Autonomous System Provider Authorization

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/AS61576.asa
File:                     AS61576.asa (raw, json)
Hash identifier:          hzL/GMtLjja5x0UhgZWzZWKpoXVKqQMpj0wnwqUlDfw=
Subject key identifier:   28:57:45:B4:A5:05:92:BD:B3:FB:B6:C1:B2:4D:6D:67:90:A4:59:31
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       322F5C1E89011186459A0828E67C98D4CD014908
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61576.asa
Signing time:             Fri 18 Sep 2026 10:35:24 +0000
ASPA not before:          Fri 18 Sep 2026 10:30:24 +0000
ASPA not after:           Fri 17 Sep 2027 10:35:24 +0000
Customer ASID:            61576
Providers:                AS: 47065
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 15:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2f:5c:1e:89:01:11:86:45:9a:08:28:e6:7c:98:d4:cd:01:49:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Sep 18 10:30:24 2026 GMT
            Not After : Sep 17 10:35:24 2027 GMT
        Subject: CN=285745B4A50592BDB3FBB6C1B24D6D6790A45931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:54:c6:40:41:f8:fd:aa:c3:33:65:40:de:
                    b6:da:12:6d:ea:b7:2a:e2:e7:6d:cb:49:2e:4e:0c:
                    aa:b0:dc:88:31:95:a7:92:11:d3:9d:92:79:6c:f6:
                    ff:32:9c:47:aa:25:18:aa:c8:fc:81:aa:06:96:29:
                    80:76:1b:84:8a:4d:2b:79:e1:04:f1:60:fd:9c:c5:
                    61:5c:98:2f:b7:34:0d:68:92:f2:f4:4b:94:65:be:
                    b8:ff:48:26:49:80:48:3e:9d:9d:4b:1e:3f:c7:85:
                    52:5a:9b:8d:c7:f0:53:df:7b:e2:d4:d9:80:f3:fb:
                    72:81:47:3f:08:82:19:cb:c3:db:8f:65:6b:d8:99:
                    d8:be:d1:68:92:04:04:3d:f1:cb:39:9a:f4:40:b4:
                    6f:fe:bf:39:15:70:21:aa:36:04:4b:d5:8d:87:bb:
                    0e:0b:e1:36:1a:a2:98:8d:2a:da:41:5a:23:d9:69:
                    cc:f1:94:b5:b4:6c:6a:f0:55:ab:18:ea:33:34:55:
                    86:a5:13:c7:64:2d:85:68:28:86:1c:cb:bd:f1:f9:
                    90:08:af:5d:32:dc:08:75:52:1a:c2:fb:a6:89:a7:
                    1c:24:01:ed:c3:f8:33:45:41:48:38:95:d2:b6:62:
                    9d:06:d6:fb:59:ce:fa:7e:c4:c3:12:5b:60:35:de:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:57:45:B4:A5:05:92:BD:B3:FB:B6:C1:B2:4D:6D:67:90:A4:59:31
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61576.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61576

    Signature Algorithm: sha256WithRSAEncryption
         32:42:e5:1c:28:a2:25:bc:f7:69:42:82:40:e6:ec:5f:da:4e:
         aa:e3:b8:7f:7e:f5:33:f2:45:c6:94:74:1e:ca:e8:9c:6b:02:
         be:8f:3b:41:cd:f6:5e:f0:4b:1c:99:2f:a3:59:d7:c2:2d:d3:
         1f:f1:1d:4a:c1:23:61:d5:74:8f:33:c1:c1:0c:81:55:3f:c7:
         e6:5c:01:7c:20:aa:3a:1e:f3:68:1d:6a:22:4d:13:45:c8:97:
         25:4e:ea:b7:03:83:6d:30:50:69:b2:ba:2c:e0:ce:54:00:f3:
         17:0e:f3:9a:02:61:9e:9b:51:b9:3c:11:76:6b:e6:76:a1:69:
         9f:8b:ea:33:b2:49:d5:6e:17:51:01:14:78:1e:1f:98:50:49:
         27:b7:40:65:89:2a:7b:35:3d:c6:0d:80:e3:7c:ff:ce:11:cc:
         22:40:19:e6:a6:cc:f7:1d:a7:36:fb:0b:c4:a9:c7:85:02:4b:
         dd:f0:de:6e:fb:8e:e2:21:76:5f:ec:3f:d1:8e:ee:e3:db:79:
         51:d6:09:be:2c:5c:75:8f:f0:0d:d9:1f:8e:4e:8f:ff:d0:5a:
         5e:6d:3c:55:8a:65:71:28:b0:fd:42:e5:14:58:ea:6a:9b:35:
         7e:82:ab:00:5c:8f:78:61:8a:c9:d8:db:78:9c:4a:44:1d:3b:
         9d:32:e2:f3
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUMi9cHokBEYZFmggo5nyY1M0BSQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz
MkM3MUREMjAeFw0yNjA5MTgxMDMwMjRaFw0yNzA5MTcxMDM1MjRaMDMxMTAvBgNV
BAMTKDI4NTc0NUI0QTUwNTkyQkRCM0ZCQjZDMUIyNEQ2RDY3OTBBNDU5MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80VTGQEH4/arDM2VA3rbaEm3q
tyri523LSS5ODKqw3IgxlaeSEdOdknls9v8ynEeqJRiqyPyBqgaWKYB2G4SKTSt5
4QTxYP2cxWFcmC+3NA1okvL0S5Rlvrj/SCZJgEg+nZ1LHj/HhVJam43H8FPfe+LU
2YDz+3KBRz8IghnLw9uPZWvYmdi+0WiSBAQ98cs5mvRAtG/+vzkVcCGqNgRL1Y2H
uw4L4TYaopiNKtpBWiPZaczxlLW0bGrwVasY6jM0VYalE8dkLYVoKIYcy73x+ZAI
r10y3Ah1UhrC+6aJpxwkAe3D+DNFQUg4ldK2Yp0G1vtZzvp+xMMSW2A13l7BAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUKFdFtKUFkr2z+7bBsk1tZ5CkWTEwHwYDVR0j
BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v
dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE
RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp
bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv
Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjBU
BggrBgEFBQcBCwRIMEYwRAYIKwYBBQUHMAuGOHJzeW5jOi8va3JpbGwuZGFjcy51
dHdlbnRlLm5sL3JlcG8vdXR3ZW50ZS8xL0FTNjE1NzYuYXNhMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPCIMA0GCSqG
SIb3DQEBCwUAA4IBAQAyQuUcKKIlvPdpQoJA5uxf2k6q47h/fvUz8kXGlHQeyuic
awK+jztBzfZe8EscmS+jWdfCLdMf8R1KwSNh1XSPM8HBDIFVP8fmXAF8IKo6HvNo
HWoiTRNFyJclTuq3A4NtMFBpsros4M5UAPMXDvOaAmGem1G5PBF2a+Z2oWmfi+oz
sknVbhdRARR4Hh+YUEknt0BliSp7NT3GDYDjfP/OEcwiQBnmpsz3Hac2+wvEqceF
Akvd8N5u+47iIXZf7D/Rju7j23lR1gm+LFx1j/AN2R+OTo//0FpebTxVimVxKLD9
QuUUWOpqmzV+gqsAXI94YYrJ2Nt4nEpEHTudMuLz
-----END CERTIFICATE-----
Generated at Sun Sep 20 09:21:23 2026 by rpki-client