Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/0owzz-yAwZGI1zbtpD_4a_vchXc.asa
File:                     0owzz-yAwZGI1zbtpD_4a_vchXc.asa (raw, json)
Hash identifier:          uEee6eXF8F1K0rvUsnDtxWWj1AUGW3rXYuMBFxhYtPg=
Subject key identifier:   D2:8C:33:CF:EC:80:C1:91:88:D7:36:ED:A4:3F:F8:6B:FB:DC:85:77
Certificate issuer:       /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial:       019DF5C97166A92B1CD2B96488EC452E019F
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/0owzz-yAwZGI1zbtpD_4a_vchXc.asa
Signing time:             Tue 05 May 2026 01:38:32 +0000
ASPA not before:          Tue 05 May 2026 01:38:32 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216198
Providers:                AS: 6939
                          AS: 52025
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f5:c9:71:66:a9:2b:1c:d2:b9:64:88:ec:45:2e:01:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
        Validity
            Not Before: May  5 01:38:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d28c33cfec80c19188d736eda43ff86bfbdc8577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:25:b6:30:c6:0d:f4:32:f4:15:5b:a5:fa:
                    b6:a9:84:55:bb:f5:1e:72:ab:bc:bd:e9:5e:c3:2b:
                    65:f9:84:3e:e6:9a:b9:3e:f7:58:fb:b8:16:2b:1d:
                    d3:98:99:1c:86:89:4a:f7:13:df:25:79:20:fd:bd:
                    e5:4f:b9:e6:4d:65:78:41:66:fa:97:fa:de:e7:93:
                    62:e0:d8:61:15:75:5c:6f:a0:77:2e:cc:5c:70:b8:
                    f3:92:53:2e:7e:96:fa:09:d1:21:d1:1e:8d:7a:f7:
                    25:a5:31:bd:43:20:9b:da:5f:c1:72:84:21:ea:54:
                    e9:6f:ef:b0:71:24:f4:b1:fc:a0:2b:5d:ba:71:01:
                    eb:df:1e:48:ab:ea:7e:35:9c:28:be:64:eb:6a:86:
                    05:f5:21:de:2e:70:66:e2:16:c8:01:c4:d0:00:b6:
                    cd:8d:55:21:15:af:56:00:9e:e4:e1:33:9d:bb:64:
                    ac:62:8a:2e:46:17:c4:9a:bd:e4:b8:71:1e:c4:a2:
                    99:ad:b7:c4:a4:00:e9:df:83:50:48:f3:59:a1:ae:
                    65:b7:ba:c1:62:b6:cd:e6:14:f1:69:1a:ff:c7:f0:
                    25:ce:a9:29:37:20:cc:68:58:e0:97:11:6d:44:c9:
                    db:f9:1d:55:fe:15:34:8f:48:9f:24:43:7d:75:bb:
                    92:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8C:33:CF:EC:80:C1:91:88:D7:36:ED:A4:3F:F8:6B:FB:DC:85:77
            X509v3 Authority Key Identifier:
                keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/0owzz-yAwZGI1zbtpD_4a_vchXc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216198

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:86:d0:78:0e:12:a9:d4:32:ef:3a:fa:5e:91:79:6d:5b:
         10:e6:59:9e:cd:c8:3b:68:95:3f:46:8f:36:f5:7d:2a:75:9b:
         ca:a3:fa:21:52:8f:e6:c8:57:1e:b3:cd:fd:b0:09:20:44:fa:
         3c:53:12:97:18:2e:ed:d8:70:71:f0:bc:b5:eb:a3:6d:f0:61:
         ed:04:62:50:01:8d:78:b3:d5:de:4f:67:17:40:79:84:82:92:
         06:54:83:be:79:a9:af:c9:ec:1b:6d:00:0b:3e:00:62:ad:a1:
         67:0a:fc:55:34:42:81:42:22:b0:e0:df:8c:b5:40:06:89:e7:
         e5:5e:0b:f2:81:a6:54:00:f0:c4:e0:18:18:12:c1:6d:bb:7e:
         a2:f6:4d:e6:ee:19:71:0b:cc:42:02:e7:65:e3:c6:e9:c7:cd:
         6c:a2:d0:a6:87:d6:e8:83:46:a7:3d:ba:1e:62:ab:c3:6e:73:
         7a:94:9c:f5:f9:80:5f:5c:c3:ac:21:39:d3:a3:09:d9:81:82:
         38:b0:98:2c:cd:e8:d6:3c:ee:e6:13:b8:09:20:00:68:d0:f0:
         85:bf:fc:98:46:0a:bc:aa:50:f1:75:a9:ae:6d:a3:9c:99:3c:
         e9:d9:25:78:7c:dc:8f:2f:df:e9:d7:55:5b:f3:44:0e:1e:f3:
         d6:e6:ad:8c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ31yXFmqSsc0rlkiOxFLgGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTZhOGViYjAxMTExOWIyZjY5NTMyN2ZiMTZlNTFmODg3
MDQ0NzkwHhcNMjYwNTA1MDEzODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjhjMzNjZmVjODBjMTkxODhkNzM2ZWRhNDNmZjg2YmZiZGM4NTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxMltjDGDfQy9BVbpfq2qYRVu/Ue
cqu8velewytl+YQ+5pq5PvdY+7gWKx3TmJkcholK9xPfJXkg/b3lT7nmTWV4QWb6
l/re55Ni4NhhFXVcb6B3LsxccLjzklMufpb6CdEh0R6NevclpTG9QyCb2l/BcoQh
6lTpb++wcST0sfygK126cQHr3x5Iq+p+NZwovmTraoYF9SHeLnBm4hbIAcTQALbN
jVUhFa9WAJ7k4TOdu2SsYoouRhfEmr3kuHEexKKZrbfEpADp34NQSPNZoa5lt7rB
YrbN5hTxaRr/x/AlzqkpNyDMaFjglxFtRMnb+R1V/hU0j0ifJEN9dbuS+QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNKMM8/sgMGRiNc27aQ/+Gv73IV3MB8GA1UdIwQY
MBaAFGYWqOuwERGbL2lTJ/sW5R+IcER5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEt
ZWQzZDI3MDU1MDIwLzEvMG93enoteUF3WkdJMXpidHBEXzRhX3ZjaFhjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEtZWQzZDI3MDU1MDIw
LzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNMhjANBgkqhkiG
9w0BAQsFAAOCAQEAMVyG0HgOEqnUMu86+l6ReW1bEOZZns3IO2iVP0aPNvV9KnWb
yqP6IVKP5shXHrPN/bAJIET6PFMSlxgu7dhwcfC8teujbfBh7QRiUAGNeLPV3k9n
F0B5hIKSBlSDvnmpr8nsG20ACz4AYq2hZwr8VTRCgUIisODfjLVABonn5V4L8oGm
VADwxOAYGBLBbbt+ovZN5u4ZcQvMQgLnZePG6cfNbKLQpofW6INGpz26HmKrw25z
epSc9fmAX1zDrCE506MJ2YGCOLCYLM3o1jzu5hO4CSAAaNDwhb/8mEYKvKpQ8XWp
rm2jnJk86dkleHzcjy/f6ddVW/NEDh7z1uatjA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:03 2026 by rpki-client