Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6D7D/5A31EC30D3FE11F1843480D92666CEF9/LYo-k8g5hkWFwk18iD1oh166Ja4.asa
File:                     LYo-k8g5hkWFwk18iD1oh166Ja4.asa (raw, json)
Hash identifier:          GljSvy2XIwg7xjxgK0AmNGdrzv1bJeNUAfjD005hxJk=
Subject key identifier:   2D:8A:3E:93:C8:39:86:45:85:C2:4D:7C:88:3D:68:87:5E:BA:25:AE
Certificate issuer:       /CN=A91B6D7D/serialNumber=FDFBC811EED5188C01BF389D8ECA00EBA72FB108
Certificate serial:       04
Authority key identifier: FD:FB:C8:11:EE:D5:18:8C:01:BF:38:9D:8E:CA:00:EB:A7:2F:B1:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fvIEe7VGIwBvzidjsoA66cvsQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6D7D/5A31EC30D3FE11F1843480D92666CEF9/LYo-k8g5hkWFwk18iD1oh166Ja4.asa
Signing time:             Fri 30 Oct 2026 01:26:25 +0000
ASPA not before:          Fri 30 Oct 2026 01:26:25 +0000
ASPA not after:           Sun 31 Oct 2027 00:00:00 +0000
Customer ASID:            154090
Providers:                AS: 8220
                          AS: 10010
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6D7D/5A31EC30D3FE11F1843480D92666CEF9/_fvIEe7VGIwBvzidjsoA66cvsQg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6D7D/5A31EC30D3FE11F1843480D92666CEF9/_fvIEe7VGIwBvzidjsoA66cvsQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fvIEe7VGIwBvzidjsoA66cvsQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 10:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6D7D, serialNumber=FDFBC811EED5188C01BF389D8ECA00EBA72FB108
        Validity
            Not Before: Oct 30 01:26:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ae3f241-9460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ff:a9:92:88:69:90:d6:71:29:a7:62:7a:c5:
                    f7:dc:a5:14:50:d0:ab:8a:10:be:37:2d:01:44:e0:
                    c0:63:1a:0d:10:ec:8d:12:85:10:9c:9c:e3:3a:ce:
                    17:cf:16:84:b7:5d:cf:e1:d2:9c:41:14:92:75:65:
                    d7:b6:d8:45:dd:db:58:04:86:a7:33:66:1b:d6:c6:
                    76:60:9a:26:2d:fb:91:6d:99:da:af:86:e8:d7:75:
                    17:28:77:9f:9e:82:ef:ad:86:f3:e7:65:15:b0:fc:
                    8b:16:b8:bb:3e:bf:99:c2:59:79:d6:c6:b3:5b:ab:
                    b8:a4:88:1d:22:49:5f:c1:22:df:c8:5c:c6:cd:8a:
                    44:5e:3f:71:93:f7:48:d1:d4:a7:5f:03:c6:19:69:
                    6b:cf:5b:94:9b:03:fe:75:c5:ab:a2:80:5a:9a:4e:
                    aa:62:bb:dd:7f:d8:00:8b:73:64:a9:b1:e3:d9:34:
                    83:1b:6d:a6:d8:51:0b:dd:a5:e7:b3:9b:eb:87:1d:
                    10:f6:53:39:ba:67:48:e0:d4:e8:8f:70:24:b1:d2:
                    1d:e9:a0:ff:64:69:ff:25:82:f3:23:e3:dd:e7:84:
                    6e:08:83:ab:dc:be:26:09:d6:92:2c:ac:c0:d9:7f:
                    83:b6:98:21:c3:3a:b6:4f:44:6c:00:83:a4:d9:d3:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8A:3E:93:C8:39:86:45:85:C2:4D:7C:88:3D:68:87:5E:BA:25:AE
            X509v3 Authority Key Identifier:
                keyid:FD:FB:C8:11:EE:D5:18:8C:01:BF:38:9D:8E:CA:00:EB:A7:2F:B1:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6D7D/5A31EC30D3FE11F1843480D92666CEF9/_fvIEe7VGIwBvzidjsoA66cvsQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fvIEe7VGIwBvzidjsoA66cvsQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D7D/5A31EC30D3FE11F1843480D92666CEF9/LYo-k8g5hkWFwk18iD1oh166Ja4.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154090

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:9c:f5:78:29:cc:b9:03:58:ed:61:ea:2f:1a:c0:f5:51:
         80:ef:be:b3:b2:ff:eb:18:9c:61:0f:37:90:9c:e1:17:59:e4:
         fe:62:67:90:a4:a0:35:5b:25:2b:16:2c:ce:cd:2d:3a:6e:e1:
         5a:17:54:82:54:ac:44:17:5b:1e:dc:17:29:32:3b:d8:1a:ec:
         c4:25:6a:8e:98:ef:61:9c:9b:3d:9b:b8:b1:2d:c8:8b:4d:5a:
         7e:73:25:79:ec:23:ef:29:f5:62:56:53:dd:13:8e:d9:2d:4a:
         d9:46:c3:3a:17:92:3d:09:08:c0:96:2e:11:41:a3:0a:e1:d9:
         49:07:ce:be:e6:8e:c2:2c:a2:b3:ee:74:a0:1d:6a:97:02:56:
         88:b8:8f:a7:1a:c8:55:19:1f:27:ef:af:92:2d:77:6e:a1:2f:
         9e:de:c5:49:f3:06:66:2d:74:37:19:ea:f1:76:cb:ec:ee:9a:
         da:8a:d2:b7:86:87:af:a9:7d:fb:9c:d1:ab:92:e8:77:a9:cc:
         fb:2b:da:fb:c1:90:05:f0:b6:11:2d:d2:39:95:b6:fb:93:e7:
         5c:52:49:85:63:c0:87:3c:a7:74:cf:1e:f9:26:76:d6:c6:18:
         5c:ee:86:95:f8:a1:c8:77:82:3f:cc:7a:a3:e3:87:45:f3:3b:
         af:5b:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:58:26 2026 by rpki-client