Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/AFLK_8dbQHSlYChoAA91MADo2dU.asa
File:                     AFLK_8dbQHSlYChoAA91MADo2dU.asa (raw, json)
Hash identifier:          7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=
Subject key identifier:   00:52:CA:FF:C7:5B:40:74:A5:60:28:68:00:0F:75:30:00:E8:D9:D5
Certificate issuer:       /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial:       019C8D31A58201BC0D9FE5060B15809D964E
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/AFLK_8dbQHSlYChoAA91MADo2dU.asa
Signing time:             Tue 24 Feb 2026 01:09:26 +0000
ASPA not before:          Tue 24 Feb 2026 01:09:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212721
Providers:                AS: 42229
                          AS: 60134
                          AS: 203068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8d:31:a5:82:01:bc:0d:9f:e5:06:0b:15:80:9d:96:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
        Validity
            Not Before: Feb 24 01:09:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0052caffc75b4074a5602868000f753000e8d9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:d5:52:60:7b:20:11:51:3c:67:c9:2c:fa:
                    10:33:32:69:b3:13:d7:e5:79:c9:29:e7:6b:39:e2:
                    95:d0:73:6a:73:d7:6c:b8:c0:fa:c8:9d:23:af:c6:
                    f9:52:89:d6:a6:bd:10:0a:7e:24:97:df:7a:47:ed:
                    df:7c:d6:42:bd:c0:89:d6:6d:a0:a5:e1:8b:f2:34:
                    fc:ef:58:e1:d2:26:8f:2f:9a:68:44:04:62:80:e2:
                    80:94:73:12:3a:fa:07:41:2f:f6:14:16:fe:5c:cf:
                    50:b3:0b:00:34:d3:92:93:92:37:4e:d6:9d:6e:65:
                    64:76:75:7e:6b:e6:4b:7c:9b:4c:29:40:b1:08:4c:
                    d4:ae:09:da:c0:24:5e:ac:20:07:5d:1e:f4:08:90:
                    00:5b:b1:d9:15:78:5d:2f:5b:81:2c:e2:8f:f0:86:
                    fc:c5:f5:09:b0:a9:43:d9:ca:1f:f2:9f:da:ca:19:
                    c7:28:57:db:22:b7:70:b1:9a:7d:01:62:dd:61:a3:
                    16:fa:3b:fe:73:29:d8:29:63:94:ee:c8:bc:cf:12:
                    ae:37:5d:ca:db:7c:3a:21:a2:41:37:67:53:c6:dd:
                    d5:eb:7e:07:06:97:62:35:eb:a4:94:5d:b1:36:78:
                    34:29:38:7f:d4:5b:56:fb:15:f3:c7:31:18:2a:a1:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:52:CA:FF:C7:5B:40:74:A5:60:28:68:00:0F:75:30:00:E8:D9:D5
            X509v3 Authority Key Identifier:
                keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/AFLK_8dbQHSlYChoAA91MADo2dU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212721

    Signature Algorithm: sha256WithRSAEncryption
         7a:e3:35:5f:f0:9b:e7:1a:e1:be:6a:7f:53:ae:c4:1a:6e:d1:
         5d:65:34:39:96:b4:ca:aa:52:ef:09:36:c6:29:ae:4e:1d:54:
         ba:a1:5c:fc:7f:37:07:8f:9b:a0:c7:c9:6e:e0:3c:0d:75:86:
         0b:38:af:c1:cd:c5:2a:2b:77:d5:96:f2:61:2b:e9:63:d6:0c:
         70:2a:c8:c5:cb:14:27:f3:44:48:ac:e8:cd:0b:fa:9d:dd:e9:
         6e:47:20:4d:06:d8:26:3a:fc:7a:c8:b9:9d:70:b9:22:06:ce:
         f1:6f:52:60:57:8d:e4:d3:5c:9c:f5:0b:3b:74:f6:5e:7b:11:
         6d:8a:59:9a:fd:c3:c5:36:f1:1a:60:d2:27:4e:02:1e:8b:3d:
         9a:a5:89:7d:62:06:5f:26:61:fa:18:65:f8:97:7f:d3:bf:14:
         68:ff:19:65:c4:9d:34:3e:1b:36:6b:25:76:9b:ef:05:3b:4f:
         69:2c:d3:59:33:37:d0:b7:2b:65:8d:74:5c:3f:7e:cf:ad:fa:
         35:fd:dd:bf:04:15:99:7f:91:8d:24:c8:de:6a:41:37:84:e1:
         e5:f5:70:67:1e:dd:6e:64:a8:4a:6a:15:6b:6e:d5:ed:d5:28:
         42:eb:67:d2:a7:6b:79:28:98:09:5e:85:4c:54:5c:2f:04:3e:
         e0:bf:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:39 2026 by rpki-client