{"tool":"network-report","status":"fail","input":{"query":"AS55824"},"findings":[{"level":"fail","text":"AS55824 (NKN-CORE-NW) announces 177 IPv4 and 88 IPv6 prefixes.","title":"AS55824 (NKN-CORE-NW) announces 177 IPv4 and 88 IPv6 prefixes.","params":{"query":"AS55824","who":"AS55824 (NKN-CORE-NW)","v4":177,"v6":88}},{"level":"fail","text":"3 of 265 announced prefixes are RPKI invalid: 2001:4408:5b01::/48, 2405:8a00:2052::/48, 2403:c380:1::/48.","title":"3 of 265 announced prefixes are RPKI invalid: 2001:4408:5b01::/48, 2405:8a00:2052::/48, 2403:c380:1::/48.","params":{"count":3,"total":265,"list":"2001:4408:5b01::/48, 2405:8a00:2052::/48, 2403:c380:1::/48"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"warn","text":"2 of 265 announced prefixes have no ROA (RPKI not found): 103.194.27.0/24, 2403:89c0::/32.","title":"2 of 265 announced prefixes have no ROA (RPKI not found): 103.194.27.0/24, 2403:89c0::/32.","params":{"count":2,"total":265,"list":"103.194.27.0/24, 2403:89c0::/32","asn":55824},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS55824 and a max length equal to the prefix length:","record":"103.194.27.0/24 AS55824 max-length /24\n2403:89c0::/32 AS55824 max-length /32"},{"level":"warn","text":"11 of 265 announced prefixes have no IRR route object: 2403:c380:1::/48, 2001:4408:4d08::/48, 2403:89c0::/32, 2001:4408:4300::/45, 2405:8a00:2052::/48 (+6).","title":"11 of 265 announced prefixes have no IRR route object: 2403:c380:1::/48, 2001:4408:4d08::/48, 2403:89c0::/32, 2001:4408:4300::/45, 2405:8a00:2052::/48 (+6).","params":{"count":11,"total":265,"list":"2403:c380:1::/48, 2001:4408:4d08::/48, 2403:89c0::/32, 2001:4408:4300::/45, 2405:8a00:2052::/48 (+6)","asn":55824},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS55824 in your RIR’s IRR database (or RADB).","record":"route6: 2403:c380:1::/48\norigin: AS55824\n\nroute6: 2001:4408:4d08::/48\norigin: AS55824\n\nroute6: 2403:89c0::/32\norigin: AS55824"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."}],"data":{"query":"AS55824","kind":"asn","special":null,"allocation":{"rir":"apnic","registry":"APNIC","cc":"IN","country":"India","date":"2010-10-19","status":"allocated","range":"AS55824","opaque_id":"A914BC7A","special":null},"verdict":{"level":"fail","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS55824","who":"AS55824 (NKN-CORE-NW)","v4":177,"v6":88}},"seconds":1.3,"sections":{"routing":{"status":"fail","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":55824,"v4":177,"v6":88}},{"tool":["rpki",{"prefix":"2001:4408:5b01::/48","asn":"55824"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":3,"total":265,"list":"2001:4408:5b01::/48, 2405:8a00:2052::/48, 2403:c380:1::/48"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"tool":["rpki",{"prefix":"103.194.27.0/24","asn":"55824"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":2,"total":265,"list":"103.194.27.0/24, 2403:89c0::/32","asn":55824},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"103.194.27.0/24 AS55824 max-length /24\n2403:89c0::/32 AS55824 max-length /32"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":260,"total":265}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":11,"total":265,"list":"2403:c380:1::/48, 2001:4408:4d08::/48, 2403:89c0::/32, 2001:4408:4300::/45, 2405:8a00:2052::/48 (+6)","asn":55824},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2403:c380:1::/48\norigin: AS55824\n\nroute6: 2001:4408:4d08::/48\norigin: AS55824\n\nroute6: 2403:89c0::/32\norigin: AS55824"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":2,"right":80}}],"data":{"asn":55824,"holder":"NKN-CORE-NW - NKN Core Network","announced":true,"v4":177,"v6":88,"prefixes":["14.139.0.0/16","14.139.0.0/19","14.139.3.0/24","14.139.4.0/24","14.139.8.0/24","14.139.9.0/24","14.139.11.0/24","14.139.13.0/24","14.139.14.0/24","14.139.32.0/19","14.139.32.0/24","14.139.34.0/24","14.139.36.0/24","14.139.37.0/24","14.139.38.0/24","14.139.40.0/24","14.139.41.0/24","14.139.47.0/24","14.139.49.0/24","14.139.52.0/24","14.139.56.0/21","14.139.59.0/24","14.139.60.0/24","14.139.61.0/24","14.139.63.0/24","14.139.64.0/19","14.139.64.0/24","14.139.69.0/24","14.139.82.0/24","14.139.85.0/24","14.139.88.0/24","14.139.94.0/23","14.139.96.0/19","14.139.96.0/24","14.139.97.0/24","14.139.98.0/24","14.139.105.0/24","14.139.106.0/24","14.139.108.0/24","14.139.110.0/24","14.139.111.0/24","14.139.116.0/24","14.139.119.0/24","14.139.121.0/24","14.139.122.0/24","14.139.123.0/24","14.139.126.0/24","14.139.128.0/19","14.139.128.0/24","14.139.133.0/24","14.139.134.0/24","14.139.150.0/24","14.139.159.0/24","14.139.160.0/19","14.139.160.0/24","14.139.162.0/24","14.139.163.0/24","14.139.184.0/24","14.139.185.0/24","14.139.187.0/24","14.139.192.0/19","14.139.192.0/20","14.139.192.0/24","14.139.194.0/24","14.139.195.0/24","14.139.199.0/24","14.139.200.0/24","14.139.204.0/24","14.139.205.0/24","14.139.208.0/20","14.139.208.0/21","14.139.208.0/24","14.139.210.0/24","14.139.211.0/24","14.139.212.0/23","14.139.212.0/24","14.139.213.0/24","14.139.216.0/21","14.139.217.0/24","14.139.220.0/24","14.139.222.0/24","14.139.224.0/19","14.139.224.0/24","14.139.225.0/24","14.139.226.0/24","14.139.227.0/24","14.139.229.0/24","14.139.230.0/24","14.139.231.0/24","14.139.233.0/24","14.139.235.0/24","14.139.236.0/24","14.139.237.0/24","14.139.238.0/24","14.139.239.0/24","14.139.241.0/24","14.139.243.0/24","14.139.244.0/24","14.139.245.0/24","14.139.247.0/24"],"rpki":{"valid":260,"invalid":3,"not-found":2,"unchecked":0},"rpki_problems":[{"prefix":"2001:4408:5b01::/48","state":"invalid"},{"prefix":"2405:8a00:2052::/48","state":"invalid"},{"prefix":"2403:c380:1::/48","state":"invalid"},{"prefix":"103.194.27.0/24","state":"not-found"},{"prefix":"2403:89c0::/32","state":"not-found"}],"irr_missing":["2403:c380:1::/48","2001:4408:4d08::/48","2403:89c0::/32","2001:4408:4300::/45","2405:8a00:2052::/48","103.194.27.0/24","2001:4408:8508::/45","2001:4408:4508::/45","2001:4408:5b01::/48","2001:4408:6708::/45","2001:4408:4d00::/45"],"irr_missing_count":11,"bogons":[],"upstreams":[{"asn":9885,"power":24510,"name":"NKN Internet Gateway"},{"asn":4758,"power":578,"name":"National Informatics Centre India"}],"left":2,"right":80},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS55824"},"summary":{"level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":3,"total":265,"list":"2001:4408:5b01::/48, 2405:8a00:2052::/48, 2403:c380:1::/48"}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}}],"data":{"query":"AS55824","looked_up":"AS55824","kind":"autnum","source":"https://rdap.apnic.net/autnum/55824","terms":"https://www.apnic.net/about-apnic/whois_search/about/termsofuse/","summary":{"Name":"NKN-CORE-NW","Handle":"AS55824","Range":"AS55824","Country":"IN","Status":"active","Registered":"2010-10-19T06:23:08Z","Last changed":"2026-07-10T05:24:01Z","Abuse contact":"abuseteam@nkn.in"},"entities":[{"roles":["administrative"],"kind":"group","name":"NKN - Network Administrator","email":"support@nkn.in"},{"roles":["registrant"],"kind":"org","name":"National Knowledge Network","email":"gaurav.kansal@nic.in"},{"roles":["abuse"],"kind":"group","name":"IRT-GAURAVKANSAL","email":"abuseteam@nkn.in"},{"roles":["technical"],"kind":"individual","name":"GAURAV KANSAL","email":"GAURAV.KANSAL@NIC.IN"}],"allocation":{"rir":"apnic","registry":"APNIC","cc":"IN","country":"India","date":"2010-10-19","status":"allocated","range":"AS55824","opaque_id":"A914BC7A","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS55824"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":55824,"name":"NKN Core Network"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."}],"data":{"asn":55824,"net":{"id":13046,"name":"NKN Core Network","aka":"","website":"https://nkn.gov.in/","looking_glass":"","route_server":"","irr_as_set":"","info_type":"","info_prefixes4":null,"info_prefixes6":null,"info_traffic":"","info_ratio":"Not Disclosed","info_scope":"Not Disclosed","info_unicast":false,"info_ipv6":false,"info_never_via_route_servers":false,"ix_count":0,"fac_count":0,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2025-07-21T06:57:10Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":0,"poc":[{"role":"Technical","email":"gaurav.kansal@nic.in"},{"role":"Abuse","email":"abuse@nkn.in"},{"role":"NOC","email":"support@nkn.in"},{"role":"Policy","email":"gaurav.kansal@nic.in"}],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"55824"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"2001:4408:5b01::/48","asn":"55824"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":3,"total":265,"list":"2001:4408:5b01::/48, 2405:8a00:2052::/48, 2403:c380:1::/48"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes.","section":"routing"},{"tool":["rpki",{"prefix":"103.194.27.0/24","asn":"55824"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":2,"total":265,"list":"103.194.27.0/24, 2403:89c0::/32","asn":55824},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"103.194.27.0/24 AS55824 max-length /24\n2403:89c0::/32 AS55824 max-length /32","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":11,"total":265,"list":"2403:c380:1::/48, 2001:4408:4d08::/48, 2403:89c0::/32, 2001:4408:4300::/45, 2405:8a00:2052::/48 (+6)","asn":55824},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2403:c380:1::/48\norigin: AS55824\n\nroute6: 2001:4408:4d08::/48\norigin: AS55824\n\nroute6: 2403:89c0::/32\norigin: AS55824","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS55824"}