Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/AS206604.asa
File:                     AS206604.asa (raw, json)
Hash identifier:          9S0wCzCydnBKhmRkdQHh551GQ5r+Me37uQgeOYkAevE=
Subject key identifier:   3A:98:7A:91:E6:2F:BE:EA:8A:C7:D6:CB:6D:D7:8F:BE:EE:20:A1:94
Certificate issuer:       /CN=3301e959dd39845a0173c08066f1c898edff0b7f
Certificate serial:       7F2FA04E0558486929C54C7F2D9CC19E52A84836
Authority key identifier: 33:01:E9:59:DD:39:84:5A:01:73:C0:80:66:F1:C8:98:ED:FF:0B:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/AS206604.asa
Signing time:             Tue 23 Sep 2025 19:15:07 +0000
ASPA not before:          Tue 23 Sep 2025 19:10:07 +0000
ASPA not after:           Tue 22 Sep 2026 19:15:07 +0000
Customer ASID:            206604
Providers:                AS: 11967
                          AS: 34927
                          AS: 60326
                          AS: 205941
                          AS: 209533
                          AS: 211358
                          AS: 212895
                          AS: 213413
                          AS: 214757
                          AS: 214809
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2f:a0:4e:05:58:48:69:29:c5:4c:7f:2d:9c:c1:9e:52:a8:48:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3301e959dd39845a0173c08066f1c898edff0b7f
        Validity
            Not Before: Sep 23 19:10:07 2025 GMT
            Not After : Sep 22 19:15:07 2026 GMT
        Subject: CN=3A987A91E62FBEEA8AC7D6CB6DD78FBEEE20A194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:b3:8d:f3:de:74:20:c8:ba:1b:82:94:65:
                    1f:0e:db:a9:63:03:9d:cc:b2:78:34:40:de:6e:05:
                    93:62:e9:db:44:c7:52:87:b0:e4:b2:1b:46:08:40:
                    db:d8:27:fa:1c:62:f2:a7:89:88:f9:aa:8e:cc:57:
                    a1:c4:de:6e:87:01:5b:b7:2e:44:66:c4:03:ba:b5:
                    7a:f7:cd:92:3d:af:b1:89:4a:d2:e0:60:1a:b6:1f:
                    21:b7:b9:f3:82:d1:2a:de:40:55:b0:4c:83:dc:41:
                    ce:90:5e:99:18:bf:06:df:18:c2:e9:79:18:74:53:
                    c0:1e:09:aa:2a:04:40:32:a3:5c:11:48:58:d3:0f:
                    c9:9c:20:94:f0:a1:8f:b9:a2:e2:b9:66:ad:ee:16:
                    be:19:12:b1:ab:ba:96:e6:f2:02:c0:22:26:de:de:
                    5c:b6:d5:a3:e2:56:06:8f:7b:10:84:ce:57:9d:7b:
                    28:52:f3:57:38:4e:91:2e:4a:72:03:c1:23:a7:13:
                    6a:b5:3e:1d:6c:bc:ad:a4:f6:b3:9a:a5:f1:47:f2:
                    88:d4:07:73:c6:57:e1:a1:49:76:d1:9f:65:e6:1d:
                    60:6c:f6:67:6e:1f:8d:40:5b:f2:0a:9f:71:eb:3b:
                    69:c3:9d:15:04:c2:60:6c:2f:c0:ea:87:c1:08:68:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:98:7A:91:E6:2F:BE:EA:8A:C7:D6:CB:6D:D7:8F:BE:EE:20:A1:94
            X509v3 Authority Key Identifier:
                keyid:33:01:E9:59:DD:39:84:5A:01:73:C0:80:66:F1:C8:98:ED:FF:0B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/AS206604.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206604

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:11:b9:1d:0f:7f:99:72:d4:d2:b5:fe:83:da:d2:aa:7c:
         d1:14:ee:2a:78:d2:fe:87:cd:fd:3d:f3:a8:58:e8:e4:70:22:
         4d:68:92:68:bf:88:70:33:66:19:53:df:57:4e:91:6b:41:d0:
         81:e9:53:75:89:be:cd:e8:30:20:e4:21:fc:66:49:7a:f9:5f:
         c8:7e:2c:ba:64:e2:cc:a9:6c:f0:a6:05:59:b8:06:3c:51:a5:
         d9:75:e5:73:6c:36:45:a0:91:66:f4:fb:8f:80:cd:ba:75:ca:
         9f:12:6a:c2:06:9d:b4:0a:1a:3a:a5:40:80:41:25:4c:66:8e:
         2a:d4:36:23:e0:bb:41:f5:cf:16:01:db:7a:a3:9d:40:0d:da:
         40:cf:0f:71:82:56:87:0f:d7:0b:fa:54:b4:03:e5:fc:bd:1e:
         02:1b:f2:ec:22:fc:89:60:eb:67:b8:73:93:92:46:fd:71:2f:
         78:aa:58:87:c3:58:5c:1e:b3:7b:45:40:ca:76:58:25:5e:5e:
         5f:17:47:fe:37:02:35:c2:a9:c2:31:56:95:b9:2a:65:c1:cc:
         f4:d5:14:5e:83:70:8d:87:43:34:30:8b:8d:54:e5:bd:8b:bb:
         9d:1c:ad:14:31:b9:e9:03:50:3a:d2:2e:f5:bc:07:cb:2e:49:
         2f:2e:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:23 2025 by rpki-client