Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS202359.asa
File:                     AS202359.asa (raw, json)
Hash identifier:          BmY3LUYc70zY+XfXaX4q/dghRvIgKsUDJS7iYImdX/w=
Subject key identifier:   30:77:87:37:E9:48:73:6C:EE:B6:F7:58:F2:35:30:42:05:D5:99:27
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       35B3454CE43D7C6B4948D533CBB0034B99478282
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS202359.asa
Signing time:             Mon 09 Jun 2025 10:00:53 +0000
ASPA not before:          Mon 09 Jun 2025 09:55:53 +0000
ASPA not after:           Mon 08 Jun 2026 10:00:53 +0000
Customer ASID:            202359
Providers:                AS: 30740
                          AS: 33920
                          AS: 41495
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 22:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b3:45:4c:e4:3d:7c:6b:49:48:d5:33:cb:b0:03:4b:99:47:82:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jun  9 09:55:53 2025 GMT
            Not After : Jun  8 10:00:53 2026 GMT
        Subject: CN=30778737E948736CEEB6F758F235304205D59927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:50:15:6a:c8:42:e5:e2:8a:e4:c9:40:e0:
                    da:57:db:78:55:08:f4:ac:64:6e:e8:fa:27:32:b4:
                    5f:64:19:bf:85:1f:42:b6:f9:06:12:84:80:b4:2a:
                    df:e8:82:75:d9:50:14:7a:2a:75:e0:12:51:12:a0:
                    fc:e4:31:3a:28:38:a2:f8:ef:b8:1d:93:47:c8:a8:
                    15:16:05:3b:7a:2a:84:c2:e0:e2:4a:0c:d0:10:ba:
                    0f:b3:66:1d:84:c2:ef:57:4d:31:64:7a:94:c6:86:
                    26:f5:1a:37:3a:50:f2:03:6e:ef:f9:62:64:01:52:
                    51:dc:a9:7e:f1:5b:3c:71:90:43:f8:ea:e6:87:ea:
                    dd:77:fe:e7:1e:0f:dc:c7:a2:59:1e:26:9d:66:3b:
                    c6:e5:2b:1d:65:66:f9:9d:9e:19:c8:a5:41:65:73:
                    bc:f9:e2:ec:09:67:08:ee:68:be:0d:98:cf:7b:68:
                    4b:7e:04:bb:ab:b2:8d:a6:3b:2e:30:6a:cf:c3:01:
                    4d:74:f8:6c:51:48:75:60:35:39:c0:fe:be:c2:dc:
                    b8:d1:53:85:26:3f:d2:d3:64:eb:1b:9e:37:2b:46:
                    76:d9:31:22:c4:d3:0e:72:a6:fa:43:af:48:f1:14:
                    cf:19:db:3c:12:4f:de:f8:f4:d8:45:d0:b1:4e:ef:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:87:37:E9:48:73:6C:EE:B6:F7:58:F2:35:30:42:05:D5:99:27
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS202359.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202359

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:68:6d:1b:db:e7:37:d3:49:93:6a:ef:9b:3a:a2:a1:99:
         71:48:3d:7c:de:d7:bb:21:6c:fa:17:fe:ee:c1:e6:e3:f5:22:
         b7:72:87:cb:3e:23:06:03:34:a8:2a:ea:69:a0:ed:77:95:8c:
         22:b3:e0:a7:90:06:3d:e2:ea:5b:5b:8f:75:cf:c3:cf:cb:b2:
         f7:54:2c:5d:3c:2a:b5:da:3e:bf:f0:2a:2c:98:06:44:c4:0a:
         6b:01:4f:8b:a5:f4:fc:f7:e7:b6:54:fa:f1:b5:90:5a:68:2f:
         4b:a2:e4:1c:6a:32:0f:bc:6c:a6:fd:78:78:d2:84:1d:c8:ba:
         bf:3f:33:23:0a:95:07:fa:4d:8b:c6:ba:d9:57:23:c6:94:b3:
         b6:c3:8d:e5:79:44:d7:29:c2:7f:1c:6b:5e:58:17:0a:12:ef:
         ab:97:81:a4:f6:09:92:12:01:88:e1:c0:c6:4b:67:ec:b3:72:
         3d:db:00:40:14:16:3f:e1:cc:42:5c:fe:16:2f:19:bd:c2:1a:
         78:96:1e:b9:15:8f:73:27:88:86:ed:91:74:17:b8:38:f4:d5:
         1c:9f:d1:0b:b7:ec:01:dc:ab:ce:15:54:d8:da:0a:61:f6:0c:
         2d:ce:82:3c:53:30:55:6b:b5:73:c8:c5:14:a3:02:df:40:46:
         75:5c:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:41 2025 by rpki-client