Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/94j-31eJ4ZaEvbPXXfZFnF16ytM.asa
File:                     94j-31eJ4ZaEvbPXXfZFnF16ytM.asa (raw, json)
Hash identifier:          jYZm0xCUvy266Evmlka2J+ahcptNgJhH2tb/elrN364=
Subject key identifier:   F7:88:FE:DF:57:89:E1:96:84:BD:B3:D7:5D:F6:45:9C:5D:7A:CA:D3
Certificate issuer:       /CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
Certificate serial:       01A18F360A437C2CE2B9D5EF3E880AE558EE
Authority key identifier: 19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/94j-31eJ4ZaEvbPXXfZFnF16ytM.asa
Signing time:             Fri 30 Oct 2026 23:47:25 +0000
ASPA not before:          Fri 30 Oct 2026 23:47:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210699
Providers:                AS: 135330
                          AS: 150670
                          AS: 198831
                          AS: 200010
                          AS: 200456
                          AS: 399486
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:36:0a:43:7c:2c:e2:b9:d5:ef:3e:88:0a:e5:58:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
        Validity
            Not Before: Oct 30 23:47:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f788fedf5789e19684bdb3d75df6459c5d7acad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:b7:e2:c1:48:c0:07:76:65:50:a6:2a:10:
                    d8:21:db:f9:9d:80:8b:a4:b2:eb:1d:21:37:b1:58:
                    d6:19:ac:37:7f:20:b7:0a:66:e8:66:00:90:7e:c0:
                    03:2a:20:bb:aa:74:cb:3b:fa:b1:d7:bc:cd:0c:b8:
                    60:bb:26:e4:40:52:60:ea:ba:aa:86:b5:d1:54:fd:
                    af:d8:40:c2:da:76:6a:74:5b:87:2d:ed:21:7f:86:
                    06:e1:57:8a:a2:85:c8:34:2d:6a:6d:0a:87:c3:01:
                    1e:f4:8c:5d:46:47:20:ea:36:0a:11:9f:b3:a7:51:
                    27:4d:7f:eb:dc:63:70:4d:23:2f:6c:11:f8:2a:d5:
                    eb:b8:bc:40:4b:3f:22:be:4d:17:57:15:0f:ba:8a:
                    e3:ea:f1:50:07:91:87:a5:a2:3d:90:ee:07:1b:16:
                    ec:90:7e:d5:8c:13:aa:fc:d9:30:45:5d:fa:c2:54:
                    c6:ec:9a:a2:84:83:74:9b:8d:fb:a3:fd:4f:4e:92:
                    88:8a:66:e1:f1:4d:aa:29:2e:63:89:4e:e1:72:8f:
                    17:e7:fb:29:2c:fa:7d:0b:18:29:e0:56:a1:3c:44:
                    f1:df:39:35:bb:06:e0:2b:b7:dd:a1:d6:f5:eb:ba:
                    d0:ca:d7:98:00:e3:a4:ba:59:11:fa:65:cc:f9:4d:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:FE:DF:57:89:E1:96:84:BD:B3:D7:5D:F6:45:9C:5D:7A:CA:D3
            X509v3 Authority Key Identifier:
                keyid:19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/94j-31eJ4ZaEvbPXXfZFnF16ytM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210699

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:8b:c1:3d:90:55:f4:ed:a2:91:1b:50:aa:48:04:b6:50:
         3f:3c:d8:16:48:bc:3c:f9:58:bb:e8:f8:aa:7b:0c:5e:fa:71:
         2a:a5:f8:6c:f5:74:e3:ce:de:f6:fa:2e:ee:5b:84:e8:8f:4b:
         95:e7:66:5f:30:98:58:30:a2:b0:04:ea:f2:56:14:06:4e:1f:
         63:db:56:af:c0:93:3f:87:6b:f4:68:12:be:43:a4:ad:f4:ab:
         34:88:9c:8e:14:98:e8:fb:e3:a9:26:6c:72:81:c4:3c:46:df:
         ec:01:bb:97:c9:16:45:34:f3:1e:5a:c1:1b:01:90:2f:8a:53:
         66:82:f7:5f:74:79:23:25:74:12:b2:df:b6:ed:e0:86:d6:99:
         ca:25:7c:c9:56:f7:c2:4b:7f:27:2c:c9:eb:33:8c:cd:bc:d5:
         d1:d8:6d:b1:f4:1e:94:02:d2:42:b6:01:49:1d:6d:10:c6:f8:
         69:8d:0d:84:89:1f:48:89:4e:a0:ed:1b:fd:96:30:d1:d0:62:
         b7:95:6c:b8:7f:6c:9f:2b:42:04:dc:e0:0f:cd:04:f9:96:98:
         f1:fe:0b:51:e7:b3:c2:7f:91:20:31:ed:86:78:04:ce:71:6d:
         ae:82:4c:81:87:6a:7c:d0:ef:ca:ec:6d:44:5a:25:bf:93:24:
         df:60:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:03:07 2026 by rpki-client