Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa
File:                     AS48070.asa (raw, json)
Hash identifier:          5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=
Subject key identifier:   24:22:7D:8B:95:5A:87:0C:D0:C2:86:1D:10:A0:0B:BD:17:D5:55:55
Certificate issuer:       /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial:       4D699C99CBB4C2EE95EDB7549CEDB76B515219F9
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa
Signing time:             Sun 26 Oct 2025 14:56:53 +0000
ASPA not before:          Sun 26 Oct 2025 14:51:53 +0000
ASPA not after:           Sun 25 Oct 2026 14:56:53 +0000
Customer ASID:            48070
Providers:                AS: 174
                          AS: 1299
                          AS: 6461
                          AS: 61049
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:69:9c:99:cb:b4:c2:ee:95:ed:b7:54:9c:ed:b7:6b:51:52:19:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
        Validity
            Not Before: Oct 26 14:51:53 2025 GMT
            Not After : Oct 25 14:56:53 2026 GMT
        Subject: CN=24227D8B955A870CD0C2861D10A00BBD17D55555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:73:62:09:99:cd:c0:10:b6:59:df:40:9a:
                    a3:a5:58:38:a9:ce:47:3b:e6:56:92:47:33:8d:bf:
                    9e:4a:cd:cc:e7:a9:2e:50:8d:aa:9a:72:68:8f:0e:
                    7b:9c:a6:a1:7f:4f:fc:f4:aa:57:f3:e4:cf:9e:00:
                    76:72:25:c0:db:e2:12:f7:58:7a:c4:4d:66:f9:8e:
                    6a:57:0a:c0:97:23:52:c2:d5:8c:1f:a0:4f:f6:b1:
                    c4:06:49:98:44:ea:e2:9b:1a:1a:75:de:36:35:99:
                    32:6a:e2:bb:09:b2:0d:3a:68:ac:46:00:c8:38:28:
                    d8:ba:7e:35:d6:a0:0c:77:24:c4:ba:6a:39:d4:26:
                    70:d8:de:48:92:2c:28:1c:e6:85:82:3a:27:f0:4d:
                    e0:12:3e:47:1f:51:d4:88:0b:8a:f1:08:bd:c3:b4:
                    b5:d7:05:1c:a7:f3:54:84:ff:d0:44:6b:71:57:32:
                    07:82:d3:c2:c6:b6:e1:09:22:08:77:8d:9c:f8:06:
                    44:7d:f1:df:0b:7d:fc:a1:b6:0f:ac:3a:48:c6:5a:
                    66:06:fb:c7:a8:3f:a8:84:d4:03:a2:99:c3:f2:5f:
                    52:df:5b:aa:17:d0:9e:54:73:26:7c:c7:62:20:80:
                    7e:30:b2:ff:ec:85:c4:9b:90:0b:c1:ab:34:97:ab:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:22:7D:8B:95:5A:87:0C:D0:C2:86:1D:10:A0:0B:BD:17:D5:55:55
            X509v3 Authority Key Identifier:
                keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48070

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:7d:74:86:d4:e7:9c:72:ee:a3:d8:49:d1:fe:9e:9b:c3:
         df:b8:50:1e:78:97:12:ce:78:73:ee:d0:96:5b:d0:30:30:3f:
         9c:e6:b8:e9:57:43:b3:03:f0:49:dd:43:82:69:be:77:26:c1:
         91:bd:34:69:d0:5a:23:94:5b:bd:df:9d:c7:50:52:13:88:d3:
         06:a3:e4:10:00:4b:14:31:d1:2c:6d:64:ba:b4:86:11:11:68:
         35:f6:a1:a8:38:fc:4e:9d:de:99:20:2b:9e:2e:bb:43:9b:d1:
         17:41:e1:d0:e9:b2:e7:4a:be:68:64:a6:a7:64:ea:94:34:2d:
         2a:5e:f5:30:1c:d9:16:fe:bf:ed:5d:a7:b4:82:41:ef:7f:a7:
         36:64:5e:68:30:71:17:af:91:c4:e1:85:44:e9:09:5f:f2:46:
         3d:ee:22:bb:e4:38:4f:d4:72:2a:96:b9:ad:e6:34:ae:9b:cf:
         3e:62:ab:09:56:ad:33:31:2c:d7:ac:72:a7:68:e5:cb:ff:6c:
         27:10:0a:e5:ff:91:9f:cf:a6:2e:52:1a:3e:10:9a:bf:90:c2:
         6d:06:35:65:bc:44:70:dc:36:d5:d1:3a:ed:e7:34:1a:f9:f9:
         08:1e:72:06:a0:cf:0c:a8:27:5c:a2:4b:f9:b0:51:cb:bf:df:
         8f:2f:11:d7
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUTWmcmcu0wu6V7bdUnO23a1FSGfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNTEwMjYxNDUxNTNaFw0yNjEwMjUxNDU2NTNaMDMxMTAvBgNV
BAMTKDI0MjI3RDhCOTU1QTg3MENEMEMyODYxRDEwQTAwQkJEMTdENTU1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwnNiCZnNwBC2Wd9AmqOlWDip
zkc75laSRzONv55KzcznqS5QjaqacmiPDnucpqF/T/z0qlfz5M+eAHZyJcDb4hL3
WHrETWb5jmpXCsCXI1LC1YwfoE/2scQGSZhE6uKbGhp13jY1mTJq4rsJsg06aKxG
AMg4KNi6fjXWoAx3JMS6ajnUJnDY3kiSLCgc5oWCOifwTeASPkcfUdSIC4rxCL3D
tLXXBRyn81SE/9BEa3FXMgeC08LGtuEJIgh3jZz4BkR98d8Lffyhtg+sOkjGWmYG
+8eoP6iE1AOimcPyX1LfW6oX0J5UcyZ8x2IggH4wsv/shcSbkAvBqzSXq3EFAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUJCJ9i5VahwzQwoYdEKALvRfVVVUwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RjZTE5NmZlLTRiMWEt
NDZlYS05Yzk1LTRhZjEyOTY0YTQ5ZC8wL0FTNDgwNzAuYXNhMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALvGMA0GCSqG
SIb3DQEBCwUAA4IBAQA9K310htTnnHLuo9hJ0f6em8PfuFAeeJcSznhz7tCWW9Aw
MD+c5rjpV0OzA/BJ3UOCab53JsGRvTRp0FojlFu9353HUFITiNMGo+QQAEsUMdEs
bWS6tIYREWg19qGoOPxOnd6ZICueLrtDm9EXQeHQ6bLnSr5oZKanZOqUNC0qXvUw
HNkW/r/tXae0gkHvf6c2ZF5oMHEXr5HE4YVE6Qlf8kY97iK75DhP1HIqlrmt5jSu
m88+YqsJVq0zMSzXrHKnaOXL/2wnEArl/5Gfz6YuUho+EJq/kMJtBjVlvERw3DbV
0Trt5zQa+fkIHnIGoM8MqCdcokv5sFHLv9+PLxHX
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:36:40 2025 by rpki-client