Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa
File:                     IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (raw, json)
Hash identifier:          1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=
Subject key identifier:   22:07:C0:9A:31:4B:A9:55:BE:B8:29:2F:52:D4:6E:53:3D:DF:40:52
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       019D2A51347CE0083C1119EBA89902C0A634
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa
Signing time:             Thu 26 Mar 2026 13:24:17 +0000
ASPA not before:          Thu 26 Mar 2026 13:24:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62016
Providers:                AS: 5089
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:51:34:7c:e0:08:3c:11:19:eb:a8:99:02:c0:a6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Mar 26 13:24:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2207c09a314ba955beb8292f52d46e533ddf4052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:1c:dd:2b:60:40:c1:b3:f2:ae:26:da:27:
                    e2:12:33:63:c6:f5:b5:39:98:69:87:99:03:d6:ed:
                    17:54:31:cb:12:ca:33:23:5c:23:f0:c8:0d:a9:b8:
                    c0:cc:77:ff:4a:ef:30:73:b3:be:d0:32:02:f4:63:
                    88:36:7e:b5:96:ea:52:a5:fc:d3:a7:90:92:ef:87:
                    33:aa:9c:f0:92:c3:4e:df:f6:0e:08:ad:b1:3e:26:
                    a0:21:4e:6b:ac:49:0b:26:6c:29:6e:24:d0:31:0f:
                    df:d8:f2:e2:80:2c:67:67:76:b7:f2:62:43:69:e5:
                    79:ad:f3:4a:01:db:7c:67:6d:63:31:d8:86:76:80:
                    6c:74:10:38:1e:94:c4:72:22:df:76:07:81:79:2e:
                    ac:6e:c3:6b:9a:b8:d7:93:26:69:12:c5:c0:d7:49:
                    01:f6:8d:97:d3:e6:44:b2:0d:7b:db:3f:76:29:da:
                    fe:82:f3:45:29:2e:4e:39:14:28:74:e8:ad:28:19:
                    36:ce:8f:36:ea:2b:e8:18:26:46:78:fb:62:27:50:
                    4b:e4:8e:9d:a9:ea:25:46:95:fa:ad:4a:34:d5:cd:
                    88:c9:f2:b2:ef:f4:0a:8e:c7:81:0b:ff:de:73:1f:
                    b6:7c:fe:84:e4:8e:1c:ba:1f:22:da:d8:cb:3c:0c:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:07:C0:9A:31:4B:A9:55:BE:B8:29:2F:52:D4:6E:53:3D:DF:40:52
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62016

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:bb:f9:ab:ac:62:b5:a0:3b:72:19:a3:bb:43:8e:ee:09:
         dd:20:5e:d2:1f:80:41:d6:41:ce:90:5d:4f:19:20:a9:d3:de:
         d9:05:5a:22:98:6d:a1:04:7e:dc:cf:d9:01:9f:5b:b8:63:43:
         48:e7:cc:6b:bd:fb:c9:29:9c:ac:ca:c4:c3:d1:e9:ac:10:86:
         99:0b:0c:cc:79:b0:b2:4e:71:ed:36:1a:ad:7a:44:fa:fb:46:
         83:5e:32:05:a5:c3:72:f7:64:5f:d3:83:a9:1b:0a:80:c9:40:
         00:fa:5e:57:37:3e:3d:13:7e:75:81:c6:00:98:06:0c:ad:1b:
         ba:a3:80:aa:37:fd:a7:10:32:57:38:dc:45:f8:7d:f7:2e:de:
         a5:dc:18:a2:73:a7:c4:5b:fe:35:51:f8:47:7f:13:78:f7:f7:
         da:8c:a6:40:d6:6b:19:f2:75:17:f8:a3:10:1a:6d:dd:47:a3:
         ad:4a:ee:49:6c:e8:86:a0:85:9d:60:e5:d1:e1:6c:70:69:8b:
         bf:87:e7:6e:f8:39:99:e7:0c:8e:56:3d:d3:16:1c:6b:2d:67:
         36:db:a1:3c:08:10:9b:2e:4f:d8:82:0d:29:f0:8b:a2:d5:85:
         c6:cc:14:18:24:d5:2f:f9:e4:18:f9:7c:12:ec:51:31:82:3b:
         67:b1:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:56 2026 by rpki-client