bgpreport

Network · data from 2026-11-12

AS23869 NZRS SRS Systems

Registry name: NZSRS-AP - InternetNZ infrastructure for NZ TLD SRS and DNS servers, NZ · PeeringDB

2IPv4 routes 0.0% RPKI valid · 100.0% with a route object
1IPv6 routes 0.0% RPKI valid · 100.0% with a route object
0RPKI invalid 0 origin · 0 maxLength
3No ROA 0 with no route object for this origin
0Low visibility seen by under 10% of full-table peers
4Route objects not announced registered with origin AS23869, seen from no peer

Announced routes

Every prefix a peer of the route collectors sees with origin AS23869, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.
202.46.180.0/24 No ROA RIR databaseAPNIC, RADB 672 100% 68
202.46.191.0/24 No ROA RIR databaseAPNIC, RADB 672 100% 68
2001:dce:4000::/36 No ROA RIR databaseAPNIC, RADB 636 100% 69

AS-SET

AS23869's PeeringDB record names no AS-SET.

Fix list

The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 7 are in fix.csv.

  • ROA: none3
  • Route object: not announced4
ChangePrefix or setDetailFull-table peers
ROA: none202.46.180.0/24No ROA covers it. Add a ROA for AS23869, maxLength 24.672 of 673
ROA: none202.46.191.0/24No ROA covers it. Add a ROA for AS23869, maxLength 24.672 of 673
ROA: none2001:dce:4000::/36No ROA covers it. Add a ROA for AS23869, maxLength 36.636 of 636

Route objects not announced

Route objects with origin AS23869 whose prefix no peer sees AS23869 announce. Many are kept on purpose (backup routes, space announced only in some places).

202.46.190.0/23RADBNo ROA
202.46.190.0/24APNIC, RADBNo ROA
2001:dce::/32ALTDBNo ROA
2001:dce:2000::/35APNICNo ROA

Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.