Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/y1g0K3BpCtGdwmwVYGz416Ro37A.asa
File:                     y1g0K3BpCtGdwmwVYGz416Ro37A.asa (raw, json)
Hash identifier:          14Kb56nmcCqX1/aGgMSOO20n7FfaDrbKczoyK0CGkuA=
Subject key identifier:   CB:58:34:2B:70:69:0A:D1:9D:C2:6C:15:60:6C:F8:D7:A4:68:DF:B0
Certificate issuer:       /CN=A91B4E1D/serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2
Certificate serial:       07
Authority key identifier: DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/y1g0K3BpCtGdwmwVYGz416Ro37A.asa
Signing time:             Fri 18 Sep 2026 04:45:53 +0000
ASPA not before:          Fri 18 Sep 2026 04:45:53 +0000
ASPA not after:           Sun 31 Oct 2027 00:00:00 +0000
Customer ASID:            154796
Providers:                AS: 18400
                          AS: 23838
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E1D, serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2
        Validity
            Not Before: Sep 18 04:45:53 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aacc200-f37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:45:d8:c5:a3:b2:4a:18:de:07:c5:d6:3c:
                    59:7f:50:9f:6d:41:29:77:4f:79:73:21:99:b1:fc:
                    07:66:cd:4d:7f:bc:64:f3:38:28:9a:c1:5a:3b:36:
                    ef:94:66:40:1d:dc:5f:9f:aa:c4:88:59:ac:9b:c9:
                    09:7b:1e:f3:d0:10:ae:0a:fe:f3:ae:16:a9:54:9c:
                    dc:cf:ff:4c:f4:e4:a1:0f:23:a7:ce:c6:5c:56:a5:
                    7f:f2:e7:d6:cd:2e:ca:c6:da:28:eb:c8:e5:16:80:
                    b8:e9:5d:d0:b9:fe:c2:c4:a2:68:38:d1:9a:5a:2c:
                    e1:00:78:3e:c0:22:8e:26:ef:cc:82:51:11:4c:81:
                    86:b2:1d:ad:41:34:28:29:e1:b9:a3:da:b8:0c:f4:
                    08:c3:f3:56:ff:85:87:8e:68:b3:f6:88:33:7b:8a:
                    02:1e:83:04:48:55:07:22:14:8f:74:6e:64:bd:da:
                    86:66:f4:14:7b:81:dd:54:31:a7:4b:c3:d9:f0:01:
                    fa:ce:1c:c5:e5:5b:1f:f1:85:1e:6c:b8:3e:fc:3f:
                    d6:dc:db:60:09:80:02:96:fa:57:18:aa:0d:03:8f:
                    8c:06:1f:e5:cb:cf:29:8c:6e:c0:5b:03:44:d0:21:
                    6b:86:0d:2c:3d:85:74:98:c2:82:30:01:c8:ad:a8:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:34:2B:70:69:0A:D1:9D:C2:6C:15:60:6C:F8:D7:A4:68:DF:B0
            X509v3 Authority Key Identifier:
                keyid:DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/y1g0K3BpCtGdwmwVYGz416Ro37A.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154796

    Signature Algorithm: sha256WithRSAEncryption
         77:56:fb:2c:13:5b:52:3e:c9:e5:e7:05:65:4d:0c:e9:06:6a:
         68:b0:6d:3d:df:9a:48:b5:ee:8b:b9:99:4b:dd:25:c1:9a:2d:
         0e:43:05:ac:c2:bb:8a:9c:0b:0e:b7:c6:d1:ca:2f:c1:63:5e:
         7d:ac:7d:58:cd:5d:1c:52:6f:f5:d9:9e:7a:2e:21:e5:03:86:
         66:6c:a8:77:c3:16:3a:53:27:8d:d0:16:40:3f:23:44:03:42:
         91:1f:3e:1e:11:99:f5:29:39:34:bc:10:6a:4f:66:e7:3f:c4:
         b0:c3:3f:1d:b2:f2:f2:a2:42:39:20:82:3e:ff:37:1f:3c:cf:
         f5:4e:7e:c8:25:5e:80:c7:3f:70:dd:8b:f4:25:2f:9e:eb:03:
         20:84:80:c3:c0:fc:e9:8e:2d:3e:a9:0b:7f:5f:9d:2b:0c:2d:
         47:e0:0b:14:97:ec:8d:ca:ad:71:c1:6e:73:95:37:2b:9f:bd:
         69:55:de:29:19:82:20:e8:b8:f0:4a:62:92:0b:a3:ca:63:86:
         72:ea:41:9c:99:f2:6d:37:a3:3e:d7:62:76:02:5c:ec:9c:3c:
         7e:30:19:da:99:fc:1f:42:c8:34:f3:34:ec:94:69:2e:cb:da:
         12:4e:a4:06:36:f8:3d:40:75:84:2b:03:12:a9:56:b7:ed:47:
         04:ef:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:19:47 2026 by rpki-client