Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/5NBcqAlaOg66pNLmm5Cl2dgPO6s.asa
File:                     5NBcqAlaOg66pNLmm5Cl2dgPO6s.asa (raw, json)
Hash identifier:          fr4lj7FdfvgLl5ywkg0niKHxid5/V/hlakYyow27Qzg=
Subject key identifier:   E4:D0:5C:A8:09:5A:3A:0E:BA:A4:D2:E6:9B:90:A5:D9:D8:0F:3B:AB
Certificate issuer:       /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial:       23C5
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/5NBcqAlaOg66pNLmm5Cl2dgPO6s.asa
Signing time:             Wed 02 Sep 2026 06:44:20 +0000
ASPA not before:          Wed 02 Sep 2026 06:44:20 +0000
ASPA not after:           Fri 30 Jul 2027 00:00:00 +0000
Customer ASID:            134128
Providers:                AS: 58682
                          AS: 134712
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
                          rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9157 (0x23c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
        Validity
            Not Before: Sep  2 06:44:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a97c5c3-bab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:cc:4f:5f:18:cc:42:9b:8e:e3:b5:cd:8d:
                    61:90:1f:e1:42:e5:e3:aa:3d:5c:de:8c:40:1e:e8:
                    41:f6:89:68:a1:d3:fc:26:0c:43:c9:d5:1f:73:cc:
                    f5:9b:8a:ce:14:08:63:0e:21:2c:3b:b2:99:59:50:
                    cd:ca:6d:e7:f8:62:f2:45:cf:da:6c:2c:03:b8:f9:
                    83:f5:18:20:5d:fa:85:dd:13:22:40:41:a2:cc:d1:
                    c2:d3:fc:74:d7:39:f7:94:68:02:7e:00:84:d4:c6:
                    e8:01:5a:ab:4f:a8:73:93:16:94:79:9d:60:da:9f:
                    fb:e8:53:38:b3:14:64:55:e4:25:dc:84:99:bc:58:
                    80:fa:a9:f5:43:ab:52:fc:9e:20:74:a4:23:b2:9f:
                    ea:30:41:76:92:9d:43:a2:65:48:aa:af:85:1d:ed:
                    e7:f2:2b:96:38:47:2a:3e:ca:25:94:b8:7e:29:c6:
                    fd:75:98:b1:ea:2d:51:74:16:d0:63:45:dd:96:61:
                    c1:7b:b7:ac:8b:0f:f9:ce:45:5f:41:95:1f:d8:02:
                    ce:35:78:e6:2f:ef:60:0c:3f:00:5c:7c:c9:49:c4:
                    04:6c:df:2b:d5:21:3a:18:69:5a:cd:89:33:45:7d:
                    89:94:bf:5a:37:65:7c:68:17:9e:8f:d2:0f:bb:3e:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D0:5C:A8:09:5A:3A:0E:BA:A4:D2:E6:9B:90:A5:D9:D8:0F:3B:AB
            X509v3 Authority Key Identifier:
                keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/5NBcqAlaOg66pNLmm5Cl2dgPO6s.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134128

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:80:d4:f9:61:fa:e7:93:cd:d4:6d:59:ee:44:2c:f7:96:
         e2:19:20:af:80:6b:05:0e:3b:c8:51:fd:44:28:7b:5f:31:80:
         88:86:b7:79:22:20:f4:09:ca:9a:7e:db:c0:5e:c9:62:0e:13:
         b6:14:1a:da:c5:83:54:f1:09:d9:f5:c3:9c:c1:57:d6:f5:98:
         f5:47:47:da:15:17:0d:0c:85:9d:2a:d9:39:04:cb:0a:d7:d8:
         67:77:f1:49:bb:05:e9:12:e5:74:30:3b:e4:3e:8b:de:2b:b0:
         5a:19:39:02:09:5b:3b:87:4e:a5:dc:2c:e3:90:67:97:9e:d9:
         36:0b:41:d5:76:8e:34:74:96:ea:cf:6a:62:ce:ee:58:b5:1a:
         36:55:fa:2f:95:dc:41:dc:69:9c:b7:1c:ec:78:eb:23:81:d0:
         a0:48:be:86:41:a8:c2:4f:40:7b:ff:38:22:1e:8a:42:e7:23:
         76:9a:5f:a7:c3:16:f3:bd:c0:6c:e8:49:5e:be:e5:09:9c:a8:
         c9:ab:8f:05:25:a3:77:29:bb:cc:40:10:d2:61:fa:e0:32:0a:
         d7:54:f1:6d:b3:bb:60:91:6d:ae:8c:a9:3b:f6:e2:d7:b0:c8:
         46:a3:4d:a6:bf:8b:f2:e9:4c:d0:6e:84:89:6e:1b:38:c8:bc:
         32:d5:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:30 2026 by rpki-client