Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/D3aCoPqKblQAIav7yYafPjAa_gw.asa
File:                     D3aCoPqKblQAIav7yYafPjAa_gw.asa (raw, json)
Hash identifier:          1aVy+bgOfWAPzgo5W1iz+66XID+mqsX5CTmdSYDd+3A=
Subject key identifier:   0F:76:82:A0:FA:8A:6E:54:00:21:AB:FB:C9:86:9F:3E:30:1A:FE:0C
Certificate issuer:       /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial:       02FF
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/D3aCoPqKblQAIav7yYafPjAa_gw.asa
Signing time:             Wed 02 Sep 2026 04:16:45 +0000
ASPA not before:          Wed 02 Sep 2026 04:16:45 +0000
ASPA not after:           Sun 31 Jan 2027 00:00:00 +0000
Customer ASID:            149021
Providers:                AS: 17557
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75
        Validity
            Not Before: Sep  2 04:16:45 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a97a32d-6dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:55:e2:13:57:d2:00:a4:41:02:94:d3:1a:
                    27:7a:b1:f8:8d:97:93:d5:a7:c9:2d:6e:15:36:5c:
                    26:c4:d6:99:f2:c6:82:2b:fd:d3:54:ee:c8:ae:a4:
                    a1:9c:8e:92:0e:20:9f:24:fd:68:b6:d5:65:f0:4e:
                    41:99:38:d0:13:0b:95:e7:16:4d:53:0d:f0:de:6b:
                    e4:95:e3:7d:3b:37:7c:b7:10:0f:59:d2:f4:5d:75:
                    7b:7f:5f:55:29:75:1c:c5:16:66:c6:54:6f:5d:d6:
                    03:87:b8:f7:b7:f1:90:ba:b8:9e:45:c4:cd:76:00:
                    88:45:26:d5:b1:cd:88:f4:3f:c6:29:26:12:d5:cd:
                    75:7f:7a:bf:37:60:d9:2d:46:01:19:69:f0:d4:78:
                    f8:1c:36:b5:1b:76:62:57:38:e0:a1:62:1d:32:04:
                    bf:ff:e8:c0:0d:ad:a1:e3:43:3a:5d:8c:bf:54:0f:
                    a6:d3:2f:a0:9a:2f:3c:b3:5c:3f:f5:14:56:e6:2f:
                    c7:b5:19:5f:4e:4e:70:74:c5:59:7e:f1:30:98:dc:
                    ff:78:19:a4:ee:87:11:b1:e8:e2:78:40:fa:81:06:
                    33:b6:42:bd:ac:fc:6d:44:02:28:37:92:f2:ee:9a:
                    86:f5:38:22:49:3e:fb:01:4f:7a:ab:d3:25:a1:8d:
                    aa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:82:A0:FA:8A:6E:54:00:21:AB:FB:C9:86:9F:3E:30:1A:FE:0C
            X509v3 Authority Key Identifier:
                keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/D3aCoPqKblQAIav7yYafPjAa_gw.asa

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149021

    Signature Algorithm: sha256WithRSAEncryption
         56:69:ba:78:7b:ca:f7:33:1c:4d:ba:aa:e0:07:20:ab:87:7f:
         4e:c9:95:01:e1:5a:39:c8:6b:f6:98:33:ec:bf:44:79:b1:b8:
         14:74:c7:95:ed:33:80:ba:8b:eb:f3:89:4c:da:b7:a2:08:f2:
         13:35:88:88:4e:4c:b3:4d:cb:76:e7:1d:80:1c:e8:ab:50:ff:
         38:f7:dd:63:0a:96:1d:6c:06:69:a3:98:51:99:06:f7:28:c4:
         69:c1:28:e3:3b:86:3d:07:04:6c:57:aa:78:1c:ff:27:60:9d:
         6e:ba:eb:b0:bf:52:26:f6:ac:74:ba:be:cd:ad:51:b9:1a:34:
         19:3b:f1:44:1f:f0:79:3c:f2:44:62:fd:4b:e7:34:b6:40:45:
         ed:ac:43:ed:6e:02:5b:25:24:f7:ac:85:fd:09:9b:59:62:05:
         50:9e:d0:71:c5:92:0d:71:e9:b7:95:dd:4b:be:86:9c:e8:b9:
         b7:03:80:05:69:1a:95:f9:d8:aa:43:e8:77:c2:35:41:f4:f2:
         1c:25:9b:c2:86:4e:d9:a9:15:51:e3:63:eb:48:3f:3a:44:a6:
         13:62:a2:5b:34:ff:2b:25:cb:69:56:08:21:54:ac:e4:c3:d9:
         54:c9:ee:99:a3:9e:0f:81:a1:e5:21:2e:05:67:a2:0b:fd:82:
         8f:d1:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:02 2026 by rpki-client