Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/JAzqT-1i6473RmwqyvfoRU9VLkw.asa
File:                     JAzqT-1i6473RmwqyvfoRU9VLkw.asa (raw, json)
Hash identifier:          25jfvXdrTMOEDVc4X728q//3lY8GOSHtbJIe1scysq8=
Subject key identifier:   24:0C:EA:4F:ED:62:EB:8E:F7:46:6C:2A:CA:F7:E8:45:4F:55:2E:4C
Certificate issuer:       /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial:       01A0E8E4F611278A3BC150FBAB65DA6AE7D7
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/JAzqT-1i6473RmwqyvfoRU9VLkw.asa
Signing time:             Mon 28 Sep 2026 16:41:54 +0000
ASPA not before:          Mon 28 Sep 2026 16:41:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60503
Providers:                AS: 1031
                          AS: 3257
                          AS: 9002
                          AS: 16735
                          AS: 26162
                          AS: 37468
                          AS: 43350
                          AS: 52468
                          AS: 53013
                          AS: 272713
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:e4:f6:11:27:8a:3b:c1:50:fb:ab:65:da:6a:e7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
        Validity
            Not Before: Sep 28 16:41:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=240cea4fed62eb8ef7466c2acaf7e8454f552e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:c5:66:32:5c:c4:49:ac:3c:a1:3f:8d:d8:
                    22:6d:00:15:6c:31:00:9d:e4:e3:8e:94:e0:1d:31:
                    6e:d8:82:78:81:70:62:86:ac:52:33:78:d8:20:ff:
                    05:d3:d1:1f:a8:92:39:e4:b6:24:5b:e3:4f:6a:37:
                    94:2d:d7:3a:26:c6:17:74:1f:bb:e9:c7:2f:d2:c4:
                    11:d0:ac:f6:e1:69:dd:8a:c0:ad:65:6c:d9:7d:ee:
                    62:62:5c:8e:26:e2:51:37:db:18:a6:8e:f2:b0:f1:
                    41:8e:b5:ff:ab:0c:e5:1d:14:9b:68:f7:90:ee:8f:
                    93:2b:82:78:26:e5:fe:ab:20:e8:8f:98:af:86:3c:
                    34:cb:22:4d:dc:7e:c4:85:ef:00:51:2b:f5:40:86:
                    dc:9c:85:ff:c6:dc:f6:ba:4b:a8:ca:07:a6:bd:ef:
                    a2:6a:98:8c:a5:c1:48:c4:c3:14:68:04:aa:0e:1b:
                    62:d4:34:9c:d0:20:59:91:30:78:ee:94:c6:f5:1a:
                    d7:e0:19:3e:23:8f:b0:c8:1e:f4:46:26:8f:7e:93:
                    8e:00:86:02:ac:78:cc:3c:18:cb:b8:51:0a:91:b5:
                    47:3a:7d:d6:9f:8d:6e:dd:fe:60:4d:3f:56:4d:b4:
                    92:7b:eb:dd:1d:14:7f:ad:07:7a:37:f2:f8:c2:cb:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0C:EA:4F:ED:62:EB:8E:F7:46:6C:2A:CA:F7:E8:45:4F:55:2E:4C
            X509v3 Authority Key Identifier:
                keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/JAzqT-1i6473RmwqyvfoRU9VLkw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60503

    Signature Algorithm: sha256WithRSAEncryption
         6b:b6:c7:f7:2d:9c:7b:5c:fe:43:7a:09:c4:13:4c:1b:ec:01:
         a7:a5:f7:6d:e5:a2:57:09:5e:04:ac:bd:01:8f:52:2f:40:e4:
         89:32:b0:c1:75:78:53:21:f3:6d:1f:ef:4c:28:db:56:3f:24:
         63:f6:a3:bb:b8:9e:f1:e5:1b:46:95:0f:d9:4e:2b:23:f0:99:
         bf:55:e3:78:a6:9b:a6:f3:be:0c:6b:b4:10:01:e7:0f:9d:8f:
         68:e6:7d:f2:2e:7a:c0:d1:63:77:75:83:ae:f3:a8:03:13:ca:
         1f:d1:7b:e2:f5:70:90:31:0a:97:85:17:3b:a5:1d:05:cb:f5:
         bf:c1:8c:31:16:ee:39:81:54:7d:9e:e6:33:15:7a:19:ae:4e:
         eb:8f:8f:03:4d:49:01:8f:4a:09:ed:5e:8c:83:c9:f4:e6:4b:
         51:d3:17:08:f1:95:3b:88:65:5f:9a:e2:1a:c5:87:fa:ad:36:
         b2:f0:9c:f8:d8:5f:8d:11:41:7e:87:38:f1:5e:fb:f4:8c:1c:
         4e:95:1a:f1:ec:e9:e0:ee:6d:37:96:fb:1c:8d:df:58:e3:8f:
         90:b1:a7:aa:ef:51:cc:7f:ea:8d:4f:c0:2c:8b:49:ec:54:32:
         98:fe:d4:ad:29:4c:68:95:8c:66:24:11:a0:d3:1d:58:58:cf:
         2b:5c:74:3f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDo5PYRJ4o7wVD7q2XaaufXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDIzYjM5NzA1YjM0NWE4NmVmZjNmMTRlZjZiMWU0ZGI0
NTkzOWUwHhcNMjYwOTI4MTY0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDBjZWE0ZmVkNjJlYjhlZjc0NjZjMmFjYWY3ZTg0NTRmNTUyZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVrFZjJcxEmsPKE/jdgibQAVbDEA
neTjjpTgHTFu2IJ4gXBihqxSM3jYIP8F09EfqJI55LYkW+NPajeULdc6JsYXdB+7
6ccv0sQR0Kz24WndisCtZWzZfe5iYlyOJuJRN9sYpo7ysPFBjrX/qwzlHRSbaPeQ
7o+TK4J4JuX+qyDoj5ivhjw0yyJN3H7Ehe8AUSv1QIbcnIX/xtz2ukuoygemve+i
apiMpcFIxMMUaASqDhti1DSc0CBZkTB47pTG9RrX4Bk+I4+wyB70RiaPfpOOAIYC
rHjMPBjLuFEKkbVHOn3Wn41u3f5gTT9WTbSSe+vdHRR/rQd6N/L4wstKqQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCQM6k/tYuuO90ZsKsr36EVPVS5MMB8GA1UdIwQY
MBaAFIMCOzlwWzRahu/z8U72seTbRZOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYt
M2I4ZmJmZmY1MzQyLzEvSkF6cVQtMWk2NDczUm13cXl2Zm9SVTlWTGt3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYtM2I4ZmJmZmY1MzQy
LzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsVzANBgkqhkiG
9w0BAQsFAAOCAQEAa7bH9y2ce1z+Q3oJxBNMG+wBp6X3beWiVwleBKy9AY9SL0Dk
iTKwwXV4UyHzbR/vTCjbVj8kY/aju7ie8eUbRpUP2U4rI/CZv1XjeKabpvO+DGu0
EAHnD52PaOZ98i56wNFjd3WDrvOoAxPKH9F74vVwkDEKl4UXO6UdBcv1v8GMMRbu
OYFUfZ7mMxV6Ga5O64+PA01JAY9KCe1ejIPJ9OZLUdMXCPGVO4hlX5riGsWH+q02
svCc+NhfjRFBfoc48V779IwcTpUa8ezp4O5tN5b7HI3fWOOPkLGnqu9RzH/qjU/A
LItJ7FQymP7UrSlMaJWMZiQRoNMdWFjPK1x0Pw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 06:53:52 2026 by rpki-client