Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/4HfkizsQs4eGY47ORrzuQrrCbpg.asa
File:                     4HfkizsQs4eGY47ORrzuQrrCbpg.asa (raw, json)
Hash identifier:          gLyBFzmKeoRu/u4+RBvoS+hMhayU8vtpUsID14ZlHDM=
Subject key identifier:   E0:77:E4:8B:3B:10:B3:87:86:63:8E:CE:46:BC:EE:42:BA:C2:6E:98
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       019F190145E3DC0A91278537E41DBAA5C8DE
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/4HfkizsQs4eGY47ORrzuQrrCbpg.asa
Signing time:             Tue 30 Jun 2026 14:49:01 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200712
Providers:                AS: 1257
                          AS: 1299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:45:e3:dc:0a:91:27:85:37:e4:1d:ba:a5:c8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Jun 30 14:49:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e077e48b3b10b38786638ece46bcee42bac26e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:0a:87:5d:07:f3:ce:55:a7:8c:e7:a5:7e:
                    e6:ba:e7:63:9e:12:ca:9d:4d:b4:17:73:08:4e:04:
                    db:69:b4:c5:28:46:32:e2:98:c5:db:74:32:45:30:
                    d3:9f:5a:e8:fe:a7:15:23:55:5d:63:e8:d3:f5:63:
                    8d:e0:89:ac:76:f8:a9:f3:27:87:32:17:76:38:fb:
                    32:d3:70:54:3b:54:53:31:c6:ce:76:0c:1f:e2:64:
                    bc:b7:8a:4d:bb:61:a2:35:48:ae:3f:05:b3:cc:1d:
                    b4:8c:53:6d:87:3e:52:99:f4:4f:0d:c4:d6:95:9f:
                    9b:15:e8:8d:37:f1:ed:a1:ee:74:5b:f3:1e:33:6a:
                    a9:8c:e2:6b:ab:b0:4c:75:7d:a0:4e:2b:fa:0b:ec:
                    15:a4:a7:76:77:7b:66:cc:bc:de:ec:0c:45:3b:71:
                    ca:01:d2:35:86:fa:56:08:1c:64:61:3d:5d:61:65:
                    18:97:c2:19:73:c3:85:38:12:48:a5:02:7e:d4:0f:
                    5a:14:8b:b1:25:67:d7:cf:e1:9b:e2:7c:bb:d7:a2:
                    53:84:04:99:21:85:f3:b0:c6:da:fe:1c:52:3b:c4:
                    5d:be:c3:78:b7:e7:ab:cf:d9:7e:e0:5b:0f:e6:8c:
                    5e:d2:58:d1:f2:44:18:8d:b2:b6:85:fd:94:fd:e3:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:77:E4:8B:3B:10:B3:87:86:63:8E:CE:46:BC:EE:42:BA:C2:6E:98
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/4HfkizsQs4eGY47ORrzuQrrCbpg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200712

    Signature Algorithm: sha256WithRSAEncryption
         da:9a:96:47:33:16:c9:05:a4:f3:f4:e2:30:67:95:ff:2c:69:
         8c:d9:6f:06:05:70:6b:78:f1:a3:bc:04:92:1a:22:38:30:c7:
         f0:36:ec:33:b8:26:9c:76:e9:96:a3:23:9d:ab:c1:2b:8e:82:
         8f:c2:02:7c:43:77:e5:91:15:14:23:42:98:5a:22:eb:25:00:
         16:5d:29:69:96:73:98:74:87:c0:76:67:cf:cc:e9:cf:fe:dc:
         aa:1e:56:86:5c:69:2d:5c:e1:a5:cb:53:4b:ea:05:e7:58:1b:
         55:38:54:a5:92:05:c8:e2:cb:a1:9b:3c:ae:3c:0d:3c:a2:ab:
         9d:e9:14:ec:41:bb:61:a4:f5:51:7e:cc:91:a4:ec:a2:4d:2d:
         93:3f:93:e4:08:5d:33:ee:01:e8:b1:cd:59:1e:19:39:a0:61:
         82:c6:55:9a:30:4c:e9:93:5d:1d:0a:42:73:3f:06:14:7b:01:
         50:45:94:de:63:e0:66:93:75:fa:3c:04:e3:45:59:cd:10:04:
         02:0c:6e:6e:38:98:48:21:6c:81:6f:96:d1:f8:80:47:c7:2b:
         50:8d:89:1c:17:52:08:3f:d1:36:d4:b9:5c:1c:3e:35:1c:ea:
         f3:f2:12:0d:fb:ac:bc:4d:f2:61:bf:42:14:90:e1:ef:d6:16:
         a6:7d:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----