Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/DZr8Whm9G0q2UTY6ATAt2PQNZKU.asa
File:                     DZr8Whm9G0q2UTY6ATAt2PQNZKU.asa (raw, json)
Hash identifier:          EQuIyZqz36tlNEX2RXbyf/oGDe/1+hdr6fH5I/bv7Ms=
Subject key identifier:   0D:9A:FC:5A:19:BD:1B:4A:B6:51:36:3A:01:30:2D:D8:F4:0D:64:A5
Certificate issuer:       /CN=A91CDA42/serialNumber=44F64C473E3A638D59E18A0AFA238DCD8798C754
Certificate serial:       02
Authority key identifier: 44:F6:4C:47:3E:3A:63:8D:59:E1:8A:0A:FA:23:8D:CD:87:98:C7:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/DZr8Whm9G0q2UTY6ATAt2PQNZKU.asa
Signing time:             Wed 16 Sep 2026 11:08:13 +0000
ASPA not before:          Wed 16 Sep 2026 11:08:13 +0000
ASPA not after:           Wed 01 Dec 2027 00:00:00 +0000
Customer ASID:            154809
Providers:                AS: 12297
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl
                          rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDA42, serialNumber=44F64C473E3A638D59E18A0AFA238DCD8798C754
        Validity
            Not Before: Sep 16 11:08:13 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aaa789d-10e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:e9:21:e6:80:d5:ab:6c:9a:09:36:5e:42:
                    07:89:5b:8b:cc:b9:9a:bd:62:fc:8e:82:79:08:9d:
                    1c:e3:f3:9c:96:65:e9:23:c6:88:bc:4b:a0:c2:c1:
                    ad:e2:59:b8:cc:a0:74:28:e9:3a:7d:31:9f:0a:68:
                    8b:9b:e6:54:37:60:61:df:f5:07:28:e9:96:ca:21:
                    15:76:79:2a:a2:ea:ac:e7:1a:7c:f1:db:f7:74:d9:
                    e3:9d:e1:e8:67:6d:44:fa:e1:b8:53:35:2b:01:4d:
                    39:fa:1c:b0:e1:db:9d:70:86:dd:67:d8:a0:c9:e0:
                    05:7e:0b:55:a6:4b:15:22:54:b8:a6:55:3a:ef:0f:
                    96:6c:1d:a6:00:88:72:6c:91:61:d7:6f:60:ba:5b:
                    26:4d:11:c1:b5:81:0f:7e:00:a9:a9:b6:68:1c:6e:
                    e4:c6:8e:6d:60:fe:69:48:e2:67:29:55:33:e1:ff:
                    ef:4b:6a:12:94:c1:1b:5d:67:bf:50:73:21:08:42:
                    84:af:88:f2:56:52:21:82:ed:ca:82:98:39:f1:d2:
                    82:00:03:1d:50:2e:f4:9d:20:ed:41:cc:00:b1:f4:
                    92:3d:b7:a0:6d:fe:c3:6a:73:59:eb:28:9d:05:ee:
                    42:40:47:15:39:6f:52:10:a4:a6:83:58:92:4c:88:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9A:FC:5A:19:BD:1B:4A:B6:51:36:3A:01:30:2D:D8:F4:0D:64:A5
            X509v3 Authority Key Identifier:
                keyid:44:F6:4C:47:3E:3A:63:8D:59:E1:8A:0A:FA:23:8D:CD:87:98:C7:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/RPZMRz46Y41Z4YoK-iONzYeYx1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPZMRz46Y41Z4YoK-iONzYeYx1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDA42/CCAFCAFEB1BA11F1A69E71483911F970/DZr8Whm9G0q2UTY6ATAt2PQNZKU.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154809

    Signature Algorithm: sha256WithRSAEncryption
         66:01:02:81:04:16:69:99:4b:83:19:77:08:8c:50:61:77:f2:
         37:68:3c:ab:cb:c8:93:d2:3e:68:4e:24:9b:b6:65:14:29:cf:
         8e:3e:87:48:c7:92:e5:25:29:32:17:ce:2d:13:88:ed:60:53:
         41:41:dd:34:66:f7:12:06:bf:0d:2d:90:ae:d7:43:da:7a:94:
         a0:77:49:90:8c:87:d2:44:87:5b:83:a9:cd:a8:c3:34:70:6c:
         73:8e:8f:1f:e4:14:c3:ad:77:cf:56:38:22:37:ee:9d:5f:15:
         f0:9f:f1:e1:f9:98:2b:40:ef:eb:68:2f:67:a0:f6:28:54:78:
         e4:32:d2:59:0e:ae:21:09:46:93:1a:97:21:a8:01:07:e6:83:
         39:23:14:b6:67:9d:12:7c:74:c9:36:47:f7:34:a9:ea:cd:e6:
         c9:ac:a0:1b:a9:5f:86:00:96:4b:b1:1e:ab:b3:5a:35:38:a8:
         f4:c3:03:47:31:93:87:ce:4d:b1:19:40:dc:2e:df:da:df:1c:
         2d:10:7f:f7:09:a4:68:3c:b6:13:70:88:c0:b4:16:df:06:a3:
         c8:7a:38:36:7a:a7:dc:df:44:f7:65:81:54:0f:a5:82:3f:07:
         82:f1:c0:ef:9e:d7:d1:be:6f:11:aa:b4:90:5a:38:e1:74:98:
         40:96:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:36:49 2026 by rpki-client