Network report
Who holds an IP address, prefix or AS number, how it is routed (origin AS, RPKI, IRR), its reverse DNS, blocklist listings and PeeringDB record, with what to fix first.
Checking routing, RPKI, reverse DNS, blocklists and the registry. This usually takes 3 to 10 seconds.
Problem: AS4847 (CNIX-AP) announces 876 IPv4 and 11 IPv6 prefixes. 1 problem · 4 warnings
| AS page | AS4847 |
|---|---|
| Holder | CNIX-AP - China Networks Inter-Exchange |
| Allocation | APNIC, China (CN), allocated 1996-09-10 |
| Prefixes (IPv4 / IPv6) | 876 / 11 |
| RPKI valid | 83% (732 / 887) |
| Upstreams and peers | 2 |
What to fix
-
Problem
12 of 887 announced prefixes are RPKI invalid: 123.58.232.0/22, 123.58.232.0/24, 123.58.233.0/24, 123.58.234.0/24, 123.58.235.0/24 (+7).
A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.
Fix: Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes.
-
Warning
9 of 887 announced prefixes have no ROA (RPKI not found): 49.221.26.0/23, 49.221.64.0/19, 49.221.128.0/19, 60.247.0.0/17, 60.247.0.0/19 (+4).
Without a ROA, networks cannot tell your routes from a hijack.
Fix: Create a ROA for each at your RIR portal, with origin AS4847 and a max length equal to the prefix length:
49.221.26.0/23 AS4847 max-length /23 49.221.64.0/19 AS4847 max-length /19 49.221.128.0/19 AS4847 max-length /19 60.247.0.0/17 AS4847 max-length /17 60.247.0.0/19 AS4847 max-length /19 60.247.28.0/24 AS4847 max-length /24 60.247.32.0/19 AS4847 max-length /19 60.247.45.0/24 AS4847 max-length /24 60.247.64.0/19 AS4847 max-length /19
-
Warning
143 of 887 announced prefixes have no IRR route object: 118.194.134.0/23, 45.124.21.0/24, 118.187.56.0/24, 218.240.7.0/24, 101.96.132.0/23 (+138).
Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.
Fix: Create route (IPv4) and route6 (IPv6) objects with origin AS4847 in your RIR’s IRR database (or RADB).
route: 118.194.134.0/23 origin: AS4847 route: 45.124.21.0/24 origin: AS4847 route: 118.187.56.0/24 origin: AS4847
-
Warning
No IRR as-set is listed.
Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.
Fix: Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.
-
Warning
No public NOC, policy or technical contact.
Other networks use these addresses to set up peering and to reach you during an incident.
Fix: Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.
Checks
Routing and RPKI 12 of 887 announced prefixes are RPKI invalid: 123.58.232.0/22, 123.58.232.0/24, 123.58.233.0/24, 123.58.234.0/24, 123.58.235.0/24 (+7).
- Pass: AS4847 announces 876 IPv4 and 11 IPv6 prefixes.
- Problem: 12 of 887 announced prefixes are RPKI invalid: 123.58.232.0/22, 123.58.232.0/24, 123.58.233.0/24, 123.58.234.0/24, 123.58.235.0/24 (+7).
- Warning: 9 of 887 announced prefixes have no ROA (RPKI not found): 49.221.26.0/23, 49.221.64.0/19, 49.221.128.0/19, 60.247.0.0/17, 60.247.0.0/19 (+4).
- Info: 732 of 887 announced prefixes are RPKI valid.
- Info: The RPKI state of 134 prefixes was not looked up (no ROA of AS4847 covers them; only the first 10 are checked).
- Warning: 143 of 887 announced prefixes have no IRR route object: 118.194.134.0/23, 45.124.21.0/24, 118.187.56.0/24, 218.240.7.0/24, 101.96.132.0/23 (+138).
- Info: 2 upstreams and peers, 62 downstream networks seen.
| Holder | CNIX-AP - China Networks Inter-Exchange |
|---|---|
| IPv4 prefixes | 876 |
| IPv6 prefixes | 11 |
| RPKI | 732 valid · 12 invalid · 9 not found · 134 not looked up |
| Without IRR route object | 143 |
| Downstream networks | 62 |
| Prefix | RPKI |
|---|---|
| 123.58.232.0/22 | RPKI invalid |
| 123.58.232.0/24 | RPKI invalid |
| 123.58.233.0/24 | RPKI invalid |
| 123.58.234.0/24 | RPKI invalid |
| 123.58.235.0/24 | RPKI invalid |
| 123.58.236.0/24 | RPKI invalid |
| 123.58.237.0/24 | RPKI invalid |
| 123.58.238.0/23 | RPKI invalid |
| 123.58.238.0/24 | RPKI invalid |
| 123.58.239.0/24 | RPKI invalid |
| 222.249.231.0/24 | RPKI invalid |
| 43.240.202.0/24 | RPKI invalid |
| 49.221.26.0/23 | No ROA |
| 49.221.64.0/19 | No ROA |
| 49.221.128.0/19 | No ROA |
| 60.247.0.0/17 | No ROA |
| 60.247.0.0/19 | No ROA |
| 60.247.28.0/24 | No ROA |
| 60.247.32.0/19 | No ROA |
| 60.247.45.0/24 | No ROA |
| 60.247.64.0/19 | No ROA |
Upstreams and peers seen to the left 2
Announced prefixes 887
Showing the first 100.
Source: RIPEstat (RIPE NCC RIS, Routinator, IRR); AS names: Team Cymru
Open in ASN & BGP prefix lookupRegistration Found at rdap.apnic.net.
- Pass: Found at rdap.apnic.net.
| Name | CNIX-AP |
|---|---|
| Handle | AS4847 |
| Range | AS4847 |
| Country | CN |
| Status | active |
| Registered | 2008-09-04T06:40:27Z |
| Last changed | 2021-06-15T08:06:11Z |
| Abuse contact | anti-spam@chinatelecom.cn |
| Registry (RIR) | APNIC |
|---|---|
| Country | China (CN) |
| Delegated on | 1996-09-10 |
| Status | Allocated |
| Delegated range | AS4847 |
Source: RIR delegation data, updated daily. The country is where the range was registered, not necessarily where it is used.
| Role | Name | |
|---|---|---|
| abuse | IRT-CHINANET-CN | anti-spam@chinatelecom.cn |
| administrative | Liang Zhiping | lzp@public.bta.net.cn |
| technical | Wanshu Zhou | zhouws@public.bta.net.cn |
Source: https://rdap.apnic.net/autnum/4847. Registration data from rdap.apnic.net, shown under its terms of use (terms): not for marketing or bulk collection.
Open in WHOIS / RDAP lookupPeeringDB No IRR as-set is listed.
- Pass: AS4847 is in PeeringDB as CNIX-AP.
- Info: No internet exchange ports are listed.
- Warning: No IRR as-set is listed.
- Warning: No public NOC, policy or technical contact.
| Network | CNIX-AP |
|---|---|
| AS number | AS4847 |
| Type | , Not Disclosed |
| Traffic | Not Disclosed |
| Ratio required | No |
| Last updated | 2025-02-17 |
Source: PeeringDB. Results are cached for an hour.
Open in PeeringDB lookup