Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/G0MKWn_d_v5XNei1EkaM5NV36uQ.asa
File:                     G0MKWn_d_v5XNei1EkaM5NV36uQ.asa (raw, json)
Hash identifier:          x0PnvRZe/aaVIcrGvzMZjgaLm1h8hLqrF/kML+ClPcg=
Subject key identifier:   1B:43:0A:5A:7F:DD:FE:FE:57:35:E8:B5:12:46:8C:E4:D5:77:EA:E4
Certificate issuer:       /CN=230992191d853734bd572d61d1a8e3553bedf6c8
Certificate serial:       01A1BB584CBA343946D2FF786CA4E7F80677
Authority key identifier: 23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/G0MKWn_d_v5XNei1EkaM5NV36uQ.asa
Signing time:             Sun 08 Nov 2026 13:28:08 +0000
ASPA not before:          Sun 08 Nov 2026 13:28:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218914
Providers:                AS: 52025
                          AS: 137409
                          AS: 202413
                          AS: 207208
                          AS: 214790
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:bb:58:4c:ba:34:39:46:d2:ff:78:6c:a4:e7:f8:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230992191d853734bd572d61d1a8e3553bedf6c8
        Validity
            Not Before: Nov  8 13:28:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b430a5a7fddfefe5735e8b512468ce4d577eae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:76:fd:f7:02:ad:56:f0:a4:d4:d7:70:d0:
                    c1:38:d3:d8:ab:93:10:08:5b:38:2e:93:99:d8:ab:
                    e6:1b:03:af:1f:4f:29:2d:67:b5:31:6b:23:28:5d:
                    8b:af:34:ec:43:d9:39:00:f2:35:61:2a:39:1c:4f:
                    9a:1b:1d:25:a9:c6:d4:c5:08:43:dd:b6:81:23:e0:
                    b6:25:2f:24:d4:d4:e0:a4:65:b0:9f:aa:77:97:91:
                    97:b1:a1:d8:1d:6b:8e:c4:dc:a5:07:2a:ae:9b:2e:
                    d0:e1:ce:d7:b4:b3:e6:fc:98:e2:c1:cb:e8:a3:c2:
                    46:0d:20:65:de:77:6e:06:29:3e:58:9d:c6:b6:b4:
                    ad:f1:9a:e1:ae:42:f2:b5:87:6c:c6:db:7e:e8:81:
                    9f:f1:f8:17:94:46:7b:45:16:1e:98:b7:61:48:3c:
                    e8:c3:86:55:39:0b:af:79:77:c3:80:ed:63:cf:ee:
                    6e:ac:41:da:74:95:90:f8:7d:cd:a7:9b:c1:46:fa:
                    66:91:73:95:62:f7:ce:2c:25:3a:60:d7:01:50:29:
                    8b:45:aa:63:06:b0:1a:f6:a9:fb:7e:92:db:ad:69:
                    39:94:6d:d7:84:bc:63:4f:8b:81:12:ed:ee:a4:90:
                    df:ad:04:1a:87:50:9c:61:e3:89:91:7f:d1:a2:a9:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:43:0A:5A:7F:DD:FE:FE:57:35:E8:B5:12:46:8C:E4:D5:77:EA:E4
            X509v3 Authority Key Identifier:
                keyid:23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/G0MKWn_d_v5XNei1EkaM5NV36uQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218914

    Signature Algorithm: sha256WithRSAEncryption
         29:95:cb:2c:6f:a1:0f:b9:b0:76:3f:0e:ec:42:d9:1e:59:5f:
         1d:9c:4a:e3:5a:d2:5a:5b:2a:8b:0f:43:4c:e2:18:aa:a6:06:
         c7:8e:14:1a:06:53:65:28:c1:de:e6:66:e7:03:34:a1:b8:20:
         bf:76:1c:31:77:af:78:65:6b:d9:29:a1:c2:9f:6b:da:bc:d6:
         21:70:99:65:98:6a:b3:ff:e2:01:74:1c:ed:1b:62:f0:a7:14:
         3e:ab:dc:b0:14:e1:58:3b:dd:72:8f:e6:66:d7:32:9e:8f:5d:
         62:ce:59:21:b0:6b:f9:07:a3:b9:b9:08:f0:8e:f6:3c:30:61:
         66:a0:c7:a8:fd:00:45:aa:4e:8c:b3:4c:30:0a:f8:d7:36:a3:
         af:e2:d9:32:1c:ed:bc:23:78:e6:9f:de:50:13:18:fe:57:5e:
         a6:9b:8b:2b:c1:79:40:d5:66:b5:78:7e:e8:32:37:28:d4:31:
         9e:cb:50:83:78:98:3d:b2:0f:b4:5c:ab:51:a8:c9:c6:aa:54:
         c1:5c:54:1e:f3:dc:24:29:c2:bd:de:48:86:a3:7e:12:bd:03:
         37:01:ba:62:26:e8:35:fe:99:98:bc:e3:04:de:8c:99:aa:0b:
         8a:a1:5b:62:d3:fd:ac:fd:8c:01:e8:ee:9f:08:dd:fb:95:28:
         88:2b:30:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:51 2026 by rpki-client