{"tool":"network-report","status":"fail","input":{"query":"AS17497"},"findings":[{"level":"fail","text":"AS17497 (LGHL-AS-AP) announces 68 IPv4 and 17 IPv6 prefixes.","title":"AS17497 (LGHL-AS-AP) announces 68 IPv4 and 17 IPv6 prefixes.","params":{"query":"AS17497","who":"AS17497 (LGHL-AS-AP)","v4":68,"v6":17}},{"level":"fail","text":"2 of 85 announced prefixes are RPKI invalid: 154.211.168.0/21, 154.211.176.0/21.","title":"2 of 85 announced prefixes are RPKI invalid: 154.211.168.0/21, 154.211.176.0/21.","params":{"count":2,"total":85,"list":"154.211.168.0/21, 154.211.176.0/21"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"warn","text":"8 of 85 announced prefixes have no ROA (RPKI not found): 45.196.80.0/21, 121.78.23.0/24, 156.255.16.0/20, 2402:620:2e::/48, 2402:620:2f::/48 (+3).","title":"8 of 85 announced prefixes have no ROA (RPKI not found): 45.196.80.0/21, 121.78.23.0/24, 156.255.16.0/20, 2402:620:2e::/48, 2402:620:2f::/48 (+3).","params":{"count":8,"total":85,"list":"45.196.80.0/21, 121.78.23.0/24, 156.255.16.0/20, 2402:620:2e::/48, 2402:620:2f::/48 (+3)","asn":17497},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS17497 and a max length equal to the prefix length:","record":"45.196.80.0/21 AS17497 max-length /21\n121.78.23.0/24 AS17497 max-length /24\n156.255.16.0/20 AS17497 max-length /20\n2402:620:2e::/48 AS17497 max-length /48\n2402:620:2f::/48 AS17497 max-length /48\n2402:620:20::/48 AS17497 max-length /48\n2402:620:21::/48 AS17497 max-length /48\n2402:620:26::/48 AS17497 max-length /48"},{"level":"warn","text":"1 of 85 announced prefixes have no IRR route object: 45.196.80.0/21.","title":"1 of 85 announced prefixes have no IRR route object: 45.196.80.0/21.","params":{"count":1,"total":85,"list":"45.196.80.0/21","asn":17497},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS17497 in your RIR’s IRR database (or RADB).","record":"route: 45.196.80.0/21\norigin: AS17497"}],"data":{"query":"AS17497","kind":"asn","special":null,"allocation":{"rir":"apnic","registry":"APNIC","cc":"HK","country":"Hong Kong SAR China","date":"2018-10-23","status":"allocated","range":"AS17497","opaque_id":"A91FDE13","special":null},"verdict":{"level":"fail","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS17497","who":"AS17497 (LGHL-AS-AP)","v4":68,"v6":17}},"seconds":3.2000000000000002,"sections":{"routing":{"status":"fail","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":17497,"v4":68,"v6":17}},{"tool":["rpki",{"prefix":"154.211.168.0/21","asn":"17497"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":2,"total":85,"list":"154.211.168.0/21, 154.211.176.0/21"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"tool":["rpki",{"prefix":"45.196.80.0/21","asn":"17497"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":85,"list":"45.196.80.0/21, 121.78.23.0/24, 156.255.16.0/20, 2402:620:2e::/48, 2402:620:2f::/48 (+3)","asn":17497},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"45.196.80.0/21 AS17497 max-length /21\n121.78.23.0/24 AS17497 max-length /24\n156.255.16.0/20 AS17497 max-length /20\n2402:620:2e::/48 AS17497 max-length /48\n2402:620:2f::/48 AS17497 max-length /48\n2402:620:20::/48 AS17497 max-length /48\n2402:620:21::/48 AS17497 max-length /48\n2402:620:26::/48 AS17497 max-length /48"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":75,"total":85}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":1,"total":85,"list":"45.196.80.0/21","asn":17497},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 45.196.80.0/21\norigin: AS17497"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":30,"right":28}}],"data":{"asn":17497,"holder":"LGHL-AS-AP - Liasail Global Hongkong Limited","announced":true,"v4":68,"v6":17,"prefixes":["31.24.253.0/24","45.192.132.0/24","45.196.80.0/21","45.253.244.0/24","45.253.245.0/24","66.93.12.0/24","78.105.206.0/24","103.211.68.0/24","103.211.228.0/24","103.211.229.0/24","121.78.23.0/24","134.168.223.0/24","134.168.232.0/24","134.168.233.0/24","134.168.234.0/24","134.168.235.0/24","134.168.236.0/24","134.168.237.0/24","134.168.238.0/24","144.31.36.0/24","151.247.147.0/24","154.81.157.0/24","154.81.159.0/24","154.82.19.0/24","154.90.138.0/23","154.90.174.0/23","154.90.175.0/24","154.92.188.0/23","154.92.188.0/24","154.92.189.0/24","154.94.2.0/23","154.193.8.0/21","154.193.16.0/20","154.193.162.0/24","154.196.135.0/24","154.196.140.0/23","154.196.142.0/24","154.196.143.0/24","154.196.156.0/22","154.196.164.0/22","154.196.172.0/22","154.196.184.0/21","154.196.216.0/21","154.197.16.0/21","154.197.26.0/23","154.211.128.0/19","154.211.168.0/21","154.211.176.0/21","154.217.192.0/20","154.217.232.0/23","154.222.128.0/22","154.222.140.0/22","154.222.148.0/22","156.225.14.0/24","156.233.3.0/24","156.245.8.0/22","156.245.176.0/21","156.245.200.0/22","156.248.80.0/21","156.255.16.0/20","156.255.48.0/22","156.255.52.0/22","163.227.196.0/24","163.227.197.0/24","178.92.41.0/24","193.203.214.0/24","193.203.215.0/24","203.168.243.0/24","2402:620:1::/48","2402:620:1c::/48","2402:620:1d::/48","2402:620:1e::/48","2402:620:1f::/48","2402:620:2::/48","2402:620:2e::/48","2402:620:2f::/48","2402:620:3::/48","2402:620:10::/48","2402:620:11::/48","2402:620:16::/48","2402:620:19::/48","2402:620:20::/48","2402:620:21::/48","2402:620:26::/48","2402:620::/48"],"rpki":{"valid":75,"not-found":8,"invalid":2,"unchecked":0},"rpki_problems":[{"prefix":"154.211.168.0/21","state":"invalid"},{"prefix":"154.211.176.0/21","state":"invalid"},{"prefix":"45.196.80.0/21","state":"not-found"},{"prefix":"121.78.23.0/24","state":"not-found"},{"prefix":"156.255.16.0/20","state":"not-found"},{"prefix":"2402:620:2e::/48","state":"not-found"},{"prefix":"2402:620:2f::/48","state":"not-found"},{"prefix":"2402:620:20::/48","state":"not-found"},{"prefix":"2402:620:21::/48","state":"not-found"},{"prefix":"2402:620:26::/48","state":"not-found"}],"irr_missing":["45.196.80.0/21"],"irr_missing_count":1,"bogons":[],"upstreams":[{"asn":2914,"power":3047,"name":"NTT Global IP Network"},{"asn":21859,"power":2834,"name":"Zenlayer Edge Cloud Network - AS21859"},{"asn":3491,"power":2832,"name":"PCCW Global"},{"asn":7195,"power":2407,"name":"EdgeUno"},{"asn":174,"power":2033,"name":"Cogent Communications, Inc."},{"asn":135067,"power":1480,"name":"LOGICOM"},{"asn":135338,"power":1361,"name":"STARCLOUD INFORMATION LIMITED, STARCLOUD INFORMATION LIMITED"},{"asn":133296,"power":1090,"name":"Web Werks DataCenter"},{"asn":9498,"power":837,"name":"Bharti Airtel Limited"},{"asn":6939,"power":498,"name":"Hurricane Electric"},{"asn":3257,"power":453,"name":"GTT Communications (AS3257)"},{"asn":63969,"power":281,"name":"Race Online"}],"left":30,"right":28},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS17497"},"summary":{"level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":2,"total":85,"list":"154.211.168.0/21, 154.211.176.0/21"}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}}],"data":{"query":"AS17497","looked_up":"AS17497","kind":"autnum","source":"https://rdap.apnic.net/autnum/17497","terms":"https://www.apnic.net/about-apnic/whois_search/about/termsofuse/","summary":{"Name":"LGHL-AS-AP","Handle":"AS17497","Range":"AS17497","Country":"HK","Status":"active","Registered":"2025-03-26T04:36:45Z","Last changed":"2025-05-14T06:15:36Z","Abuse contact":"network@liasail.com"},"entities":[{"roles":["abuse"],"kind":"group","name":"IRT-LGHL-HK","email":"network@liasail.com"},{"roles":["registrant"],"kind":"org","name":"liasail global hongkong limited","email":"network@liasial.com"},{"roles":["technical","administrative"],"kind":"group","name":"liasail global hongkong limited administrator","email":"abuse@liasail.com"}],"allocation":{"rir":"apnic","registry":"APNIC","cc":"HK","country":"Hong Kong SAR China","date":"2018-10-23","status":"allocated","range":"AS17497","opaque_id":"A91FDE13","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS17497"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}}},"peering":{"status":"pass","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":17497,"name":"Liasail"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":2,"ports":2,"capacity":"200G"}}],"data":{"asn":17497,"net":{"id":39359,"name":"Liasail","aka":"Liasail","website":"http://www.liasail.net","looking_glass":"","route_server":"","irr_as_set":"APNIC::AS17497:AS-TRANSIT","info_type":"NSP","info_prefixes4":5000,"info_prefixes6":1000,"info_traffic":"300-500Gbps","info_ratio":"Balanced","info_scope":"Global","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":2,"fac_count":0,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2026-11-03T04:29:32Z"},"ix_count":2,"capacity":200000,"ix":[],"ix_total":2,"fac":[],"fac_total":0,"poc":[{"role":"NOC","email":"network@liasail.com"},{"role":"Policy","email":"richard@liasail.com"},{"role":"Abuse","email":"network@liasail.com"}],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"17497"},"summary":{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":17497,"name":"Liasail"}}}},"fixes":[{"tool":["rpki",{"prefix":"154.211.168.0/21","asn":"17497"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":2,"total":85,"list":"154.211.168.0/21, 154.211.176.0/21"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes.","section":"routing"},{"tool":["rpki",{"prefix":"45.196.80.0/21","asn":"17497"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":85,"list":"45.196.80.0/21, 121.78.23.0/24, 156.255.16.0/20, 2402:620:2e::/48, 2402:620:2f::/48 (+3)","asn":17497},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"45.196.80.0/21 AS17497 max-length /21\n121.78.23.0/24 AS17497 max-length /24\n156.255.16.0/20 AS17497 max-length /20\n2402:620:2e::/48 AS17497 max-length /48\n2402:620:2f::/48 AS17497 max-length /48\n2402:620:20::/48 AS17497 max-length /48\n2402:620:21::/48 AS17497 max-length /48\n2402:620:26::/48 AS17497 max-length /48","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":1,"total":85,"list":"45.196.80.0/21","asn":17497},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 45.196.80.0/21\norigin: AS17497","section":"routing"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS17497"}