Autonomous System Provider Authorization

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/AS39002.asa
File:                     AS39002.asa (raw, json)
Hash identifier:          OWApxzZ0IM4LXv6ADnX3/gBOsYO65oqAmyMVk+dNQRw=
Subject key identifier:   CA:6C:54:AC:CF:3F:BC:FA:83:36:EF:2E:03:FA:C4:F0:C5:49:14:B0
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       4133F0A4FC0F0F73A9223A205DEC6AED20C65616
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/AS39002.asa
Signing time:             Thu 23 Jul 2026 10:25:28 +0000
ASPA not before:          Thu 23 Jul 2026 10:20:28 +0000
ASPA not after:           Thu 22 Jul 2027 10:25:28 +0000
Customer ASID:            39002
Providers:                AS: 31477
                          AS: 44854
                          AS: 48112
                          AS: 57984
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:f0:a4:fc:0f:0f:73:a9:22:3a:20:5d:ec:6a:ed:20:c6:56:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Jul 23 10:20:28 2026 GMT
            Not After : Jul 22 10:25:28 2027 GMT
        Subject: CN=CA6C54ACCF3FBCFA8336EF2E03FAC4F0C54914B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:14:05:34:d5:8e:8c:ff:e1:c7:df:71:21:
                    7e:2a:ea:1f:09:30:b5:57:3e:24:ca:00:c8:cf:e0:
                    ed:c1:47:0b:1d:14:c9:33:2c:ef:7b:5d:2d:d2:83:
                    50:ba:ee:2f:b7:7a:eb:79:5b:88:28:85:f0:45:7d:
                    39:c6:d9:ab:49:72:57:2c:c3:1b:bc:fa:f2:68:46:
                    c9:ea:ed:e0:5c:a5:aa:3f:24:fb:fb:f4:40:41:39:
                    41:cf:ba:d8:4e:d9:74:24:e9:02:be:0f:d0:e4:f6:
                    37:ee:70:d8:97:f4:e6:d5:ed:ea:0b:3e:b7:0a:c5:
                    d6:7b:34:39:95:91:1e:fb:8d:9a:a9:e1:1e:54:a1:
                    5d:2c:dd:97:25:d4:14:1e:d1:b3:a9:09:31:51:e5:
                    8e:9b:59:68:1f:2f:f0:51:93:aa:70:a5:14:e0:02:
                    fd:82:f8:03:48:e6:a1:88:7b:c8:e3:ec:e3:20:a1:
                    fb:86:ac:50:ff:58:29:57:61:7b:20:80:26:7c:e0:
                    4f:1b:5e:8b:c0:9e:86:04:cc:5e:fe:28:d1:a4:c1:
                    a7:28:c5:ba:64:8e:19:3c:6d:7e:60:62:ec:39:5c:
                    66:61:b3:27:d7:0c:0c:b3:69:61:df:79:86:7c:fd:
                    80:a1:34:ae:a4:2f:a6:ff:ec:eb:34:c3:83:89:a6:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:54:AC:CF:3F:BC:FA:83:36:EF:2E:03:FA:C4:F0:C5:49:14:B0
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/AS39002.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39002

    Signature Algorithm: sha256WithRSAEncryption
         73:08:3f:79:3e:23:a8:51:2f:aa:ef:69:68:74:10:8b:dc:e8:
         d4:4d:5b:1e:83:25:75:a6:20:62:4f:d6:9b:a9:ba:73:0c:90:
         fb:f0:39:7e:28:54:35:b6:97:e8:8f:c5:d8:13:d7:e3:4a:06:
         eb:1c:ae:d8:97:1b:ac:61:91:22:94:ee:80:45:f3:89:e9:77:
         2d:e3:60:cc:25:68:1a:5c:94:27:74:05:36:96:2b:a1:3a:17:
         90:53:e0:35:94:b8:1e:df:5a:26:5d:87:51:53:cc:fe:bf:12:
         b5:5e:48:48:2d:22:91:0c:d1:a4:f0:c7:6d:bd:cf:d2:d7:0e:
         a7:ec:63:46:cd:47:3e:2b:8b:b4:61:cc:c7:f4:3a:21:f3:67:
         3c:d2:53:a4:14:f1:dc:6f:0a:04:96:83:b5:ed:02:6e:31:60:
         0c:db:b1:aa:72:d3:4e:ff:58:66:0f:1b:85:c6:c0:d2:6d:cc:
         76:d0:11:d9:fe:96:29:f6:79:0c:d7:7c:d9:67:80:9e:8a:5c:
         ec:71:8d:4d:6b:70:1f:6e:c9:16:b0:7e:8c:de:8c:58:d9:49:
         a5:2f:16:99:1c:b4:e5:fa:1e:bc:e6:2b:b8:53:e9:93:aa:8b:
         4b:3b:1f:29:a0:9c:1e:fe:15:fd:37:f3:92:a6:9f:a0:a3:17:
         b4:fa:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:56:27 2026 by rpki-client