Network · data from 2026-11-12
AS24409 CNNIC-CRITICAL-AP - China Internet Network Infomation Center
Registry name: CNNIC-CRITICAL-AP - China Internet Network Infomation Center, CN · not in PeeringDB
17IPv4 routes
0.0% RPKI valid · 100.0% with a route object
12IPv6 routes
8.3% RPKI valid · 83.3% with a route object
1RPKI invalid
1 origin · 0 maxLength
27No ROA
2 with no route object for this origin
8Low visibility
seen by under 10% of full-table peers
48Route objects not announced
registered with origin AS24409, seen from no peer
Announced routes
Every prefix a peer of the route collectors sees with origin AS24409, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.
| 2a04:3e00::/29 | Invalid: origin | Other origin only | 51 8%low visibility |
| 2001:dc7:1::/48 | No ROA | Other IRR onlyRADB | 449 71% |
| 2001:dc7:fffc::/48 | No ROA | Other IRR onlyRADB | 446 70% |
| 125.208.45.0/24 | No ROA | Other IRR onlyRADB | 171 25% |
| 125.208.47.0/24 | No ROA | Other IRR onlyNTTCOM, RADB | 171 25% |
| 125.208.46.0/24 | No ROA | Other IRR onlyNTTCOM, RADB | 144 21% |
| 2001:dc7:fffd::/48 | No ROA | Other IRR onlyRADB | 138 22% |
| 2001:dc7:2::/48 | No ROA | Other IRR onlyRADB | 135 21% |
| 2001:dc7:fffb::/48 | No ROA | Other IRR onlyRADB | 66 10% |
| 2001:dc7:3::/48 | No ROA | Other IRR onlyRADB | 39 6%low visibility |
| 125.208.41.0/24 | No ROA | Other IRR onlyRADB | 34 5%low visibility |
| 125.208.42.0/24 | No ROA | Other IRR onlyRADB | 21 3%low visibility |
| 42.83.200.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 673 100% |
| 42.83.201.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 673 100% |
| 2001:dc7::/48 | No ROA | RIR databaseAPNIC, RADB | 455 72% |
| 203.119.29.0/24 | No ROA | RIR databaseAPNIC, RADB | 453 67% |
| 2001:dc7:fffe::/48 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 448 70% |
| 2001:dc7:1000::/48 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 424 67% |
| 2001:dc7:ffff::/48 | No ROA | RIR databaseAPNIC, RADB | 373 59% |
| 125.208.36.0/24 | No ROA | RIR databaseAPNIC, RADB | 267 40% |
| 203.119.27.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 240 36% |
| 125.208.34.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 188 28% |
| 203.119.28.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 159 24% |
| 1.2.4.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 94 14% |
| 125.208.33.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 65 10%low visibility |
| 125.208.35.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 49 7%low visibility |
| 203.119.26.0/24 | No ROA | RIR databaseAPNIC, NTTCOM | 33 5%low visibility |
| 125.208.43.0/24 | No ROA | RIR databaseAPNIC, NTTCOM, RADB | 3 0%low visibility |
| 2a04:3e00:1002::/48 | Valid | None | 635 100% |
AS-SET
AS24409 isn't in PeeringDB, where networks name their AS-SET.
Fix list
The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 89 are in fix.csv.
- ROA: origin1
- ROA: none27
- Route object: none2
- Route object: RIR11
- Route object: not announced48
| Change | Prefix or set | Detail |
|---|---|---|
| ROA: origin | 2a04:3e00::/29 | ROAs covering it name AS48152, AS56910, not AS24409. If AS24409 should announce it, add a ROA for AS24409. |
| Route object: none | 2a04:3e00::/29 | Route objects for it name AS48152, AS56910. Add a route object with origin AS24409 in the RIR database for the space. |
| ROA: none | 2001:dc7:1::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| Route object: RIR | 2001:dc7:1::/48 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 2001:dc7:fffc::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| Route object: RIR | 2001:dc7:fffc::/48 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 125.208.45.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| Route object: RIR | 125.208.45.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 125.208.47.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| Route object: RIR | 125.208.47.0/24 | Route object only in NTTCOM, RADB. Add it in the RIR database for the space. |
| ROA: none | 125.208.46.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| Route object: RIR | 125.208.46.0/24 | Route object only in NTTCOM, RADB. Add it in the RIR database for the space. |
| ROA: none | 2001:dc7:fffd::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| Route object: RIR | 2001:dc7:fffd::/48 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 2001:dc7:2::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| Route object: RIR | 2001:dc7:2::/48 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 2001:dc7:fffb::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| Route object: RIR | 2001:dc7:fffb::/48 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 2001:dc7:3::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| Route object: RIR | 2001:dc7:3::/48 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 125.208.41.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| Route object: RIR | 125.208.41.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 125.208.42.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| Route object: RIR | 125.208.42.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 42.83.200.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 42.83.201.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 2001:dc7::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| ROA: none | 203.119.29.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 2001:dc7:fffe::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| ROA: none | 2001:dc7:1000::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| ROA: none | 2001:dc7:ffff::/48 | No ROA covers it. Add a ROA for AS24409, maxLength 48. |
| ROA: none | 125.208.36.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 203.119.27.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 125.208.34.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 203.119.28.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 1.2.4.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 125.208.33.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 125.208.35.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 203.119.26.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| ROA: none | 125.208.43.0/24 | No ROA covers it. Add a ROA for AS24409, maxLength 24. |
| Route object: none | 2a04:3e00:1002::/48 | No route object for it. Add a route object with origin AS24409 in the RIR database for the space. |
Route objects not announced
Route objects with origin AS24409 whose prefix no peer sees AS24409 announce. Many are kept on purpose (backup routes, space announced only in some places).
| 42.83.128.0/20 | APNIC, RADB | No ROA |
| 42.83.130.0/24 | RADB | No ROA |
| 42.83.131.0/24 | RADB | No ROA |
| 42.83.132.0/24 | APNIC, RADB | No ROA |
| 42.83.133.0/24 | APNIC, RADB | No ROA |
| 42.83.134.0/24 | RADB | No ROA |
| 42.83.199.0/24 | NTTCOM, RADB | No ROA |
| 125.208.32.0/19 | APNIC, RADB | No ROA |
| 125.208.32.0/24 | APNIC, RADB | No ROA |
| 125.208.37.0/24 | RADB | No ROA |
| 125.208.38.0/24 | RADB | No ROA |
| 125.208.39.0/24 | RADB | No ROA |
| 125.208.40.0/24 | RADB | No ROA |
| 125.208.44.0/24 | APNIC, RADB | No ROA |
| 125.208.49.0/24 | APNIC | No ROA |
| 203.119.24.0/21 | APNIC, RADB | No ROA |
| 203.119.24.0/24 | APNIC | No ROA |
| 203.119.25.0/24 | APNIC, RADB | No ROA |
| 203.119.30.0/24 | APNIC, RADB | No ROA |
| 203.119.31.0/24 | APNIC, RADB | No ROA |
| 203.119.32.0/22 | APNIC, RADB | No ROA |
| 203.119.32.0/24 | APNIC | No ROA |
| 203.119.33.0/24 | APNIC | No ROA |
| 203.119.34.0/24 | APNIC | No ROA |
| 203.119.35.0/24 | APNIC | No ROA |
| 210.2.4.0/24 | APNIC, NTTCOM, RADB | No ROA |
| 2001:dc7::/32 | APNIC, RADB | No ROA |
| 2001:dc7:a::/48 | APNIC, RADB | No ROA |
| 2001:dc7:b::/48 | APNIC, RADB | No ROA |
| 2001:dc7:dd01::/48 | APNIC | No ROA |
| 2001:dc7:dd04::/48 | APNIC | No ROA |
| 2001:dc7:ddff::/48 | APNIC | No ROA |
| 2001:dc7:feff::/48 | APNIC | No ROA |
| 2001:dc7:ffc0::/48 | APNIC | No ROA |
| 2001:dc7:ffc1::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffc2::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffc3::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffc4::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffc5::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffc6::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffd1::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffd2::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffd3::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffd6::/48 | APNIC | No ROA |
| 2001:dc7:ffeb::/48 | APNIC, RADB | No ROA |
| 2001:dc7:ffec::/48 | APNIC, RADB | No ROA |
| 2002:dc7::/48 | NTTCOM | No ROA |
| 2406:2700::/32 | APNIC | No ROA |
Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.