Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/2PpCQbD6BhxSmixpM6Ap4tGvIKs.asa
File:                     2PpCQbD6BhxSmixpM6Ap4tGvIKs.asa (raw, json)
Hash identifier:          qBVrVziK38z/Kn2MYIhisGwUzVP1dMdMqu39/KqQVoA=
Subject key identifier:   D8:FA:42:41:B0:FA:06:1C:52:9A:2C:69:33:A0:29:E2:D1:AF:20:AB
Certificate issuer:       /CN=A91F29DD/serialNumber=EFC506E8944DCCEE3FAA4E9F8F0B280C57A0F3CD
Certificate serial:       02
Authority key identifier: EF:C5:06:E8:94:4D:CC:EE:3F:AA:4E:9F:8F:0B:28:0C:57:A0:F3:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78UG6JRNzO4_qk6fjwsoDFeg880.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/2PpCQbD6BhxSmixpM6Ap4tGvIKs.asa
Signing time:             Mon 21 Sep 2026 07:38:46 +0000
ASPA not before:          Mon 21 Sep 2026 07:38:46 +0000
ASPA not after:           Fri 28 May 2027 00:00:00 +0000
Customer ASID:            152191
Providers:                AS: 133385
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.crl
                          rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78UG6JRNzO4_qk6fjwsoDFeg880.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 09:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F29DD, serialNumber=EFC506E8944DCCEE3FAA4E9F8F0B280C57A0F3CD
        Validity
            Not Before: Sep 21 07:38:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ab0df06-a590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:bd:4c:c8:a7:f6:b5:0b:2c:20:f9:8f:56:
                    7f:bc:32:eb:f8:11:41:22:b4:85:b0:a6:00:bf:fb:
                    63:06:47:58:1d:f3:2d:42:d4:38:91:e8:b2:f3:03:
                    bc:1b:ea:f5:03:18:2e:7b:72:08:83:3c:c7:8d:f9:
                    ed:0f:a5:97:c5:16:b5:57:5f:26:d6:69:2b:bc:c4:
                    04:6e:0c:11:89:2f:79:55:77:15:da:12:53:12:50:
                    19:03:b3:b4:39:e6:18:79:62:e8:0f:71:28:95:56:
                    48:bd:c0:dc:c4:98:16:64:79:08:41:54:97:25:42:
                    89:cb:18:7e:1e:a2:7c:05:d1:5f:da:29:4b:d2:e0:
                    ec:4c:dd:5a:43:be:f0:81:c1:eb:55:68:cc:23:6a:
                    4a:1d:4f:04:19:31:1e:4e:25:d9:16:6c:69:60:3b:
                    7f:23:31:21:4e:b2:aa:19:40:db:1e:27:77:8d:f0:
                    18:f6:dc:1b:3a:22:98:43:5d:a3:a0:56:ad:ce:cc:
                    ae:91:8c:46:fb:8e:dc:1c:c7:27:f1:36:0b:cb:08:
                    ab:6e:3a:00:1a:d1:68:80:b4:23:7a:dd:f2:f0:f1:
                    ce:b7:85:c5:cf:02:0d:22:3c:b9:e9:d0:9c:59:58:
                    ea:05:4b:86:72:30:e9:c8:84:e7:76:0d:aa:f0:f4:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FA:42:41:B0:FA:06:1C:52:9A:2C:69:33:A0:29:E2:D1:AF:20:AB
            X509v3 Authority Key Identifier:
                keyid:EF:C5:06:E8:94:4D:CC:EE:3F:AA:4E:9F:8F:0B:28:0C:57:A0:F3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/78UG6JRNzO4_qk6fjwsoDFeg880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78UG6JRNzO4_qk6fjwsoDFeg880.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F29DD/30BBA628B58D11F194D8DD3E6C11F970/2PpCQbD6BhxSmixpM6Ap4tGvIKs.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152191

    Signature Algorithm: sha256WithRSAEncryption
         7e:9b:34:4e:bd:18:f5:65:82:66:b3:a1:74:6b:72:f7:c6:47:
         ae:ba:4a:9b:7e:c6:26:e0:61:0e:c5:e0:74:ff:18:95:6b:43:
         be:26:9d:77:62:f4:fe:51:fb:a4:fc:52:c2:13:1c:80:7a:cb:
         f9:00:60:c8:2b:9f:51:d1:af:ea:b4:a5:ab:b0:a7:af:32:b9:
         d8:7c:29:c2:56:4e:09:70:ac:46:19:ec:bb:78:b6:12:2d:13:
         2e:fd:06:3a:e5:c6:c2:c4:56:7c:ae:33:a7:64:56:69:f9:55:
         2f:46:08:f3:56:5a:59:3b:e3:04:65:ce:0a:91:72:9e:aa:f6:
         ab:b5:a0:59:00:cb:d3:b9:4a:b6:fb:00:9b:24:b7:9f:9d:1a:
         3c:05:8a:a4:28:b8:28:c6:34:a4:af:e5:b7:7c:f1:9a:2b:92:
         37:f1:4e:ce:a2:bd:bd:1a:87:cc:d9:b2:d1:d0:46:af:09:8f:
         a8:a4:9d:a3:21:4c:db:ff:ba:e7:19:7e:08:58:94:ed:76:33:
         b3:00:b9:0e:de:cd:51:4b:f3:a8:63:f7:fe:42:77:6d:67:42:
         1f:72:08:80:3f:a5:70:c0:46:9c:6e:95:23:8b:4b:41:b6:f6:
         71:e9:e7:e9:58:f4:8e:23:5a:1b:e2:f3:7a:69:ca:13:55:e2:
         6b:be:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:01:51 2026 by rpki-client