f:26:17:e4:
         02:c9:47:b8:4e:2d:c3:e1:3d:3a:47:d6:c1:71:1f:5f:4e:02:
         b1:73:d8:0e:0b:ab:6d:7c:f4:b9:4e:cc:da:43:a7:6c:5f:65:
         a6:2e:20:5e:af:40:b3:88:18:b9:07:05:22:cc:aa:61:04:74:
         50:fd:b3:bd:5e:fe:8e:a9:64:a2:0c:60:8b:03:4a:50:79:59:
         4c:cd:0d:ed:64:d6:3a:93:2b:a7:b3:bf:06:4c:0f:a9:ce:d7:
         11:b9:4a:cc:b4:8f:df:f1:6f:18:a4:7c:73:51:19:67:52:e9:
         c7:15:d7:e0:aa:78:a1:8c:27:7e:e8:66:62:fb:ab:b1:65:f6:
         a7:58:49:3b:60:d1:1b:8e:ae:46:9a:f7:29:b3:ad:95:1a:10:
         60:1c:70:dc:39:16:10:58:7c:9a:e3:3c:13:50:f9:4f:56:be:
         46:5c:3b:ae:d4:df:aa:64:d2:14:31:31:c6:9e:9f:05:28:5c:
         82:21:56:3c:70:41:c2:2f:9f:59:1a:c2:6a:6b:89:96:0c:77:
         86:bb:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:57:44 2026 by rpki-client