Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/BiMT7FuKz3StwQRUO_Dn0dlsLDs.asa
File:                     BiMT7FuKz3StwQRUO_Dn0dlsLDs.asa (raw, json)
Hash identifier:          hxQMU5GQYc0Kz8keeIxE+ga4r1ImIL6kHCvioL0WPck=
Subject key identifier:   06:23:13:EC:5B:8A:CF:74:AD:C1:04:54:3B:F0:E7:D1:D9:6C:2C:3B
Certificate issuer:       /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial:       019D0684F3D277BDCD62B6D6492DA3651EF8
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/BiMT7FuKz3StwQRUO_Dn0dlsLDs.asa
Signing time:             Thu 19 Mar 2026 14:34:29 +0000
ASPA not before:          Thu 19 Mar 2026 14:34:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            9143
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:84:f3:d2:77:bd:cd:62:b6:d6:49:2d:a3:65:1e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
        Validity
            Not Before: Mar 19 14:34:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=062313ec5b8acf74adc104543bf0e7d1d96c2c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:9d:c6:11:50:f7:c8:6a:83:27:ab:77:e7:
                    fd:b3:94:3d:a9:d7:31:2c:19:a1:70:ee:bf:18:c3:
                    25:3f:35:d5:c6:11:bf:73:a6:b7:48:03:c6:10:7f:
                    a6:de:af:10:c6:65:b8:4a:79:e6:e5:cc:8c:f1:67:
                    7d:ee:c9:a1:71:0e:09:5b:b8:58:b5:c9:75:e0:68:
                    a3:52:37:f9:24:47:5d:fc:24:a1:8c:53:cd:39:b2:
                    a5:3c:4e:2c:80:6a:68:27:30:a7:29:55:18:03:65:
                    f7:f3:9f:8a:f9:a2:01:21:e5:b1:4e:2c:1e:ef:98:
                    c2:d6:30:65:a8:df:0f:42:2e:f4:a7:e1:8c:2d:4a:
                    c0:17:37:e3:61:eb:1d:af:e8:dd:be:73:ee:45:04:
                    d7:6c:f8:ba:85:1b:4c:84:a5:88:c7:e5:a5:89:c0:
                    be:d5:33:3a:c1:28:ef:63:a9:d4:d4:5f:5f:0c:2e:
                    36:1f:8c:db:a8:47:61:83:93:eb:9b:bc:b7:a2:53:
                    15:4e:43:3d:54:c5:9d:9f:eb:3f:33:41:ae:2d:b7:
                    9c:68:a4:26:d2:35:d5:ea:4c:f9:c5:62:8a:8d:d4:
                    7c:cb:92:e1:c5:a1:05:1a:03:7e:80:57:8a:aa:70:
                    af:47:ef:51:99:30:d9:d3:2b:22:43:19:86:0d:e7:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:13:EC:5B:8A:CF:74:AD:C1:04:54:3B:F0:E7:D1:D9:6C:2C:3B
            X509v3 Authority Key Identifier:
                keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/BiMT7FuKz3StwQRUO_Dn0dlsLDs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9143

    Signature Algorithm: sha256WithRSAEncryption
         82:30:40:aa:a3:f4:85:5a:aa:36:b8:c2:0b:62:dd:bb:16:ef:
         b3:29:46:a4:3e:ad:63:81:44:ed:c6:64:98:23:af:fa:ec:4c:
         12:93:37:ca:c8:67:cc:82:49:59:08:3d:df:f4:3b:c7:73:5b:
         64:e3:bb:c8:40:8b:45:cb:13:5b:68:08:93:54:4c:38:1c:56:
         53:6b:95:30:ab:c7:dc:87:48:2c:13:16:5b:ba:a1:be:e5:6b:
         0a:ec:18:c2:64:c3:34:6a:20:1c:4e:b2:38:1a:db:a9:b1:7e:
         b5:06:2c:14:3f:de:db:74:0f:32:5b:af:95:3d:b4:fd:7a:ff:
         ac:a6:2b:fb:87:5d:c4:1e:27:9e:e0:41:94:eb:10:26:51:0e:
         c0:33:11:3f:4d:4d:b5:22:75:d8:33:3e:c9:b5:7e:00:86:bf:
         48:a7:b3:a6:47:5f:27:61:04:5e:95:de:1c:a0:ee:62:a9:01:
         fe:e0:27:e1:f5:15:d8:7f:99:17:39:5a:6b:4f:9b:59:ba:77:
         ba:1e:96:d6:ba:5b:cf:b0:5a:f1:1c:2d:18:4a:42:52:bd:97:
         e5:0f:95:91:3b:86:0f:89:04:45:84:53:a7:61:f8:01:d6:61:
         81:b7:51:65:68:69:0a:ea:0b:64:1e:61:42:a0:77:a0:5d:5b:
         64:0f:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:04:47 2026 by rpki-client