Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa
File:                     AS198136.asa (raw, json)
Hash identifier:          oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=
Subject key identifier:   DB:C4:43:19:B2:EE:E1:E3:27:12:97:44:DB:8E:7C:54:08:3C:F7:75
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       136378E7D4CB83DFF4013368DE9E1132E962C291
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa
Signing time:             Thu 30 Oct 2025 23:26:16 +0000
ASPA not before:          Thu 30 Oct 2025 23:21:16 +0000
ASPA not after:           Thu 29 Oct 2026 23:26:16 +0000
Customer ASID:            198136
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:63:78:e7:d4:cb:83:df:f4:01:33:68:de:9e:11:32:e9:62:c2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Oct 30 23:21:16 2025 GMT
            Not After : Oct 29 23:26:16 2026 GMT
        Subject: CN=DBC44319B2EEE1E327129744DB8E7C54083CF775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:73:25:ee:a1:d1:b5:4d:56:cc:ba:07:f5:
                    56:5f:8e:a5:0e:5a:cc:fb:8d:b7:2d:51:bc:d0:06:
                    7a:af:20:8a:56:31:f2:76:d9:d5:9a:76:97:a5:1a:
                    1a:5c:f6:63:c1:4a:d8:32:36:b6:c2:bb:30:0e:12:
                    6a:84:42:1d:15:83:74:29:6a:0b:1e:2f:70:94:9d:
                    73:32:28:9b:a1:2d:1b:ff:fc:f3:9c:9a:4a:c6:c5:
                    2a:0e:28:a8:6f:95:61:4e:eb:4b:32:33:9d:10:b3:
                    1e:d8:a4:c3:21:f7:dd:c2:06:58:49:df:fe:e0:70:
                    1f:d2:4a:14:9e:5c:06:66:91:9c:32:54:78:4c:b7:
                    79:d7:a2:53:d7:69:d0:73:cf:2a:d1:9a:76:ce:19:
                    37:bf:ba:19:e3:18:c2:27:79:02:3c:ad:fb:a7:d9:
                    37:f9:e7:a8:d4:a7:f5:46:27:7c:eb:14:eb:9b:40:
                    ff:95:75:80:0c:ab:1e:3f:0a:3a:a3:95:9c:63:82:
                    4c:99:99:4a:93:fa:a1:eb:eb:c7:ef:95:0e:4a:8d:
                    c2:ee:73:c4:40:03:9b:36:30:5e:59:0f:6a:9c:69:
                    f9:28:7e:ae:03:eb:a6:fa:89:a3:9b:11:3c:bb:16:
                    1a:c0:3a:6f:e1:08:e6:42:f5:05:be:3b:38:89:82:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C4:43:19:B2:EE:E1:E3:27:12:97:44:DB:8E:7C:54:08:3C:F7:75
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198136

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:5e:2f:9d:9e:55:7c:f6:16:f8:ed:97:de:25:f5:0d:dd:
         96:67:00:5e:d3:93:92:4b:8b:56:57:00:3e:12:53:1b:e9:72:
         00:ae:49:b9:47:dc:88:fa:bd:79:ad:c4:3c:60:97:6f:eb:7a:
         f1:05:43:9e:04:79:34:c1:70:2a:98:d5:76:2a:8b:b7:10:50:
         d1:4e:78:d8:59:76:91:f9:35:ae:ac:76:34:07:f5:d9:37:d8:
         bd:bb:d4:58:0a:4f:33:64:38:17:36:ad:60:c7:7d:aa:4e:99:
         3d:d9:57:64:8e:31:b0:5e:04:fb:a3:05:b8:c4:81:65:04:c7:
         ec:0c:14:ab:bb:48:10:8a:df:d6:59:b2:2f:48:9d:bb:90:d8:
         30:94:00:32:66:35:9c:a1:7d:76:eb:69:e4:df:e1:69:21:b9:
         26:32:03:70:06:64:25:99:2d:a8:db:93:c6:c9:02:c8:2c:a7:
         85:57:57:4a:4d:f8:fb:eb:fd:f2:29:f0:0f:ec:ee:fa:ee:98:
         46:3a:4d:43:73:dd:a3:1b:94:e8:b3:01:f5:fc:d8:d9:54:99:
         b7:2a:24:32:75:86:4a:6e:3c:b0:cc:90:3e:f0:bf:86:62:8b:
         67:e1:c0:f3:46:9f:46:98:74:b2:c2:cd:94:62:78:6d:26:93:
         f1:8e:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:41 2025 by rpki-client