Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
File:                     AS215147.asa (raw, json)
Hash identifier:          Yk0e8Tk/rtSNYsmVHItW0ZvzUBz4S28c5aKwJFfbQo4=
Subject key identifier:   49:FA:60:CD:71:13:AD:AE:62:BC:06:0C:80:60:C7:7B:52:B3:A8:3F
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       507BF2F74FD096A350A19C5801DBDEF154D59D6C
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
Signing time:             Wed 29 Oct 2025 01:30:34 +0000
ASPA not before:          Wed 29 Oct 2025 01:25:34 +0000
ASPA not after:           Wed 28 Oct 2026 01:30:34 +0000
Customer ASID:            215147
Providers:                AS: 34927
                          AS: 205941
                          AS: 207252
                          AS: 210796
                          AS: 213413
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7b:f2:f7:4f:d0:96:a3:50:a1:9c:58:01:db:de:f1:54:d5:9d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Oct 29 01:25:34 2025 GMT
            Not After : Oct 28 01:30:34 2026 GMT
        Subject: CN=49FA60CD7113ADAE62BC060C8060C77B52B3A83F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:43:2f:ed:a0:67:24:66:7d:83:7d:41:58:
                    bd:5e:29:35:16:c0:98:ec:24:e4:03:78:14:f3:89:
                    76:40:0c:31:56:8b:90:cc:78:18:6a:33:fc:ef:ce:
                    77:21:9f:78:fc:37:e6:07:3b:6a:50:c9:b6:ca:b6:
                    b7:d0:32:f6:d6:0a:37:cf:de:dd:06:39:0f:7b:a9:
                    63:2d:68:c6:a5:01:65:7f:fd:df:0e:76:dd:0f:55:
                    0c:8e:c3:48:d7:92:64:44:2d:7a:49:39:c0:02:9a:
                    d1:0d:b8:2d:53:67:ad:11:cd:81:e6:ef:37:a7:d6:
                    29:33:dd:86:94:83:f8:9a:60:b9:06:6d:cf:39:0c:
                    d5:29:73:83:37:02:5a:52:de:11:44:e4:0c:95:50:
                    b8:89:97:8d:d6:45:ef:c7:4f:12:8e:be:28:f5:49:
                    53:be:b7:27:6a:bd:16:be:16:b9:f5:ac:33:9c:0d:
                    40:7a:53:d5:4c:68:f2:6d:de:44:1b:13:2f:09:5c:
                    d7:c4:2a:de:3b:a7:db:e4:b7:f7:b4:b9:58:37:92:
                    bd:d5:db:ec:fa:19:25:65:f4:85:c3:5f:43:3a:98:
                    df:20:d8:a3:a5:1b:51:34:20:b7:f9:34:77:ae:c6:
                    c8:d0:32:7a:31:bc:99:ac:c1:99:71:d3:22:08:79:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FA:60:CD:71:13:AD:AE:62:BC:06:0C:80:60:C7:7B:52:B3:A8:3F
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215147

    Signature Algorithm: sha256WithRSAEncryption
         67:97:38:b4:84:08:a6:b1:55:23:3a:2a:c5:3f:5a:7a:be:5c:
         72:eb:ba:7b:ca:c8:56:8c:70:e5:63:27:48:91:ed:74:54:38:
         90:86:d8:70:d9:c2:d9:72:eb:71:76:ef:10:f6:89:96:a0:e9:
         63:c8:55:56:d7:a5:0c:4b:23:c5:f9:fd:12:db:5e:67:69:60:
         17:5a:c7:cd:4d:59:67:85:f5:c2:a0:28:77:39:95:af:e3:1d:
         33:bb:21:11:3f:31:4f:e1:bd:d3:18:35:09:21:8d:d1:71:47:
         3c:ef:e7:db:07:d8:da:75:08:a7:e9:b9:0f:8b:73:0f:15:57:
         74:f9:9b:55:d0:46:b4:9b:0a:25:16:85:48:3c:1b:32:62:24:
         55:cf:de:91:8d:d1:d1:d8:71:33:43:46:85:d5:ee:b2:90:e5:
         71:61:3f:d5:ba:55:1d:cf:f5:12:24:fd:d6:4c:9e:9f:9d:b3:
         29:e4:d1:33:fe:1e:41:7e:1e:1d:ec:1f:6b:2a:cd:30:ed:d1:
         36:ff:ea:32:72:67:2f:43:3e:e9:a3:d5:61:2e:c5:24:55:c9:
         0f:2d:b1:b9:2c:79:f2:21:10:fd:1e:78:57:85:48:6d:ff:73:
         c5:54:10:89:8b:c1:c0:da:63:5b:09:a1:3b:7e:b9:cb:9d:cf:
         14:1d:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:34 2025 by rpki-client