Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/AS210352.asa
File:                     AS210352.asa (raw, json)
Hash identifier:          7WAyuynOyx2Zq58a2XFdfK3POnY81y1UIp890u8K5vM=
Subject key identifier:   92:5C:9A:BA:73:A3:E9:53:5A:11:CB:2F:D0:75:B9:15:9D:D5:E3:22
Certificate issuer:       /CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
Certificate serial:       71545888D9CBC99905D0DEC5DB3322412DA794A2
Authority key identifier: 23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/AS210352.asa
Signing time:             Mon 20 Oct 2025 10:28:26 +0000
ASPA not before:          Mon 20 Oct 2025 10:23:26 +0000
ASPA not after:           Mon 19 Oct 2026 10:28:26 +0000
Customer ASID:            210352
Providers:                AS: 7720
                          AS: 44324
                          AS: 53808
                          AS: 199310
                          AS: 207529
                          AS: 211575
                          AS: 213605
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:54:58:88:d9:cb:c9:99:05:d0:de:c5:db:33:22:41:2d:a7:94:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
        Validity
            Not Before: Oct 20 10:23:26 2025 GMT
            Not After : Oct 19 10:28:26 2026 GMT
        Subject: CN=925C9ABA73A3E9535A11CB2FD075B9159DD5E322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:71:86:1f:c5:6f:a4:46:20:48:7a:97:50:
                    0c:fc:22:83:02:58:fd:26:bb:74:b8:0d:d1:72:6a:
                    dc:b3:bd:51:25:b4:47:90:af:fb:ed:71:05:31:9c:
                    89:f3:fc:da:40:34:6a:bb:4a:2d:74:c4:83:31:a1:
                    61:03:fa:7c:4d:82:b0:88:87:d4:72:83:30:84:50:
                    d5:1c:95:78:d2:4d:df:42:48:eb:0e:44:f1:16:47:
                    10:ed:e0:e9:07:8a:52:01:3a:91:94:66:35:0d:a9:
                    fc:a9:dc:c3:65:07:71:d7:97:e4:ad:72:11:4f:5a:
                    22:ac:f2:49:e6:f8:38:7d:88:c2:cd:38:7a:06:99:
                    6b:62:a9:bf:49:15:12:8f:dd:b0:e5:87:f2:0b:db:
                    59:62:ba:70:3a:c5:2b:90:cd:76:b8:8a:ef:20:4a:
                    6b:7a:a4:4a:48:04:ff:a9:d7:c5:e4:8b:21:dc:81:
                    c9:4a:c0:af:fa:ea:37:6b:1b:17:05:4a:84:04:4c:
                    08:e0:98:25:06:6e:35:e0:4e:67:a3:5c:78:45:68:
                    19:92:bc:4e:94:95:45:78:01:de:73:cd:03:85:29:
                    e4:f1:c0:ac:3c:51:50:9b:3b:23:d9:43:6a:aa:10:
                    60:66:d4:8f:b1:47:4a:e4:4d:1f:c0:dd:81:ed:99:
                    e6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5C:9A:BA:73:A3:E9:53:5A:11:CB:2F:D0:75:B9:15:9D:D5:E3:22
            X509v3 Authority Key Identifier:
                keyid:23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/AS210352.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210352

    Signature Algorithm: sha256WithRSAEncryption
         46:5d:58:5e:a1:b0:c2:fb:bc:ae:80:5f:b1:b4:b9:30:51:32:
         fe:d9:e7:16:81:ad:d4:64:32:69:ce:9d:9f:64:5c:45:73:a6:
         90:41:d9:b2:85:ae:8f:3b:94:e1:07:fc:77:0b:f6:99:f2:7e:
         c6:3c:b6:25:58:6f:f7:e4:2b:8e:e4:66:6e:af:77:ac:3a:03:
         9c:6a:62:23:1b:2b:12:50:01:c4:ab:e0:36:74:36:60:87:d5:
         cd:e8:df:02:6f:9f:71:ea:15:cf:f7:41:ce:6f:03:5e:ab:ee:
         81:c0:ff:54:b7:ca:8d:c3:85:f4:ae:c2:0c:b3:e2:25:38:e1:
         52:be:02:ad:37:48:30:62:87:59:26:d3:89:0a:d3:3a:81:45:
         81:f7:58:e3:e8:f1:b9:d7:c7:d5:59:33:e4:fa:63:fd:03:7f:
         14:7b:95:5b:24:64:8b:70:5d:54:d7:df:1b:20:2b:b1:07:4d:
         c6:66:29:74:3f:6a:e4:fd:2a:98:13:54:84:cd:75:bc:80:5c:
         34:4e:a8:81:6d:ab:3f:7b:e2:36:5b:54:20:15:ee:5b:76:6c:
         bd:1a:be:5f:e7:1f:a3:8b:0a:f3:75:ab:20:c6:c8:18:d8:b8:
         53:3d:4f:33:62:0a:3a:65:bf:81:1a:b6:7d:9f:8e:0d:9e:f5:
         a5:53:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:26 2025 by rpki-client