Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/f6k1pb1DyPuipxAIYvQjo8-Zq8Y.asa
File:                     f6k1pb1DyPuipxAIYvQjo8-Zq8Y.asa (raw, json)
Hash identifier:          Ep14iU2LKva1ADKW9hz7AcyIAFA0LFBAnPYhXaahiMo=
Subject key identifier:   7F:A9:35:A5:BD:43:C8:FB:A2:A7:10:08:62:F4:23:A3:CF:99:AB:C6
Certificate issuer:       /CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
Certificate serial:       019D6B7B0EB2E4DFA0283429CD9246BEE50B
Authority key identifier: 21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/f6k1pb1DyPuipxAIYvQjo8-Zq8Y.asa
Signing time:             Wed 08 Apr 2026 05:05:19 +0000
ASPA not before:          Wed 08 Apr 2026 05:05:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202902
Providers:                AS: 20473
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6b:7b:0e:b2:e4:df:a0:28:34:29:cd:92:46:be:e5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
        Validity
            Not Before: Apr  8 05:05:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7fa935a5bd43c8fba2a7100862f423a3cf99abc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:c9:94:5c:a8:2e:b4:b9:fb:a0:50:3d:91:
                    e0:2e:b9:59:dc:d1:79:0d:65:ac:66:a4:68:7b:cb:
                    53:2d:72:c1:58:6a:34:a0:7c:76:ed:0c:7c:3e:34:
                    a6:cb:0d:78:48:65:b0:37:ad:eb:cb:3a:c0:90:a5:
                    da:e9:0b:68:77:ee:4a:5e:fa:6c:fb:3e:fe:9f:36:
                    3b:68:89:a5:f1:a2:49:98:80:49:bc:19:c7:bf:67:
                    55:4e:66:e9:79:4c:ce:25:2e:1c:b5:7d:3d:e8:de:
                    6a:b6:f9:b8:cf:7f:04:84:a7:eb:03:08:88:7f:f8:
                    bf:4d:f1:a6:c3:f9:59:af:49:c1:14:d7:a6:82:4f:
                    04:00:5b:21:be:00:e2:7b:22:40:b5:5d:73:5f:17:
                    d2:fa:db:8c:94:4c:a8:69:37:17:69:e2:7f:7d:4d:
                    3e:da:e5:d0:00:81:34:fa:c3:c9:6b:77:c7:43:d7:
                    e5:05:6b:d9:2c:69:aa:78:82:a1:a2:d2:6c:6c:7a:
                    fe:50:84:fe:02:a9:d6:50:63:b1:de:22:86:d9:47:
                    1d:f5:01:de:29:99:4b:ea:76:83:9b:5d:3d:ec:2b:
                    16:0a:7c:b3:d6:65:cb:a3:70:63:cf:16:00:3f:00:
                    2f:6e:98:72:fe:43:c9:ca:de:2e:63:da:fc:da:39:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:35:A5:BD:43:C8:FB:A2:A7:10:08:62:F4:23:A3:CF:99:AB:C6
            X509v3 Authority Key Identifier:
                keyid:21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/f6k1pb1DyPuipxAIYvQjo8-Zq8Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202902

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:6e:64:bb:23:bb:25:0b:46:43:23:89:d0:8c:0c:3d:05:
         aa:88:84:e5:d4:81:fc:aa:00:e9:a3:ce:4e:e8:26:41:7a:88:
         41:dd:75:ec:ee:d2:b9:d1:54:e9:3a:14:21:38:d4:6c:93:46:
         cd:66:5e:4b:ee:23:06:f0:32:99:86:4f:83:ae:66:98:62:5a:
         9f:35:32:ae:f4:71:43:fc:89:fb:8e:9b:39:4c:4c:2c:a9:30:
         a0:4d:13:db:c5:fc:64:7b:1f:26:ef:39:f6:25:95:b6:23:47:
         06:33:ba:c2:bf:cf:fe:4a:7c:56:8e:9e:bb:16:fa:63:e8:36:
         1d:37:f3:be:6e:6a:ce:36:71:8c:82:70:6f:a8:c8:f3:f8:de:
         3c:b8:15:63:f8:34:77:e8:f5:3f:90:cf:d5:f3:f6:f5:d4:00:
         b7:ee:f1:68:78:d4:04:2e:5c:05:74:b2:6b:8a:09:bf:ee:78:
         05:b4:04:f6:6e:a1:bd:b4:27:0a:ba:53:de:65:84:a4:f0:55:
         5d:91:00:2d:77:14:81:50:b6:23:be:8c:d4:7f:5d:7f:78:00:
         21:fa:65:3a:b3:1b:39:8d:fe:b5:40:d3:e0:a5:f1:3f:4b:e3:
         54:40:b3:21:f4:12:5e:d5:9d:82:79:3d:a2:d7:c0:e4:39:b6:
         d9:e1:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:37 2026 by rpki-client