Autonomous System Provider Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/CAFK4K4j3zsZH6YjzyiPQXtzH-0.asa
File:                     CAFK4K4j3zsZH6YjzyiPQXtzH-0.asa (raw, json)
Hash identifier:          OFgzbOFR7cWIcyO0nD8LJZP/oxj+UNNBCwjlq9DcI3Y=
Subject key identifier:   08:01:4A:E0:AE:23:DF:3B:19:1F:A6:23:CF:28:8F:41:7B:73:1F:ED
Certificate issuer:       /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial:       3660
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/CAFK4K4j3zsZH6YjzyiPQXtzH-0.asa
Signing time:             Wed 08 Jul 2026 08:34:18 +0000
ASPA not before:          Wed 08 Jul 2026 08:34:18 +0000
ASPA not after:           Mon 31 Mar 2031 00:00:00 +0000
Customer ASID:            4777
Providers:                AS: 2497
                          AS: 2500
                          AS: 2516
                          AS: 3491
                          AS: 6939
                          AS: 8966
                          AS: 9583
                          AS: 33891
                          AS: 134148
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13920 (0x3660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
        Validity
            Not Before: Jul  8 08:34:18 2026 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=6a4e0b8a-acbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4b:30:63:82:de:ea:0f:e1:08:1a:09:e2:62:
                    c5:3d:4d:55:5e:cc:14:dd:c3:e7:23:22:13:48:c1:
                    b4:60:06:b8:b5:20:4a:f2:5b:65:0f:cf:c5:7d:f0:
                    07:94:cd:30:00:e4:11:ce:90:af:80:de:30:18:64:
                    d1:30:49:b7:08:e4:26:f4:7a:48:a5:85:26:8c:18:
                    4e:cb:83:81:8e:cc:3a:c0:e5:aa:0e:27:87:d4:93:
                    fb:22:c1:34:52:98:ba:4e:ca:1e:63:d5:3e:97:aa:
                    99:25:41:e6:f7:17:5f:96:79:6d:75:fd:0d:54:97:
                    2f:80:4a:70:9d:0c:79:42:b2:5d:15:b4:c4:b5:e7:
                    63:4e:cc:7e:64:cd:7b:af:73:1f:d4:e3:b4:43:96:
                    2b:84:e9:f8:f2:57:45:b4:33:74:22:f8:fa:67:46:
                    ff:5b:66:d8:c6:ac:61:ed:d0:e8:17:0a:f6:23:f9:
                    cd:78:38:2a:2d:62:ae:f8:a6:20:5c:88:25:d3:ef:
                    78:66:69:4c:86:04:5d:b0:a9:e9:95:6e:cc:34:0b:
                    5b:16:94:56:4e:cd:ca:b4:ef:9c:52:e6:76:31:03:
                    ae:5e:0f:e8:0c:ef:b0:ee:30:6d:fb:fc:93:26:a6:
                    75:cf:92:de:bd:95:a1:25:6f:4c:1a:3c:01:e0:b2:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:01:4A:E0:AE:23:DF:3B:19:1F:A6:23:CF:28:8F:41:7B:73:1F:ED
            X509v3 Authority Key Identifier:
                keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/CAFK4K4j3zsZH6YjzyiPQXtzH-0.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4777

    Signature Algorithm: sha256WithRSAEncryption
         b0:54:c2:8d:28:93:38:dd:7a:eb:5b:b6:c8:ea:a4:b2:7a:7e:
         00:57:c1:c7:2d:e7:7b:41:6c:6b:e9:67:d5:b2:0a:a3:92:bf:
         14:8c:e5:de:2d:8b:8a:0e:f9:44:d2:ed:91:f3:2b:14:7b:3f:
         a1:9e:7b:d3:bd:1d:da:66:e3:a9:ff:d8:29:d9:8d:5b:ba:d9:
         df:c4:f3:3f:71:6a:c5:21:a7:35:fc:6b:7b:92:87:a2:9e:d3:
         05:8f:c1:99:dc:95:69:66:ec:01:5e:bd:19:3d:2d:3f:ab:0e:
         2a:fc:6e:25:fe:6d:6b:31:50:15:91:87:6b:3e:da:1a:3d:b8:
         45:3e:3b:00:f8:65:5a:fb:e4:6d:48:c9:2f:4a:6e:cd:17:f2:
         35:93:33:85:23:83:a7:57:57:96:db:4a:6b:85:8d:a7:7a:9c:
         8a:9b:30:a4:76:b6:38:ba:f2:b8:c3:36:62:35:09:71:b6:48:
         d8:7d:39:51:db:7e:1e:c6:32:12:62:1e:eb:21:c0:94:e7:30:
         43:65:88:d2:6b:33:33:71:77:b0:4c:4c:f0:a3:d8:48:31:92:
         c9:a2:76:90:e8:9c:cb:72:27:43:a4:11:25:c4:7e:61:e6:60:
         da:3e:16:1f:fb:8b:d7:3f:25:78:6c:79:3d:d7:c0:cb:02:24:
         18:26:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:16 2026 by rpki-client