Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917447B0000/1/AS9833.asa
File:                     AS9833.asa (raw, json)
Hash identifier:          eF+RoiYlyVewG5EIfcht1IcC29IFU+2ytLm0lOE12DA=
Subject key identifier:   E3:20:18:E2:E6:53:32:30:B9:68:E8:9A:A7:70:9B:94:4A:1C:77:C4
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       476BA2050A9725FDFED3A2AC4917D1F5134395D2
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/AS9833.asa
Signing time:             Fri 11 Sep 2026 04:36:36 +0000
ASPA not before:          Fri 11 Sep 2026 04:31:36 +0000
ASPA not after:           Fri 10 Sep 2027 04:36:36 +0000
Customer ASID:            9833
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 23:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:a2:05:0a:97:25:fd:fe:d3:a2:ac:49:17:d1:f5:13:43:95:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Sep 11 04:31:36 2026 GMT
            Not After : Sep 10 04:36:36 2027 GMT
        Subject: CN=E32018E2E6533230B968E89AA7709B944A1C77C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:89:cb:d7:e2:7a:d2:7d:b2:0f:9b:1f:0c:
                    c1:b9:0a:3a:ed:94:6c:fa:78:60:93:a9:a1:ad:e7:
                    a7:55:dc:60:f3:fc:04:41:db:ae:e1:57:9f:13:84:
                    7c:f2:0d:92:0d:7a:fb:63:81:87:79:ac:18:7d:08:
                    c5:7e:c9:05:29:16:18:20:39:4c:7b:68:a8:20:67:
                    41:a6:ba:09:45:e6:71:d5:86:fc:8a:c3:4f:df:21:
                    32:43:c0:02:cf:05:ec:4a:68:a8:ce:d9:03:3c:9c:
                    f3:6a:97:35:c7:79:63:8d:d0:a9:f6:d3:00:c6:aa:
                    d1:84:c9:c7:15:2a:c9:b1:0a:07:5b:93:d5:4b:25:
                    5c:e8:bc:4f:75:39:1a:42:14:af:16:2d:01:d3:f1:
                    ff:74:f7:3f:da:25:7d:8e:ae:5d:b9:1d:59:20:5b:
                    1c:60:a5:46:52:e5:9d:77:74:6b:b7:21:76:04:98:
                    52:47:ac:2d:01:30:a6:c9:a8:27:5b:74:bd:d4:a4:
                    d3:09:58:c2:74:30:79:02:1a:a6:da:7f:50:6e:20:
                    56:83:d6:db:84:46:95:07:de:1e:48:ee:11:ff:e2:
                    5a:8a:dc:95:70:c9:dd:d8:13:e9:32:79:fa:6a:6b:
                    07:88:b6:52:f8:26:68:62:13:ae:5e:95:a7:c6:fa:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:20:18:E2:E6:53:32:30:B9:68:E8:9A:A7:70:9B:94:4A:1C:77:C4
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/AS9833.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9833

    Signature Algorithm: sha256WithRSAEncryption
         43:89:b8:f2:0a:34:bd:d8:19:98:e4:0e:ea:c0:b3:23:94:07:
         7d:be:c2:fc:d6:fd:8f:24:84:d8:32:a5:ec:e5:81:7e:da:c0:
         c9:fb:9d:67:84:80:01:c9:d5:fc:73:6a:13:85:fa:7c:ca:af:
         e9:7a:5d:77:76:13:5a:24:f1:20:eb:7a:0b:20:68:f2:a0:40:
         c0:77:40:56:c4:e9:6f:76:b8:f4:53:5b:2e:e8:65:da:94:39:
         8c:78:59:48:72:d0:31:cf:37:83:ea:e6:02:55:56:a5:5b:f8:
         cd:3b:67:10:e2:fd:ef:e5:5a:29:4b:b4:7a:2f:d5:cf:23:34:
         77:05:41:d0:aa:d2:c4:d6:0a:4b:bb:f1:5e:c3:b7:70:90:e5:
         c7:17:44:e6:bb:b8:9b:6e:1e:61:65:8f:ad:dc:ec:07:60:c3:
         9e:a8:5d:c7:bd:b4:7b:8b:ca:1d:00:16:86:6d:c5:b5:d7:b3:
         b5:68:21:48:e8:9d:33:4f:4f:1b:b2:b0:60:8d:eb:54:34:3e:
         36:b4:be:4f:27:62:3b:03:0f:4f:ed:e3:8a:1d:83:1f:53:b2:
         ce:3b:ca:15:06:84:15:e7:6d:77:1a:fc:16:de:07:77:6c:2b:
         d2:d9:a4:89:14:9c:00:4f:1e:4d:8b:40:0b:fe:1e:56:ed:68:
         bb:e0:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:04:46 2026 by rpki-client