Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/AS209735.asa
File:                     AS209735.asa (raw, json)
Hash identifier:          4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=
Subject key identifier:   16:34:FA:1F:0B:74:BA:01:8F:26:8A:2F:44:3D:F9:62:F6:F4:B4:53
Certificate issuer:       /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial:       31605BC9ED9E00DACC150C0A9DD32D740E730CE9
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/AS209735.asa
Signing time:             Mon 12 May 2025 22:58:45 +0000
ASPA not before:          Mon 12 May 2025 22:53:45 +0000
ASPA not after:           Mon 11 May 2026 22:58:45 +0000
Customer ASID:            209735
Providers:                AS: 6939
                          AS: 44355
                          AS: 207841
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:60:5b:c9:ed:9e:00:da:cc:15:0c:0a:9d:d3:2d:74:0e:73:0c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
        Validity
            Not Before: May 12 22:53:45 2025 GMT
            Not After : May 11 22:58:45 2026 GMT
        Subject: CN=1634FA1F0B74BA018F268A2F443DF962F6F4B453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:e9:ab:37:04:3e:8c:54:52:64:cf:e5:95:
                    c4:d4:9c:28:35:6a:b6:40:e2:72:af:f1:9f:9e:af:
                    45:76:b3:54:5a:3e:75:29:0c:0b:d4:19:cc:94:ae:
                    94:b3:b3:26:bd:0d:65:d3:c8:58:6a:ce:3b:32:af:
                    75:8f:04:f3:5a:72:b1:a7:28:c1:cf:bd:15:81:cd:
                    52:5d:8a:a0:27:94:ed:46:0d:ac:d9:a0:a5:be:8e:
                    54:a5:93:94:75:cd:92:fb:49:4e:a3:16:44:6d:b3:
                    fc:1c:cc:97:0f:d5:f9:55:5a:00:a8:ba:56:fa:35:
                    2a:b7:bd:82:ba:1d:2e:06:f4:17:a0:a7:ea:f6:1f:
                    10:33:ad:4a:d4:d7:85:4c:ab:cf:d3:8a:ec:7c:57:
                    bd:ab:b1:f1:f7:d6:25:23:53:31:2b:eb:47:0a:5e:
                    56:12:a5:e8:c6:ec:57:93:c0:12:51:b6:ea:62:86:
                    08:fc:52:6d:c1:1f:9a:de:88:c4:65:6b:44:76:c0:
                    11:fa:55:7b:b2:46:a5:f7:c0:0f:16:03:af:05:51:
                    84:3d:ef:ba:e7:c6:e8:fe:b7:44:29:9b:3e:d7:1a:
                    26:ac:00:0f:09:9a:a0:77:5b:53:2f:3d:29:85:3d:
                    31:bf:bb:a0:79:ab:3d:df:99:07:97:7c:72:fb:54:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:34:FA:1F:0B:74:BA:01:8F:26:8A:2F:44:3D:F9:62:F6:F4:B4:53
            X509v3 Authority Key Identifier:
                keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/AS209735.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209735

    Signature Algorithm: sha256WithRSAEncryption
         72:86:53:23:a0:d8:54:f6:88:7a:3c:b1:e2:43:11:45:18:d5:
         a4:b4:40:e8:c9:98:69:fb:b9:75:8a:a4:dc:7c:63:39:8e:eb:
         cd:0e:c7:d1:ae:d3:d1:eb:c6:77:32:25:33:51:85:5d:83:5d:
         26:02:a2:f5:46:eb:c1:ec:d2:5d:e5:38:09:03:7a:bb:68:fd:
         6c:f5:db:8a:7b:0e:fa:80:27:40:74:9a:79:cc:4f:fe:d4:f0:
         55:5f:50:8a:1d:e6:55:68:20:3f:ea:b5:da:9c:29:bc:84:e0:
         a9:7f:b5:00:21:1c:c3:16:92:89:ae:1d:45:4e:22:47:37:a4:
         7a:d1:78:5d:03:44:89:92:2c:80:de:d9:f4:ef:57:7f:23:1c:
         03:c0:bf:b2:dd:05:40:e6:1b:f7:7e:bf:ad:28:9d:a5:3d:54:
         69:7c:47:d0:db:fb:b7:13:19:cd:74:12:fe:80:b9:29:d2:12:
         d1:ea:48:b6:e2:9a:4d:ca:7d:20:76:09:a9:d8:ae:39:ae:4a:
         fc:fd:f7:8e:7e:d8:72:fe:5d:d0:62:df:72:36:9a:1b:16:9a:
         e0:f9:9d:bf:aa:e0:c6:ce:a3:10:66:4f:09:2b:28:a2:9d:c6:
         6e:be:5e:4d:22:b7:f1:e2:56:ce:c2:e9:5b:9b:b7:a1:a9:37:
         e7:f3:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----