Autonomous System Provider Authorization

$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/2/AS216141.asa
File:                     AS216141.asa (raw, json)
Hash identifier:          J2ejv3goep9vFMRMBGjUlpYmZPle023N+Fkti7poL88=
Subject key identifier:   61:61:33:5D:0B:96:81:50:B4:79:67:74:53:36:14:4E:3B:DC:D4:0B
Certificate issuer:       /CN=a93ebcce61441fd6dcd28d6880cf9263c38efcef
Certificate serial:       50A7B0A0DDA64B27D874FFF9A1692E04E5596B26
Authority key identifier: A9:3E:BC:CE:61:44:1F:D6:DC:D2:8D:68:80:CF:92:63:C3:8E:FC:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT68zmFEH9bc0o1ogM-SY8OO_O8.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/2/AS216141.asa
Signing time:             Fri 11 Sep 2026 14:53:52 +0000
ASPA not before:          Fri 11 Sep 2026 14:48:52 +0000
ASPA not after:           Fri 10 Sep 2027 14:53:52 +0000
Customer ASID:            216141
Providers:                AS: 212027
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/2/A93EBCCE61441FD6DCD28D6880CF9263C38EFCEF.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/2/A93EBCCE61441FD6DCD28D6880CF9263C38EFCEF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qT68zmFEH9bc0o1ogM-SY8OO_O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 22:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a7:b0:a0:dd:a6:4b:27:d8:74:ff:f9:a1:69:2e:04:e5:59:6b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93ebcce61441fd6dcd28d6880cf9263c38efcef
        Validity
            Not Before: Sep 11 14:48:52 2026 GMT
            Not After : Sep 10 14:53:52 2027 GMT
        Subject: CN=6161335D0B968150B47967745336144E3BDCD40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:6b:0d:95:e1:86:a2:94:c9:3d:92:94:47:
                    5e:75:a8:15:fa:7f:be:8e:1a:b4:e7:08:43:96:de:
                    69:e6:41:b5:65:6a:fe:80:e2:eb:b7:c5:eb:23:0a:
                    56:7d:de:bf:3b:c1:9a:8c:7c:8e:f8:21:3c:f0:e1:
                    55:96:29:9d:31:fa:16:30:76:e2:89:60:4d:61:bb:
                    f2:94:ba:57:fc:6c:49:be:3c:ff:25:54:70:b2:3b:
                    1e:4e:e1:17:e6:76:4b:f0:dc:3d:a1:1e:44:79:06:
                    30:9e:41:88:9f:95:3d:71:e7:e6:b0:26:30:78:ad:
                    1d:38:1a:ad:a6:9e:3f:24:04:2c:90:02:96:0e:3a:
                    6c:51:43:5f:ad:b3:53:9c:dd:e3:57:a1:f3:5d:2b:
                    bb:fc:2d:cd:8d:fa:b2:02:e4:7f:c7:5b:f1:b9:1f:
                    a0:34:a9:cb:0b:94:03:ef:03:de:28:6e:b3:1a:c7:
                    61:b3:65:0e:c1:ea:77:57:e1:f3:a2:1a:11:83:ef:
                    27:08:2e:43:b8:33:5b:d9:78:c1:f6:f1:6e:86:2e:
                    77:ee:af:1f:af:72:ad:8a:b9:4f:ba:98:25:b8:73:
                    c8:e4:e7:2c:2f:88:ef:6f:5c:63:3e:50:2e:fb:30:
                    16:f6:f8:4f:54:18:94:b6:d8:b7:c8:f9:1e:7c:b1:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:33:5D:0B:96:81:50:B4:79:67:74:53:36:14:4E:3B:DC:D4:0B
            X509v3 Authority Key Identifier:
                keyid:A9:3E:BC:CE:61:44:1F:D6:DC:D2:8D:68:80:CF:92:63:C3:8E:FC:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/2/A93EBCCE61441FD6DCD28D6880CF9263C38EFCEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT68zmFEH9bc0o1ogM-SY8OO_O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/2/AS216141.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216141

    Signature Algorithm: sha256WithRSAEncryption
         85:84:76:08:03:54:95:57:28:5c:48:e9:df:03:09:e6:cb:da:
         3d:5c:de:61:c2:c9:38:2e:36:d4:50:54:4a:c2:88:63:2f:e0:
         e7:7c:75:4a:07:50:25:73:7c:c2:15:8d:42:d4:a4:63:87:d2:
         19:b7:ad:ab:f5:e5:23:07:10:74:04:7e:82:3f:ea:95:43:c4:
         25:6a:1a:93:21:fe:45:80:47:20:e2:e8:ba:75:13:eb:2a:f7:
         a3:37:a5:de:7f:6a:d6:11:84:a0:84:c6:65:d7:8b:4b:4e:10:
         a9:a4:37:22:9d:e6:66:5a:72:2d:d8:98:c8:dd:b1:01:14:86:
         ae:a2:e4:c6:7c:d4:f5:83:85:79:c7:7e:d4:a0:de:e7:e2:d1:
         25:ce:30:93:20:ae:c3:0a:1a:7a:ab:3b:b4:c6:b9:6b:9a:04:
         8e:41:ae:8e:ce:85:31:6d:2a:36:0c:40:d3:e0:a8:8e:ac:f8:
         42:08:e7:4b:55:85:e2:9d:3c:de:23:08:8b:52:14:9a:7f:ac:
         c3:f0:dd:70:33:51:65:f6:1f:ff:57:a3:ac:f9:1b:d5:e5:d8:
         a6:f4:51:f1:d8:ea:b1:9e:f0:56:e9:7c:9b:f4:07:f6:9d:e8:
         05:0f:fd:b3:e9:67:35:56:5f:f2:8b:70:4b:5c:c6:f3:cf:42:
         27:e2:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:53 2026 by rpki-client