Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/AS199746.asa
File:                     AS199746.asa (raw, json)
Hash identifier:          6phOsnbPp+kfdXunJCauvtcNnYa9yG3rIH0ws06Ggt8=
Subject key identifier:   49:4F:45:EA:F0:6B:DE:EA:85:96:E3:42:18:1A:8A:C1:D2:62:B4:73
Certificate issuer:       /CN=18670561bfa9d2336dfaa180c44342b046e19abc
Certificate serial:       4B833BD2A25B64AE612F7A99D71BBBB9712FD86D
Authority key identifier: 18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/AS199746.asa
Signing time:             Mon 21 Sep 2026 05:39:37 +0000
ASPA not before:          Mon 21 Sep 2026 05:34:37 +0000
ASPA not after:           Mon 20 Sep 2027 05:39:37 +0000
Customer ASID:            199746
Providers:                AS: 6939
                          AS: 11967
                          AS: 20473
                          AS: 204464
                          AS: 205941
                          AS: 212895
                          AS: 215030
                          AS: 215120
                          AS: 218832
                          AS: 218904
                          AS: 219157
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:83:3b:d2:a2:5b:64:ae:61:2f:7a:99:d7:1b:bb:b9:71:2f:d8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18670561bfa9d2336dfaa180c44342b046e19abc
        Validity
            Not Before: Sep 21 05:34:37 2026 GMT
            Not After : Sep 20 05:39:37 2027 GMT
        Subject: CN=494F45EAF06BDEEA8596E342181A8AC1D262B473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:7b:47:82:23:05:a2:35:d6:cf:2c:00:27:
                    e9:32:fd:be:be:18:05:82:43:44:3a:d8:71:35:27:
                    64:23:b3:1a:45:c5:8e:b8:f3:da:0e:98:c4:72:f2:
                    b8:b3:02:6b:04:7f:c3:17:96:8a:f4:7f:c8:c3:40:
                    80:44:d9:7b:59:a7:97:9b:3c:51:cb:cf:4a:2a:a3:
                    5d:8f:40:15:af:d9:8c:a7:4b:60:e0:f5:73:13:3d:
                    5d:86:0c:b2:8a:9f:4d:c0:47:ca:43:d7:de:0f:24:
                    fb:1a:23:7a:71:e2:d6:d7:b1:2d:dd:06:61:fe:35:
                    d5:94:7b:41:9b:7e:0b:42:91:bf:3e:de:76:3d:6f:
                    d9:0d:72:c6:13:cc:6b:00:39:32:22:87:ac:a9:9a:
                    d4:4a:f4:90:48:0d:bd:25:a9:87:05:45:45:b0:bd:
                    42:3b:0e:93:3b:13:ef:49:db:41:e3:69:a6:1f:c1:
                    fd:d4:62:90:96:40:4b:ea:3f:f8:5b:24:65:ef:0b:
                    fc:3d:8b:1b:d1:98:38:f5:cb:c3:db:8d:73:ae:78:
                    8e:d3:8b:97:d1:b8:78:d5:0e:5a:6c:15:2e:77:14:
                    74:5f:92:d3:32:4c:9d:ea:89:ad:12:e1:8e:ad:fc:
                    fa:20:e0:c1:59:a3:78:c8:76:53:1a:2d:c3:cd:18:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4F:45:EA:F0:6B:DE:EA:85:96:E3:42:18:1A:8A:C1:D2:62:B4:73
            X509v3 Authority Key Identifier:
                keyid:18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/AS199746.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199746

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:86:49:d6:bb:c3:1a:f3:3c:55:98:9e:09:9d:20:4d:e4:
         93:46:78:4c:4d:48:b7:02:c7:97:bf:05:54:84:71:39:ac:d9:
         97:f2:0a:92:e0:83:ec:d4:cd:a3:83:93:2f:50:e5:b4:b4:ec:
         25:49:65:b1:b0:6c:99:c1:67:b0:38:54:91:4f:5f:14:f7:9f:
         33:2e:c2:34:43:59:07:e9:90:14:b3:eb:c0:96:4e:4f:0c:91:
         ea:76:c3:a1:4f:d7:37:9a:98:ca:00:2d:dd:18:17:f8:72:72:
         b3:53:c0:90:76:de:c9:f8:37:6c:4e:e4:12:6e:90:ab:df:ad:
         bf:ab:d3:bf:78:12:2c:32:7d:7e:23:90:1f:73:b8:55:56:1b:
         17:9f:cc:86:86:e4:82:a7:f7:e4:34:68:6f:87:80:38:e5:4c:
         f9:ab:c6:b4:7e:15:2c:25:64:09:0d:6f:41:3d:0c:94:06:cf:
         8d:e7:dd:43:72:d6:91:54:c2:53:04:8d:12:bc:47:1d:1f:64:
         90:36:d2:e0:e7:e4:95:8e:26:45:5e:6a:be:05:0e:da:50:c3:
         6c:0b:2c:2e:93:76:19:53:9e:4e:b4:c9:5d:63:33:16:5a:4e:
         b7:86:67:1a:a5:1c:c5:cb:46:87:4c:92:dd:92:4c:72:b5:e2:
         a1:95:76:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:40 2026 by rpki-client