Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/AS153376.asa
File:                     AS153376.asa (raw, json)
Hash identifier:          X6/S+yH4qwEnnexD8pfiVMbvZEbISi51P2gImMfuZ/M=
Subject key identifier:   F7:F4:F9:64:4C:4C:EA:D2:EC:7D:B0:38:20:54:FD:05:77:62:2C:0D
Certificate issuer:       /CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A
Certificate serial:       06EB62DDA59669C2D0C39593A2BF8951BDFF5DF9
Authority key identifier: AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/AS153376.asa
Signing time:             Wed 22 Jul 2026 12:24:05 +0000
ASPA not before:          Wed 22 Jul 2026 12:19:05 +0000
ASPA not after:           Wed 21 Jul 2027 12:24:05 +0000
Customer ASID:            153376
Providers:                AS: 44324
                          AS: 139317
                          AS: 204211
                          AS: 206069
                          AS: 207529
                          AS: 215172
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:eb:62:dd:a5:96:69:c2:d0:c3:95:93:a2:bf:89:51:bd:ff:5d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A
        Validity
            Not Before: Jul 22 12:19:05 2026 GMT
            Not After : Jul 21 12:24:05 2027 GMT
        Subject: CN=F7F4F9644C4CEAD2EC7DB0382054FD0577622C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:3d:a2:73:ac:76:a0:5b:97:36:d0:59:bf:
                    5f:66:47:69:02:b7:7c:78:03:e2:97:4c:1d:bd:9c:
                    b3:1e:fb:22:92:d3:6e:58:22:6f:ea:5f:e0:bc:29:
                    63:fb:a6:e4:a1:38:e8:35:29:92:93:19:2a:6a:73:
                    39:09:40:7d:bb:a1:72:43:47:10:a2:93:65:be:cc:
                    b2:f7:06:df:2a:5b:92:16:4a:e2:d6:07:c6:42:54:
                    74:45:c6:d9:07:a9:8f:4e:58:c6:df:d7:55:37:8e:
                    0e:17:63:f0:ca:bd:ef:ca:bb:de:ca:a2:88:4f:85:
                    c1:6f:67:c6:0b:72:0e:58:a2:9a:1d:70:19:fc:3a:
                    d7:99:76:20:e7:1d:ca:4b:30:51:c6:f4:83:ca:98:
                    a1:64:42:ee:f7:1f:ca:9d:9c:bd:5a:dc:52:18:78:
                    92:9a:d2:9b:07:d6:80:ba:e0:9f:91:e2:4b:9b:6e:
                    0e:46:2b:f4:b5:43:cb:6b:8f:5a:85:e1:f1:a4:ac:
                    51:13:db:e4:65:de:b6:2f:42:a0:fc:b3:8f:ee:55:
                    ca:d2:8f:98:f2:5f:d8:2b:cf:63:15:42:ce:ec:16:
                    6f:be:78:00:bb:ab:65:36:c3:02:84:f9:a8:56:b7:
                    1b:82:68:b0:7c:72:8e:4b:f7:a0:d9:8e:d5:b9:1b:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F4:F9:64:4C:4C:EA:D2:EC:7D:B0:38:20:54:FD:05:77:62:2C:0D
            X509v3 Authority Key Identifier:
                keyid:AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/AS153376.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153376

    Signature Algorithm: sha256WithRSAEncryption
         73:21:b7:b7:81:03:03:0e:ef:3c:34:68:b0:29:5f:16:aa:e0:
         00:58:72:61:22:68:6c:91:e9:57:35:f7:c9:60:66:e3:ce:d3:
         ee:70:e2:0e:32:a1:34:47:0d:97:fb:9d:c9:b0:c7:bf:bf:51:
         a2:99:7d:4d:2f:6a:f9:91:e6:cc:cb:67:39:0e:bc:af:dd:58:
         f9:e1:89:e6:80:f9:75:44:98:1a:63:56:7c:5b:e8:a8:fc:b1:
         a7:36:2a:37:b4:f8:75:d0:f5:1c:c0:21:7a:95:ee:62:36:e4:
         19:ea:8d:3d:b6:63:61:b3:ac:2b:d3:d0:45:01:8c:91:d3:4e:
         0a:4c:d3:46:c7:39:90:e7:d9:47:21:75:d6:fc:32:38:e9:6f:
         0f:7d:c5:aa:9a:d7:06:3b:78:27:e7:4d:0d:c7:51:8d:0a:12:
         1d:d9:56:e6:9a:46:54:9b:19:96:70:5c:5c:3a:a6:50:b3:38:
         ad:2e:b1:af:7e:4a:cc:a2:24:6f:7c:b0:1a:63:aa:35:6b:e5:
         03:58:65:f6:81:91:ff:a1:6e:46:e3:7d:74:60:e4:a8:cc:9b:
         48:a9:d9:e5:dc:05:b2:8d:fb:86:a8:bc:ee:16:a1:78:74:82:
         e3:af:25:56:e6:6e:57:3f:4c:49:73:48:6e:55:88:d0:58:fc:
         97:7b:51:a6
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUButi3aWWacLQw5WTor+JUb3/XfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdB
MzQzMDQxQTAeFw0yNjA3MjIxMjE5MDVaFw0yNzA3MjExMjI0MDVaMDMxMTAvBgNV
BAMTKEY3RjRGOTY0NEM0Q0VBRDJFQzdEQjAzODIwNTRGRDA1Nzc2MjJDMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO2T2ic6x2oFuXNtBZv19mR2kC
t3x4A+KXTB29nLMe+yKS025YIm/qX+C8KWP7puShOOg1KZKTGSpqczkJQH27oXJD
RxCik2W+zLL3Bt8qW5IWSuLWB8ZCVHRFxtkHqY9OWMbf11U3jg4XY/DKve/Ku97K
oohPhcFvZ8YLcg5YopodcBn8OteZdiDnHcpLMFHG9IPKmKFkQu73H8qdnL1a3FIY
eJKa0psH1oC64J+R4kubbg5GK/S1Q8trj1qF4fGkrFET2+Rl3rYvQqD8s4/uVcrS
j5jyX9grz2MVQs7sFm++eAC7q2U2wwKE+ahWtxuCaLB8co5L96DZjtW5Gz4pAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQU9/T5ZExM6tLsfbA4IFT9BXdiLA0wHwYDVR0j
BBgwFoAUq+8MK+G8pyZZbCHtEyZJp6NDBBowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw
M2Y4LzMvQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdBMzQzMDQxQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh
MzctOTQwMy03NDNiMTVlYzJhOGUvMS9BQkVGMEMyQkUxQkNBNzI2NTk2QzIxRUQx
MzI2NDlBN0EzNDMwNDFBLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2Y4
NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEwM2Y4LzMvQVMxNTMzNzYuYXNh
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDAlcgMA0GCSqGSIb3DQEBCwUAA4IBAQBzIbe3gQMDDu88NGiwKV8WquAAWHJh
ImhskelXNffJYGbjztPucOIOMqE0Rw2X+53JsMe/v1GimX1NL2r5kebMy2c5Dryv
3Vj54YnmgPl1RJgaY1Z8W+io/LGnNio3tPh10PUcwCF6le5iNuQZ6o09tmNhs6wr
09BFAYyR004KTNNGxzmQ59lHIXXW/DI46W8PfcWqmtcGO3gn500Nx1GNChId2Vbm
mkZUmxmWcFxcOqZQszitLrGvfkrMoiRvfLAaY6o1a+UDWGX2gZH/oW5G4310YOSo
zJtIqdnl3AWyjfuGqLzuFqF4dILjryVW5m5XP0xJc0huVYjQWPyXe1Gm
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:30 2026 by rpki-client