Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/sU-AY1fvi7vfOnC4gLKzTl2jXoM.asa
File:                     sU-AY1fvi7vfOnC4gLKzTl2jXoM.asa (raw, json)
Hash identifier:          I6p3UURilsrl6l6rhn0wT3MhCoiuv3Y8LPk+lcr5FbE=
Subject key identifier:   B1:4F:80:63:57:EF:8B:BB:DF:3A:70:B8:80:B2:B3:4E:5D:A3:5E:83
Certificate issuer:       /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Certificate serial:       3682
Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/sU-AY1fvi7vfOnC4gLKzTl2jXoM.asa
Signing time:             Mon 14 Sep 2026 08:44:38 +0000
ASPA not before:          Mon 14 Sep 2026 08:44:38 +0000
ASPA not after:           Tue 01 Dec 2026 00:00:00 +0000
Customer ASID:            23955
Providers:                AS: 38740
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13954 (0x3682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
        Validity
            Not Before: Sep 14 08:44:38 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6aa7b3f6-e90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:4e:21:85:78:12:08:0a:b4:bd:b5:8a:56:
                    b6:8c:7d:a0:df:a9:3f:17:3c:c3:33:2b:f0:6c:c5:
                    7c:b0:07:83:bd:39:e5:90:ad:8e:65:e6:a6:74:94:
                    13:25:aa:82:f7:6c:ea:96:9a:c2:4c:83:a0:af:34:
                    27:7a:82:c9:f4:82:f0:ff:2c:ed:33:6e:f0:fe:bb:
                    08:e9:d0:41:55:67:8a:8b:78:b7:80:c4:bf:08:30:
                    b1:b8:7a:67:62:57:d4:30:19:90:eb:81:80:b5:09:
                    0f:cb:9a:fb:b6:3a:be:24:d0:14:09:a2:d3:74:6c:
                    27:1b:1b:e0:2f:0c:60:08:fe:36:8b:19:d1:14:8d:
                    fe:76:4b:1d:c4:82:2b:b2:bf:62:4e:42:1e:3e:04:
                    cc:91:a1:5b:90:f0:a3:5f:06:a9:ad:8d:ac:f0:e4:
                    c5:f6:c3:c2:76:7e:dd:66:90:d4:24:34:a9:97:cf:
                    2e:6c:40:88:65:6b:33:74:27:ef:bd:3c:8c:0f:69:
                    68:fa:8f:df:ab:bf:94:b1:29:fb:71:c3:64:81:52:
                    d0:61:66:e1:23:26:cf:fd:a1:e7:e1:77:65:ee:73:
                    02:d3:cc:1d:6e:cb:03:c1:46:37:25:58:46:7e:53:
                    12:33:f7:53:a3:3c:6b:82:a0:7d:30:43:85:f4:af:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:80:63:57:EF:8B:BB:DF:3A:70:B8:80:B2:B3:4E:5D:A3:5E:83
            X509v3 Authority Key Identifier:
                keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/sU-AY1fvi7vfOnC4gLKzTl2jXoM.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23955

    Signature Algorithm: sha256WithRSAEncryption
         c8:5f:23:5f:4d:82:13:19:6a:b1:2f:61:31:d5:1a:cf:81:ba:
         6f:2f:71:14:b5:1a:d0:a7:15:78:81:02:a4:1b:da:4b:10:9b:
         71:64:88:b3:f1:d4:82:44:a3:e6:9e:35:1c:c3:01:65:bd:af:
         15:0c:62:19:04:9d:5e:c6:a9:45:2b:bc:59:22:54:73:14:67:
         ae:22:bf:4e:79:67:25:60:84:71:90:8a:0d:13:11:c7:6e:50:
         ac:ec:e8:b2:8e:2b:fa:b5:33:05:11:6f:2c:ce:a4:af:55:bd:
         cd:8e:ed:23:0c:df:d4:30:ec:3f:ae:ea:6b:08:62:ad:18:9b:
         af:4a:bd:36:64:2b:a5:6f:f1:9e:3b:75:f5:d8:73:cb:19:1f:
         50:ef:8b:0a:ab:c8:a6:8f:17:93:b7:d7:32:7f:af:80:32:91:
         01:0b:4d:37:03:52:82:53:8e:23:5a:c5:8e:53:f4:4f:91:8f:
         c9:a5:17:da:9f:da:2a:e9:72:7a:28:3d:b9:29:a7:ba:55:ce:
         f2:40:75:1b:ad:a7:91:3a:f2:0a:11:22:ce:9a:d0:6d:92:0f:
         68:fa:26:27:c7:e5:3e:03:00:f2:a8:21:55:5a:f4:bc:1a:5b:
         26:88:6f:3c:d8:e1:aa:43:fd:0b:61:64:68:59:21:3a:9d:d7:
         0e:27:b9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:09 2026 by rpki-client