Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/MAAniPDXI9HsVNZwiBPzQo7C0FE.asa
File:                     MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (raw, json)
Hash identifier:          +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=
Subject key identifier:   30:00:27:88:F0:D7:23:D1:EC:54:D6:70:88:13:F3:42:8E:C2:D0:51
Certificate issuer:       /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial:       019D21E1CA711D9FCD9EC583629CFF50A63F
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/MAAniPDXI9HsVNZwiBPzQo7C0FE.asa
Signing time:             Tue 24 Mar 2026 22:05:38 +0000
ASPA not before:          Tue 24 Mar 2026 22:05:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215936
Providers:                AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:21:e1:ca:71:1d:9f:cd:9e:c5:83:62:9c:ff:50:a6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
        Validity
            Not Before: Mar 24 22:05:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30002788f0d723d1ec54d6708813f3428ec2d051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:0b:3e:32:4f:7e:e9:a1:c7:e2:62:31:22:
                    ec:19:71:ac:87:19:2b:c8:b7:39:db:4a:3a:b4:2d:
                    be:63:d6:9d:18:69:b3:61:b4:70:cc:87:5b:b6:0b:
                    29:5b:ef:70:4c:f2:72:74:ce:42:d7:22:fd:1a:a2:
                    23:6b:f3:73:71:31:32:99:b2:b6:0a:bc:61:9c:27:
                    84:89:2d:4c:b4:b5:36:34:cd:a0:0c:20:60:a7:54:
                    10:fc:b9:54:8d:f3:c9:71:32:a4:69:86:4c:1a:e0:
                    1e:fb:02:ab:7f:50:61:fc:dd:89:78:8b:d8:76:4e:
                    47:70:95:6a:d1:8c:70:72:fd:0e:f7:6b:0d:74:16:
                    2b:d3:d0:6f:17:5b:94:34:00:62:f0:36:d0:74:41:
                    e2:36:1f:f8:31:52:be:b1:77:d3:54:ed:9c:e4:b6:
                    ed:b0:1e:ef:cb:72:d5:ef:b9:fa:1e:d7:85:88:6c:
                    3c:e9:47:5a:9d:ed:f3:08:6d:cf:27:f2:43:f7:cc:
                    b3:0b:11:37:ff:75:c7:df:d2:c8:28:85:56:20:18:
                    bf:73:25:df:83:16:17:ef:5a:25:5d:4a:b1:db:7a:
                    d3:1b:dd:09:b7:3f:78:bc:ec:76:a4:6c:bd:18:cf:
                    ad:9b:74:48:da:1d:09:b3:b0:41:7f:ca:93:4b:60:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:00:27:88:F0:D7:23:D1:EC:54:D6:70:88:13:F3:42:8E:C2:D0:51
            X509v3 Authority Key Identifier:
                keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/MAAniPDXI9HsVNZwiBPzQo7C0FE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215936

    Signature Algorithm: sha256WithRSAEncryption
         b5:d6:b8:d0:ea:f5:c4:b1:26:64:3e:ef:91:35:9a:04:21:fc:
         69:f8:1f:1b:28:39:5c:9d:ba:54:25:94:7e:94:a9:9e:37:da:
         28:9f:8c:ea:c3:86:1a:ba:fd:c9:34:b1:e5:12:44:8d:db:e2:
         7b:f4:c8:4c:41:07:5b:e3:8e:7b:2d:73:dd:84:79:0d:29:01:
         98:4b:3e:25:f8:62:c2:3c:5b:00:82:e8:37:c0:65:11:53:68:
         bf:b5:87:9f:3f:a3:f6:41:de:5b:65:81:6c:e5:7e:cc:61:dd:
         f1:a0:a6:44:7b:2a:19:25:61:e1:e3:a6:bf:28:e2:37:a3:45:
         85:dc:e9:3d:80:c0:70:93:2b:71:ed:b9:84:d2:88:63:ad:27:
         fa:a7:54:1a:85:12:3b:24:df:9c:9d:8d:7d:59:db:8f:e8:9a:
         fe:f6:b4:ab:86:b3:65:c8:50:43:60:72:0b:3a:30:43:fd:d3:
         83:b7:df:40:e2:ea:ad:1d:b2:81:27:3a:e9:19:fc:98:9f:f7:
         e2:11:4c:82:15:2c:49:90:3c:94:c0:7a:0b:b6:ab:0d:63:fe:
         8e:ef:b2:ef:b1:99:98:16:67:ab:f0:e4:c8:62:dd:49:0c:a2:
         3f:f6:c9:6c:8c:9a:fe:29:81:3e:f4:24:10:89:18:e4:c6:97:
         83:5a:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:04:43 2026 by rpki-client