Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/tizrtS3qU9ricaSU5pNSzX87kgs.asa
File:                     tizrtS3qU9ricaSU5pNSzX87kgs.asa (raw, json)
Hash identifier:          Incu3TWqBW6SfBEt+b0TNfuW9AAh4IPbRzwBVryYKVc=
Subject key identifier:   B6:2C:EB:B5:2D:EA:53:DA:E2:71:A4:94:E6:93:52:CD:7F:3B:92:0B
Certificate issuer:       /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial:       0A88
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/tizrtS3qU9ricaSU5pNSzX87kgs.asa
Signing time:             Sat 11 Jul 2026 19:43:17 +0000
ASPA not before:          Sat 11 Jul 2026 19:43:17 +0000
ASPA not after:           Fri 30 Oct 2026 00:00:00 +0000
Customer ASID:            140607
Providers:                AS: 17557
                          AS: 38193
                          AS: 152605
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
                          rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2696 (0xa88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
        Validity
            Not Before: Jul 11 19:43:17 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a529cd4-d98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:81:18:f8:d4:89:65:ee:1c:e2:b5:62:92:
                    98:1e:f4:3e:d8:dc:3c:54:44:c4:ec:6a:e2:7c:6e:
                    ed:ab:d4:82:4a:77:33:86:19:9f:8d:6e:25:59:82:
                    6d:60:74:e5:88:cf:ae:03:c2:9a:de:1f:eb:ca:a4:
                    32:69:58:71:d1:94:45:d3:6a:42:f8:5b:4a:15:7c:
                    a5:70:ef:79:56:59:33:71:b4:e3:d7:fc:f4:a6:1c:
                    1f:bf:50:ef:33:a0:d5:e4:a5:d0:09:b3:91:35:e7:
                    e7:88:79:a3:5c:dc:be:04:1a:9b:47:f9:f8:85:cc:
                    ee:1e:3b:e4:97:3a:fd:34:ec:b0:91:8c:bb:d6:52:
                    37:cf:ed:7d:15:6d:25:e1:d5:2d:3b:52:be:c1:a2:
                    13:15:78:7a:4a:a1:c5:3e:67:db:02:dd:80:3e:5c:
                    63:6b:19:65:04:2f:68:49:1e:f7:2f:c8:ae:24:ed:
                    0d:94:c5:1b:38:40:f9:d9:39:cc:af:80:48:31:b1:
                    95:7a:d4:90:f3:15:61:17:f1:a2:f6:41:f5:05:57:
                    0f:67:d0:67:60:7e:45:9f:30:78:98:5a:18:75:94:
                    9a:13:1d:05:a8:c9:09:69:e7:38:85:88:fe:45:e2:
                    30:07:86:d7:9b:14:6c:2d:84:b3:fe:51:dd:f3:0e:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2C:EB:B5:2D:EA:53:DA:E2:71:A4:94:E6:93:52:CD:7F:3B:92:0B
            X509v3 Authority Key Identifier:
                keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/tizrtS3qU9ricaSU5pNSzX87kgs.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140607

    Signature Algorithm: sha256WithRSAEncryption
         67:04:4d:2a:93:18:0e:af:37:90:fe:e8:98:11:59:d0:17:eb:
         ba:21:3c:c7:3a:8f:fc:9c:d4:4c:f6:46:66:88:70:3e:54:d9:
         57:7f:a3:6f:21:4a:fa:56:31:ae:24:13:91:f6:10:ac:99:fc:
         11:db:cb:6b:42:fd:e8:94:16:27:d4:be:9b:76:62:90:bd:7c:
         6b:83:50:78:c4:2c:4d:4a:58:85:f4:52:f0:9e:b9:93:82:a6:
         a3:84:03:9c:a3:50:d5:e6:65:b9:9e:2a:51:ac:cd:e6:f3:53:
         a5:ac:2a:d8:eb:63:04:47:f3:d7:3c:e5:f4:66:89:01:96:e9:
         8c:83:fa:34:e7:75:4c:e2:2a:a6:f0:60:ba:2f:ae:99:ea:4c:
         91:92:47:6d:83:e4:1f:a9:b9:22:23:02:e0:c9:ae:40:6e:b0:
         65:e0:a2:d2:43:ad:08:88:b5:ae:6b:77:ec:5c:29:dd:13:0a:
         02:82:73:66:83:12:a1:f9:a0:ef:f6:37:d3:89:fd:84:a3:d8:
         0f:43:8c:9c:16:3f:00:75:a1:85:c9:92:b3:5a:f9:a5:83:f5:
         8f:c8:7e:58:84:f4:81:1d:4d:d4:a5:28:61:3b:33:6d:8f:82:
         43:7f:d2:52:bc:07:b0:81:2d:45:5c:b0:82:2e:e3:9f:a8:d5:
         12:62:76:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:16 2026 by rpki-client