Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/jB5QAqYNWUwON4sTS6RzfZOB9yA.asa
File:                     jB5QAqYNWUwON4sTS6RzfZOB9yA.asa (raw, json)
Hash identifier:          ju1V4gFa7/Zz/+EgUu5DRM3q7D6yeOnvXW0WV5HwwY0=
Subject key identifier:   8C:1E:50:02:A6:0D:59:4C:0E:37:8B:13:4B:A4:73:7D:93:81:F7:20
Certificate issuer:       /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial:       01A0BF045472D26638ABA8BE359AB4DD917F
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/jB5QAqYNWUwON4sTS6RzfZOB9yA.asa
Signing time:             Sun 20 Sep 2026 13:32:07 +0000
ASPA not before:          Sun 20 Sep 2026 13:32:07 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211138
Providers:                AS: 30823
                          AS: 51396
                          AS: 52025
                          AS: 62403
                          AS: 198831
                          AS: 200051
                          AS: 200257
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:04:54:72:d2:66:38:ab:a8:be:35:9a:b4:dd:91:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
        Validity
            Not Before: Sep 20 13:32:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c1e5002a60d594c0e378b134ba4737d9381f720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:f5:f7:de:c4:5c:ec:d1:95:4d:0d:50:54:
                    9b:23:fd:2f:89:6f:4f:97:68:bd:3c:46:7d:e8:cf:
                    03:6d:8f:03:c0:94:56:96:c7:01:15:d3:77:fa:23:
                    dc:9d:3a:a5:ed:e5:7b:51:8e:4b:1a:d8:15:98:9b:
                    3f:99:1d:62:e2:72:ca:f9:eb:53:db:b8:82:fc:27:
                    1f:49:54:de:56:9f:78:9b:dc:90:c5:ad:79:6a:8e:
                    7c:7d:56:ce:12:4d:53:33:45:de:49:e0:91:a8:76:
                    86:4d:b0:6e:77:57:d2:97:bb:c6:6f:13:0b:0c:99:
                    97:c7:4b:0e:b3:79:bb:16:ff:a7:cc:75:28:96:ee:
                    79:8c:6e:ce:da:4d:58:d4:bb:dc:52:c1:58:0c:c6:
                    e0:50:3f:e0:7c:3e:fc:6d:6e:8a:c3:03:87:fd:ec:
                    51:7e:97:27:89:49:ff:ad:10:9c:3d:ac:fc:4d:69:
                    d7:29:7a:37:ad:12:44:4b:bd:e4:b0:f4:72:02:e9:
                    77:51:3b:5f:3d:f9:f5:03:0b:1f:88:a9:1a:a6:15:
                    a8:b1:c8:8c:83:2e:e3:40:95:1e:4d:2a:1c:f7:9a:
                    a9:8a:d7:51:4b:6e:43:c8:58:99:78:f5:53:a4:7e:
                    29:65:b7:d1:61:7f:d2:b9:3d:6b:45:38:81:a7:53:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1E:50:02:A6:0D:59:4C:0E:37:8B:13:4B:A4:73:7D:93:81:F7:20
            X509v3 Authority Key Identifier:
                keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/jB5QAqYNWUwON4sTS6RzfZOB9yA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211138

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:96:3f:22:58:dc:81:19:5b:68:c9:4d:c7:07:d4:58:5b:
         90:79:20:eb:43:00:b6:95:00:7d:7c:db:3a:0d:06:e4:33:22:
         b7:41:53:20:c8:3d:50:bc:83:2e:b9:c3:d4:37:93:60:8b:ad:
         0d:a1:56:3b:8d:1c:ef:a1:e5:22:fe:2e:56:f4:a9:1b:1c:b3:
         e7:6d:40:12:d5:c6:dc:ca:d4:5a:15:84:1a:3f:b3:3b:81:cf:
         92:75:80:75:1f:5d:09:35:3d:c5:ac:01:4a:ab:ca:fc:7b:89:
         4a:ca:c3:08:26:37:a7:b9:1e:6a:92:73:b8:65:3c:81:c1:a2:
         4a:d9:7a:36:38:82:b0:62:1c:41:31:b3:33:b9:c4:38:67:f0:
         e2:4b:c7:55:28:53:01:17:45:97:d8:7d:d2:52:ea:8e:2d:df:
         cb:3c:b0:45:20:ec:cb:02:ce:3b:50:cf:8b:2c:d7:97:46:eb:
         b4:83:c3:82:9e:3c:7a:ca:78:d2:ea:e2:34:f1:e2:55:01:18:
         e0:0b:13:d1:00:81:0e:6c:ec:e3:f3:5c:6d:c9:75:4e:5e:fa:
         d8:3f:26:fa:d2:47:fd:d8:e2:77:cb:27:66:13:03:c7:5c:08:
         53:d7:15:84:11:a0:02:5e:a9:fb:19:b9:ac:1f:b2:4d:bd:8c:
         8c:3a:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:58:41 2026 by rpki-client