Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9150E4D0000/0/AS24322.asa
File:                     AS24322.asa (raw, json)
Hash identifier:          L2LGSEWrjKF5UzAEAhvYLjmjqRVRN449fVZnedOshAA=
Subject key identifier:   D8:AC:75:06:CE:75:FD:68:A7:DD:01:37:12:92:C1:D7:59:E6:46:BD
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       1DB3F532F567197E03FEE55F8E399F5E87FCB968
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/AS24322.asa
Signing time:             Mon 21 Sep 2026 20:46:57 +0000
ASPA not before:          Mon 21 Sep 2026 20:41:57 +0000
ASPA not after:           Mon 20 Sep 2027 20:46:57 +0000
Customer ASID:            24322
Providers:                AS: 136582
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 11:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b3:f5:32:f5:67:19:7e:03:fe:e5:5f:8e:39:9f:5e:87:fc:b9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Sep 21 20:41:57 2026 GMT
            Not After : Sep 20 20:46:57 2027 GMT
        Subject: CN=D8AC7506CE75FD68A7DD01371292C1D759E646BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:56:bc:54:cc:aa:02:e1:97:3e:ce:6c:51:
                    7c:e8:d7:91:b2:fd:5d:47:c2:a4:21:b1:c6:85:6f:
                    1d:86:aa:61:1b:3a:f8:df:17:f0:5a:10:13:21:b0:
                    d3:0e:b2:ea:42:a8:20:b0:97:d5:08:a8:d9:67:7d:
                    9d:e5:5f:24:64:dc:8e:c2:17:77:b5:47:5e:55:c5:
                    30:b0:13:7e:b9:63:a6:bc:77:5b:00:cb:a5:fa:55:
                    93:4a:33:b5:e6:c1:77:14:da:ec:f6:74:ae:8b:69:
                    f1:26:47:40:cf:ab:a6:42:b0:55:0c:f4:b5:7a:6f:
                    39:81:52:32:3d:3c:58:0b:6e:f3:f9:09:02:00:4a:
                    9a:1f:fe:c0:ee:78:be:21:8b:4b:1d:45:cd:ba:f6:
                    c6:7a:a5:84:fb:6d:25:af:79:3e:bf:30:ae:5e:8e:
                    28:20:32:32:fa:ba:c1:7d:f9:13:db:77:ab:be:c5:
                    2d:37:47:3a:c5:c7:46:7b:86:4b:f1:2c:ed:c1:37:
                    0d:a8:85:f8:3c:d3:97:3c:de:86:fd:1d:72:fa:8b:
                    c4:d5:47:e4:93:9c:a8:f0:11:da:2f:f8:f1:51:0a:
                    98:53:1f:54:03:9e:86:a2:ab:59:08:b1:7e:64:e1:
                    61:f8:31:fa:80:03:f3:a9:59:4b:7d:e5:55:bc:a0:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AC:75:06:CE:75:FD:68:A7:DD:01:37:12:92:C1:D7:59:E6:46:BD
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/AS24322.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24322

    Signature Algorithm: sha256WithRSAEncryption
         5d:13:de:2d:66:ef:67:63:89:98:27:fc:c9:c7:6d:d0:ef:0e:
         96:eb:97:e0:1d:2b:f1:38:be:89:3e:53:2f:1b:a9:5f:ad:44:
         d1:01:e3:07:a1:69:80:72:93:1b:25:2d:a0:99:53:fd:cf:11:
         e8:47:c6:3a:71:82:e6:f5:05:ab:2a:38:7a:f7:60:2a:eb:2f:
         09:52:74:24:03:4a:fb:19:36:eb:81:21:ee:63:a0:76:d4:8a:
         dc:a5:60:b6:6f:20:83:f0:93:b0:02:12:59:f7:18:8c:2f:76:
         ca:15:54:32:a5:96:5e:65:13:b6:43:8b:ec:e0:23:ff:60:c8:
         d8:c1:23:f6:5b:83:65:c9:ee:2e:b1:e0:4f:4a:3a:d9:e3:ee:
         e7:3e:03:57:0a:f6:cf:bf:65:f7:62:30:19:27:61:fd:90:23:
         23:3d:13:05:ef:67:03:72:56:b1:dc:7f:2e:7d:c9:44:1b:17:
         a3:f2:85:2e:47:98:dd:ba:3b:db:7a:ce:24:06:71:13:f6:eb:
         84:93:b0:01:b5:73:97:ec:3c:e9:51:16:b1:66:9c:ea:c3:a4:
         04:93:7c:21:c2:40:4b:27:ab:ed:e4:c2:c0:e0:ec:53:91:dc:
         41:c4:d7:27:67:b4:d0:78:f6:20:ef:c9:99:3e:0c:58:a9:08:
         43:a4:b9:8e
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUHbP1MvVnGX4D/uVfjjmfXof8uWgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg0N0ZCRENFMkNC
NkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1MB4XDTI2MDkyMTIwNDE1N1oX
DTI3MDkyMDIwNDY1N1owMzExMC8GA1UEAxMoRDhBQzc1MDZDRTc1RkQ2OEE3REQw
MTM3MTI5MkMxRDc1OUU2NDZCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKk4VrxUzKoC4Zc+zmxRfOjXkbL9XUfCpCGxxoVvHYaqYRs6+N8X8FoQEyGw
0w6y6kKoILCX1Qio2Wd9neVfJGTcjsIXd7VHXlXFMLATfrljprx3WwDLpfpVk0oz
tebBdxTa7PZ0rotp8SZHQM+rpkKwVQz0tXpvOYFSMj08WAtu8/kJAgBKmh/+wO54
viGLSx1Fzbr2xnqlhPttJa95Pr8wrl6OKCAyMvq6wX35E9t3q77FLTdHOsXHRnuG
S/Es7cE3DaiF+DzTlzzehv0dcvqLxNVH5JOcqPAR2i/48VEKmFMfVAOehqKrWQix
fmThYfgx+oAD86lZS33lVbygyq0CAwEAAaOCAdswggHXMB0GA1UdDgQWBBTYrHUG
znX9aKfdATcSksHXWeZGvTAfBgNVHSMEGDAWgBRH+9ziy28sbkN4xWiCw9JG125Q
RTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC80N0ZCRENF
MkNCNkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9SX3ZjNHN0dkxH
NURlTVZvZ3NQU1J0ZHVVRVUuY2VyMFwGCCsGAQUFBwELBFAwTjBMBggrBgEFBQcw
C4ZAcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0
RDAwMDAvMC9BUzI0MzIyLmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAl8CMA0GCSqGSIb3DQEBCwUAA4IBAQBdE94t
Zu9nY4mYJ/zJx23Q7w6W65fgHSvxOL6JPlMvG6lfrUTRAeMHoWmAcpMbJS2gmVP9
zxHoR8Y6cYLm9QWrKjh692Aq6y8JUnQkA0r7GTbrgSHuY6B21IrcpWC2byCD8JOw
AhJZ9xiML3bKFVQypZZeZRO2Q4vs4CP/YMjYwSP2W4Nlye4useBPSjrZ4+7nPgNX
CvbPv2X3YjAZJ2H9kCMjPRMF72cDclax3H8ufclEGxej8oUuR5jdujvbes4kBnET
9uuEk7ABtXOX7DzpURaxZpzqw6QEk3whwkBLJ6vt5MLA4OxTkdxBxNcnZ7TQePYg
78mZPgxYqQhDpLmO
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:55:09 2026 by rpki-client