{"tool":"network-report","status":"warn","input":{"query":"AS7500"},"findings":[{"level":"warn","text":"AS7500 (M-ROOT-DNS) announces 4 IPv4 and 1 IPv6 prefixes.","title":"AS7500 (M-ROOT-DNS) announces 4 IPv4 and 1 IPv6 prefixes.","params":{"query":"AS7500","who":"AS7500 (M-ROOT-DNS)","v4":4,"v6":1}},{"level":"warn","text":"2 of 5 announced prefixes have no ROA (RPKI not found): 192.50.45.0/24, 202.13.183.0/24.","title":"2 of 5 announced prefixes have no ROA (RPKI not found): 192.50.45.0/24, 202.13.183.0/24.","params":{"count":2,"total":5,"list":"192.50.45.0/24, 202.13.183.0/24","asn":7500},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS7500 and a max length equal to the prefix length:","record":"192.50.45.0/24 AS7500 max-length /24\n202.13.183.0/24 AS7500 max-length /24"},{"level":"warn","text":"No abuse contact is published for AS7500.","title":"No abuse contact is published for AS7500.","params":{"what":"AS7500"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC."},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS7500","kind":"asn","special":null,"allocation":{"rir":"apnic","registry":"APNIC","cc":"JP","country":"Japan","date":"1997-03-03","status":"allocated","range":"AS7500 – AS7531","opaque_id":"A91A7381","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS7500","who":"AS7500 (M-ROOT-DNS)","v4":4,"v6":1}},"seconds":3.2999999999999998,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":7500,"v4":4,"v6":1}},{"tool":["rpki",{"prefix":"192.50.45.0/24","asn":"7500"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":2,"total":5,"list":"192.50.45.0/24, 202.13.183.0/24","asn":7500},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"192.50.45.0/24 AS7500 max-length /24\n202.13.183.0/24 AS7500 max-length /24"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":3,"total":5}},{"level":"pass","title":"Every announced prefix has an IRR route object.","params":[]},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":41,"right":2}}],"data":{"asn":7500,"holder":"M-ROOT-DNS - WIDE Project","announced":true,"v4":4,"v6":1,"prefixes":["192.50.45.0/24","202.12.26.0/23","202.12.27.0/24","202.13.183.0/24","2001:dc3::/32"],"rpki":{"valid":3,"not-found":2,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"192.50.45.0/24","state":"not-found"},{"prefix":"202.13.183.0/24","state":"not-found"}],"irr_missing":[],"irr_missing_count":0,"bogons":[],"upstreams":[{"asn":6939,"power":624,"name":"Hurricane Electric"},{"asn":3257,"power":103,"name":"GTT Communications (AS3257)"},{"asn":2200,"power":38,"name":"RENATER"},{"asn":2497,"power":32,"name":"Internet Initiative Japan"},{"asn":2516,"power":28,"name":"KDDI"},{"asn":9198,"power":24,"name":"Kazakhtelecom"},{"asn":3356,"power":18,"name":"Lumen AS3356"},{"asn":9002,"power":9,"name":"RETN"},{"asn":22548,"power":7,"name":"NIC.BR"},{"asn":2518,"power":7,"name":"BIGLOBE (AS2518)"},{"asn":34019,"power":7,"name":"Hivane"},{"asn":13030,"power":6,"name":"Init7"}],"left":41,"right":2},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS7500"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":2,"total":5,"list":"192.50.45.0/24, 202.13.183.0/24","asn":7500}}},"registration":{"status":"warn","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}},{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS7500"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC."}],"data":{"query":"AS7500","looked_up":"AS7500","kind":"autnum","source":"https://rdap.apnic.net/autnum/7500","terms":"https://www.apnic.net/about-apnic/whois_search/about/termsofuse/","summary":{"Name":"M-ROOT-DNS","Handle":"AS7500","Range":"AS7500","Country":"JP","Status":"active","Last changed":"2006-11-14T20:29:29Z"},"entities":[{"roles":["administrative","technical"],"kind":"group","name":"Japan Network Information Center","email":"hostmaster@nic.ad.jp"},{"roles":["technical"],"kind":null,"name":"AK003JP","email":null},{"roles":["administrative"],"kind":null,"name":"JM002JP","email":null}],"allocation":{"rir":"apnic","registry":"APNIC","cc":"JP","country":"Japan","date":"1997-03-03","status":"allocated","range":"AS7500 – AS7531","opaque_id":"A91A7381","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS7500"},"summary":{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS7500"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":7500,"name":"M-ROOT DNS Server"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":41,"ports":41,"capacity":"59G"}},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"asn":7500,"net":{"id":825,"name":"M-ROOT DNS Server","aka":"","website":"http://www.wide.ad.jp/","looking_glass":"","route_server":"","irr_as_set":"RADB::AS-M-ROOT","info_type":"Non-Profit","info_prefixes4":6,"info_prefixes6":2,"info_traffic":"20-100Mbps","info_ratio":"Mostly Outbound","info_scope":"Global","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":41,"fac_count":0,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2026-11-02T04:55:24Z"},"ix_count":41,"capacity":59000,"ix":[],"ix_total":41,"fac":[],"fac_total":0,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"7500"},"summary":{"level":"warn","title":"No public NOC, policy or technical contact.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"192.50.45.0/24","asn":"7500"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":2,"total":5,"list":"192.50.45.0/24, 202.13.183.0/24","asn":7500},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"192.50.45.0/24 AS7500 max-length /24\n202.13.183.0/24 AS7500 max-length /24","section":"routing"},{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS7500"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC.","section":"registration"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS7500"}