Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/lNl0jR8IsOSJfFPxWudaK8qrJOQ.asa
File:                     lNl0jR8IsOSJfFPxWudaK8qrJOQ.asa (raw, json)
Hash identifier:          IX8Zv7qUtgpAAei5zm/E62pQBDNZVJrE1Mk34lY2Lrc=
Subject key identifier:   94:D9:74:8D:1F:08:B0:E4:89:7C:53:F1:5A:E7:5A:2B:CA:AB:24:E4
Certificate issuer:       /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial:       019D1701885FB64D8BCEB91F1960552290A1
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/lNl0jR8IsOSJfFPxWudaK8qrJOQ.asa
Signing time:             Sun 22 Mar 2026 19:24:29 +0000
ASPA not before:          Sun 22 Mar 2026 19:24:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205669
Providers:                AS: 47160
                          AS: 198507
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:17:01:88:5f:b6:4d:8b:ce:b9:1f:19:60:55:22:90:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
        Validity
            Not Before: Mar 22 19:24:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94d9748d1f08b0e4897c53f15ae75a2bcaab24e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:b4:f2:e5:99:d0:f7:de:e9:ef:9e:57:8a:
                    f4:5e:c5:51:47:2a:83:1f:63:07:71:4c:c2:72:88:
                    94:13:c2:cb:77:07:39:08:22:da:c3:00:90:a7:a6:
                    b0:c7:55:e1:14:3d:9b:89:a7:eb:f3:af:a7:99:94:
                    1f:27:1f:d6:68:17:93:9e:c4:76:2d:1e:0e:f2:3a:
                    1e:20:16:dc:b2:38:07:05:94:6e:75:c5:c7:ce:45:
                    17:da:fd:97:47:b8:19:6f:a6:21:45:12:de:fa:e1:
                    ae:35:f9:99:0b:0c:03:42:a5:5b:27:b0:2e:40:04:
                    df:9c:72:2b:9d:c6:94:18:d3:90:4d:8b:13:01:f1:
                    7e:e1:40:87:62:40:40:e9:ea:01:bf:b5:4d:7b:1b:
                    fa:85:8c:2d:58:7c:f9:25:3e:19:81:cb:b9:64:24:
                    95:e7:1e:32:3f:bd:2c:49:2a:d5:95:8f:d6:68:fb:
                    a4:86:10:81:63:fc:c7:b7:d9:2e:50:a2:74:9a:d1:
                    3e:53:95:47:db:df:af:80:a5:85:f1:74:12:8b:20:
                    d6:06:32:30:57:e4:fb:3c:15:c6:84:58:5b:b2:f7:
                    6f:86:75:cf:48:72:1b:42:6a:a0:f8:fd:2b:38:12:
                    2b:b1:b8:be:d6:a9:27:5d:fd:39:74:c9:f4:6b:98:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D9:74:8D:1F:08:B0:E4:89:7C:53:F1:5A:E7:5A:2B:CA:AB:24:E4
            X509v3 Authority Key Identifier:
                keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/lNl0jR8IsOSJfFPxWudaK8qrJOQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205669

    Signature Algorithm: sha256WithRSAEncryption
         17:98:8b:03:4a:ff:2a:4b:cb:83:40:3c:b8:a5:88:f9:e1:77:
         df:ab:10:26:2e:ea:fa:f2:55:0e:c2:69:2e:cf:32:64:47:66:
         51:71:96:16:2e:13:01:86:0a:58:66:b5:b4:d0:f0:5a:ac:48:
         45:17:1c:e9:d7:5b:da:bf:bb:54:0a:52:f3:95:73:a8:36:f0:
         bd:5b:d3:e2:05:ad:d4:31:8f:ae:d1:3e:00:ef:ec:29:7a:24:
         82:6d:4c:dd:d4:78:09:54:86:b5:98:ef:44:a6:3c:5c:4f:26:
         91:72:76:a4:de:cc:13:f8:27:80:76:73:bd:53:6c:47:bc:4a:
         48:62:66:dd:95:bd:aa:eb:50:c6:3f:9e:d6:39:f2:e1:92:70:
         e1:ca:eb:cf:ce:d7:4a:b5:34:80:ce:6b:6b:18:6e:26:9c:03:
         57:79:3f:db:c5:c9:bd:6b:96:7f:7e:88:0f:37:6c:ce:0e:3d:
         66:88:f3:6d:ad:ef:84:47:7c:6e:bf:86:0c:7c:9b:07:ce:62:
         20:9b:df:5f:ee:06:ed:f9:1d:50:a8:77:1d:09:00:1e:2e:aa:
         07:4c:a8:92:b2:f2:5f:a4:e7:02:61:21:91:b6:7b:8f:55:31:
         b9:6d:17:91:43:51:84:a8:98:64:6c:cb:2b:a6:ad:9d:ee:74:
         e0:48:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:05:32 2026 by rpki-client