Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/ZalB4shFIqzfzkOMiSb08RSiuXk.asa
File:                     ZalB4shFIqzfzkOMiSb08RSiuXk.asa (raw, json)
Hash identifier:          PYxtm7mxeSPHemXsmYgJ5cLgPaxbB7guU5ug9r5jFKg=
Subject key identifier:   65:A9:41:E2:C8:45:22:AC:DF:CE:43:8C:89:26:F4:F1:14:A2:B9:79
Certificate issuer:       /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial:       0D93
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/ZalB4shFIqzfzkOMiSb08RSiuXk.asa
Signing time:             Fri 10 Jul 2026 06:04:30 +0000
ASPA not before:          Fri 10 Jul 2026 06:04:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            132458
Providers:                AS: 4826
                          AS: 10214
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
        Validity
            Not Before: Jul 10 06:04:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a508b6e-2a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:a9:a1:2e:b9:da:9e:dd:fa:9a:21:a1:0d:
                    76:51:eb:37:31:91:fb:05:7d:dc:ba:1c:3d:fc:79:
                    2d:7e:66:1d:14:77:34:4b:cd:5f:e8:a5:7e:d9:3c:
                    56:41:9e:9f:6c:0d:95:eb:9b:c6:9f:57:99:da:f0:
                    b7:41:12:56:2c:7d:13:85:fa:32:56:59:da:83:cf:
                    5c:da:41:38:99:47:fa:2e:a3:e7:ea:36:4a:a4:58:
                    fa:de:9c:7b:b4:29:21:7f:12:c7:28:c4:66:38:7b:
                    b5:e5:68:e2:1b:04:fc:7b:b2:f8:1c:77:56:30:00:
                    27:82:77:94:83:ec:7c:56:96:91:33:a2:cb:62:46:
                    81:fc:7c:04:2b:f9:f1:b9:06:c3:31:d2:87:14:71:
                    d6:b4:d7:c7:bc:43:70:08:ec:f4:5f:4a:20:cd:98:
                    bd:dd:7c:cf:ac:9e:5e:19:04:ae:67:50:8a:7a:91:
                    df:49:49:68:4b:f3:05:45:1e:c0:f8:46:4b:e9:35:
                    7a:80:50:a5:a4:72:8b:3a:2b:ac:00:ce:97:ce:63:
                    2c:9f:a1:b3:46:3c:c0:47:93:aa:5f:0b:2b:a8:81:
                    67:d2:ae:c4:6a:3b:3e:03:29:e4:8d:8a:11:89:04:
                    27:9b:72:5f:8e:15:f9:ff:fc:3f:37:dd:62:0e:c6:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A9:41:E2:C8:45:22:AC:DF:CE:43:8C:89:26:F4:F1:14:A2:B9:79
            X509v3 Authority Key Identifier:
                keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/ZalB4shFIqzfzkOMiSb08RSiuXk.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132458

    Signature Algorithm: sha256WithRSAEncryption
         21:ca:5c:e5:98:a9:b4:ab:a7:d9:a6:1f:95:66:3c:6e:d4:67:
         3e:1e:9a:d3:68:e8:5a:20:e3:f1:bf:66:c8:f4:a3:9a:49:36:
         aa:a2:c8:69:fe:0d:68:c2:da:1c:62:b4:14:fe:a4:13:b7:16:
         2f:3d:b0:7e:84:79:06:21:bc:71:d7:78:d7:54:a3:32:da:e8:
         e0:46:13:9b:b7:51:4f:32:e9:65:f9:31:1b:34:a0:ac:2a:79:
         aa:d6:85:a3:08:5c:59:e4:08:2a:db:a7:22:0e:b0:16:62:c8:
         49:56:c3:40:21:cc:1c:4d:54:0f:7b:c9:da:0d:ad:e3:42:ba:
         ad:03:fc:f1:38:7f:7f:b5:55:33:6a:f2:6d:7d:93:0c:cf:54:
         03:1f:a8:e7:5d:1b:c6:b9:09:52:9d:2e:21:44:33:de:4d:ce:
         8c:f6:f9:d7:c2:1c:80:77:9b:dd:0b:27:5f:56:f0:ba:5b:cc:
         16:48:13:78:62:7e:43:fb:5c:7f:56:81:8a:5d:36:48:42:57:
         49:a5:2e:e7:f6:9c:fe:ea:d7:a2:e5:d0:1e:c1:ef:9a:00:b0:
         3b:f1:e5:da:ee:34:5c:ac:44:07:2a:4b:b4:05:5a:3e:aa:fb:
         24:31:c1:9f:6f:48:d7:da:44:55:56:38:d6:43:bd:dc:97:f0:
         04:72:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:10 2026 by rpki-client