Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9150E4D0000/0/AS147020.asa
File:                     AS147020.asa (raw, json)
Hash identifier:          206i4FekEEJ0QGp5mKwG5/AdVW+pX4rRAcbYP9sfWTU=
Subject key identifier:   98:60:B2:4C:07:09:02:7C:2A:79:11:7C:FC:6A:36:86:9F:25:29:43
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       1FADBFCD3F3079BE6195B14E639A1161A98F5062
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/AS147020.asa
Signing time:             Fri 25 Sep 2026 20:16:32 +0000
ASPA not before:          Fri 25 Sep 2026 20:11:32 +0000
ASPA not after:           Fri 24 Sep 2027 20:16:32 +0000
Customer ASID:            147020
Providers:                AS: 24322
                          AS: 215956
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 09:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ad:bf:cd:3f:30:79:be:61:95:b1:4e:63:9a:11:61:a9:8f:50:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Sep 25 20:11:32 2026 GMT
            Not After : Sep 24 20:16:32 2027 GMT
        Subject: CN=9860B24C0709027C2A79117CFC6A36869F252943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:1a:a9:93:7c:c2:88:04:b8:42:6f:f5:70:
                    87:16:f3:3a:db:04:f2:ed:bd:6e:23:81:41:43:55:
                    48:e7:f7:35:31:7e:64:56:31:0a:26:cf:4a:61:a3:
                    a8:18:f7:71:5c:f7:8d:aa:98:cf:f0:21:ae:ed:41:
                    04:a6:f7:e1:fe:9f:8a:ad:4c:6f:b6:94:33:a7:ef:
                    fe:75:b5:57:bc:2f:db:35:5a:ee:36:94:38:c5:d1:
                    9e:bb:08:e7:06:a9:d0:cd:5f:5a:80:52:9c:2b:77:
                    0a:5e:7c:a2:4a:26:eb:1f:cb:38:5f:c3:4f:21:95:
                    d1:c3:ca:bb:4d:36:4c:84:f7:e2:24:5d:05:54:9d:
                    4d:00:c7:5f:14:43:38:55:f3:40:56:0c:74:0c:30:
                    c2:e8:07:fb:a7:3f:de:09:fd:ca:38:18:43:2f:21:
                    1d:08:19:33:03:3b:00:79:c8:ad:d1:42:9f:d5:09:
                    d4:86:4e:0b:a0:a6:80:73:97:80:05:c8:d6:1c:d9:
                    fc:2f:7d:52:ea:95:16:17:49:7b:5d:14:8d:c4:ce:
                    cf:e3:39:19:82:2e:33:3e:c2:d3:2c:37:78:ad:39:
                    bd:c3:f6:64:90:ed:1b:7d:45:24:18:cf:94:62:a5:
                    13:0a:bb:91:18:c5:8f:18:29:8f:3a:ec:15:c9:fd:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:60:B2:4C:07:09:02:7C:2A:79:11:7C:FC:6A:36:86:9F:25:29:43
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/AS147020.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147020

    Signature Algorithm: sha256WithRSAEncryption
         b3:20:26:5f:bc:25:bb:45:a5:25:e6:13:77:a8:02:96:62:44:
         50:8d:34:1d:5d:30:a6:50:d7:db:89:85:de:54:59:5c:ba:b3:
         db:e1:c8:19:21:a0:ce:f1:93:82:75:23:b0:de:6a:8b:db:ee:
         88:af:69:35:8e:1d:5e:62:2b:d7:31:4f:c0:45:b3:21:d8:b7:
         ea:76:0d:f0:94:e0:fb:2d:19:ae:ef:a8:f5:4f:65:e6:ca:8f:
         81:d9:d7:8b:00:ac:62:e7:be:60:b5:6c:d0:48:76:3d:74:1c:
         1c:18:01:a1:dc:7e:77:2e:b4:6b:68:71:03:00:39:64:19:e5:
         56:cd:3a:3b:16:a8:8e:85:7e:4c:3e:0c:a2:fc:0c:9c:7d:c2:
         48:e2:ce:ad:55:d7:d9:ce:01:b6:ee:17:b4:ef:56:31:68:46:
         5c:27:c4:19:9a:78:39:6e:69:c4:66:8f:53:b4:7b:0d:68:47:
         bc:f8:6c:b3:78:03:33:40:74:3b:f5:62:c0:6c:12:94:a6:79:
         14:cd:ac:c9:1a:2f:c0:14:9a:a6:d7:5d:15:ad:2c:72:f0:bd:
         4d:5f:ec:8b:0a:c4:4e:34:68:ea:d9:a6:cf:5a:94:c3:eb:3b:
         3e:39:56:fd:cc:a8:0c:4a:9c:87:93:9f:0d:72:a5:92:44:43:
         19:9c:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:48:52 2026 by rpki-client