Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/AS153376.asa
File:                     AS153376.asa (raw, json)
Hash identifier:          qSFjPv5Y9UIQey6MGVXcJC9rAEGtqksU46nadpOYLLw=
Subject key identifier:   04:CB:B1:3D:FF:43:56:6D:1E:9B:C8:41:D1:02:D0:9F:C9:17:CC:A4
Certificate issuer:       /CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A
Certificate serial:       5F7EE3A681E0502A381D6E7051CD3B45948057AD
Authority key identifier: AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/AS153376.asa
Signing time:             Mon 27 Jul 2026 13:51:07 +0000
ASPA not before:          Mon 27 Jul 2026 13:46:07 +0000
ASPA not after:           Mon 26 Jul 2027 13:51:07 +0000
Customer ASID:            153376
Providers:                AS: 44324
                          AS: 139317
                          AS: 199353
                          AS: 204211
                          AS: 206069
                          AS: 207529
                          AS: 214955
                          AS: 215172
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 05:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7e:e3:a6:81:e0:50:2a:38:1d:6e:70:51:cd:3b:45:94:80:57:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A
        Validity
            Not Before: Jul 27 13:46:07 2026 GMT
            Not After : Jul 26 13:51:07 2027 GMT
        Subject: CN=04CBB13DFF43566D1E9BC841D102D09FC917CCA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:1a:48:92:91:4f:fd:09:57:05:4c:a1:e8:
                    5a:f2:f0:29:97:81:dd:e1:56:d5:ed:8c:51:25:01:
                    df:e2:68:1c:ae:fa:fc:79:dd:4a:86:52:da:9d:e2:
                    14:df:04:51:ec:97:78:40:d5:98:df:17:b1:18:7b:
                    1b:39:80:d0:60:32:46:f3:32:c2:c8:35:7d:20:ca:
                    20:1d:ce:00:84:ac:d7:c1:bd:e5:97:e3:24:35:b5:
                    c2:a1:db:db:08:97:07:3c:90:ad:9b:ea:c4:0e:47:
                    8e:59:a3:f9:af:1a:8a:43:52:25:95:91:80:70:17:
                    ce:76:f8:8a:22:3b:a3:40:2d:6d:a2:9b:f5:4f:55:
                    ec:b0:93:10:50:42:51:25:62:6c:c9:43:b5:ee:f6:
                    35:2a:fd:00:03:d4:a3:46:0e:cd:f6:29:d9:f2:6a:
                    e6:e3:ae:22:2d:90:6b:b4:88:af:3b:2b:8b:44:7a:
                    12:7d:26:4d:df:c6:37:1e:05:6b:2e:d7:ba:95:06:
                    c6:12:ab:2f:8c:4c:86:4f:e1:8e:47:2f:c0:a9:17:
                    95:4c:84:6c:df:2a:4b:c3:a4:b4:76:1a:fb:50:f7:
                    c1:ac:c6:bf:e6:82:e2:f0:b2:9b:14:7c:19:4b:7a:
                    fe:71:9d:31:67:d6:5a:b2:04:81:b6:9c:26:64:34:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CB:B1:3D:FF:43:56:6D:1E:9B:C8:41:D1:02:D0:9F:C9:17:CC:A4
            X509v3 Authority Key Identifier:
                keyid:AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/AS153376.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153376

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:3e:b2:ef:b4:4b:96:71:0d:d4:0d:e0:f6:f4:ef:5f:e0:
         83:bd:fa:f2:bb:46:7d:6f:45:2f:da:e7:9e:5a:d0:50:5f:96:
         a7:1c:52:4f:81:da:cc:44:00:cc:2e:a1:14:97:69:14:7b:48:
         68:43:12:03:74:5a:5b:82:10:b6:02:96:19:f2:4d:16:e1:e7:
         53:ae:96:3a:83:2c:a3:b7:bc:a1:d5:1e:f6:55:6a:bc:09:3f:
         a7:ff:6e:6c:6d:a6:f3:f2:11:d8:28:46:4a:c8:70:89:48:fc:
         77:5a:4c:09:cd:17:02:63:af:2a:60:81:e9:55:d7:75:20:4e:
         69:c8:3b:be:a4:2e:1e:c1:6e:e3:2d:49:c1:e0:c2:20:af:d3:
         86:da:36:7e:4f:8b:c4:60:51:8e:45:27:64:da:ae:d5:b9:40:
         94:0e:cf:db:3a:2e:a2:8f:1c:17:2d:5f:99:ff:91:7d:1a:bc:
         ab:0f:2d:3b:d0:01:6a:79:11:c0:46:55:b2:f1:90:e1:cd:91:
         0f:f1:0f:96:bc:a3:4f:6f:d5:79:46:87:37:ba:88:30:f6:b2:
         80:54:5e:17:0d:9e:32:fa:ef:67:da:a9:5d:b7:bb:18:66:96:
         0b:35:af:69:c2:62:b8:0e:87:fd:d8:b6:a4:65:1c:1d:0c:3e:
         c3:95:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:35:50 2026 by rpki-client