Network · data from 2026-11-12
AS58866 CFCA-NET - China Financial Certification Authority
Registry name: CFCA-NET - China Financial Certification Authority, CN · not in PeeringDB
Announced routes
Every prefix a peer of the route collectors sees with origin AS58866, things to look at first. Visibility = full-table peers that see it, of 673 (IPv4) and 636 (IPv6) on 75 collectors. Also as routes.csv.
| 2404:e280:1::/48 | No ROA | None | 549 86% |
| 2404:e280::/48 | No ROA | None | 548 86% |
| 210.74.40.0/24 | No ROA | Other IRR onlyRADB | 672 100% |
| 210.74.41.0/24 | No ROA | Other IRR onlyRADB | 672 100% |
| 210.74.42.0/24 | No ROA | Other IRR onlyRADB | 672 100% |
| 210.74.43.0/24 | No ROA | Other IRR onlyRADB | 672 100% |
| 210.74.44.0/24 | No ROA | Other IRR onlyRADB | 672 100% |
| 210.74.45.0/24 | No ROA | Other IRR onlyRADB | 672 100% |
| 210.74.47.0/24 | No ROA | Other IRR onlyRADB | 672 100% |
AS-SET
AS58866 isn't in PeeringDB, where networks name their AS-SET.
Fix list
The changes that would bring RPKI, the IRR and what's announced into line. Some are deliberate (a route object kept for a backup route, say); the network decides. All 20 are in fix.csv.
- ROA: none9
- Route object: none2
- Route object: RIR7
- Route object: not announced2
| Change | Prefix or set | Detail |
|---|---|---|
| ROA: none | 2404:e280:1::/48 | No ROA covers it. Add a ROA for AS58866, maxLength 48. |
| Route object: none | 2404:e280:1::/48 | No route object for it. Add a route object with origin AS58866 in the RIR database for the space. |
| ROA: none | 2404:e280::/48 | No ROA covers it. Add a ROA for AS58866, maxLength 48. |
| Route object: none | 2404:e280::/48 | No route object for it. Add a route object with origin AS58866 in the RIR database for the space. |
| ROA: none | 210.74.40.0/24 | No ROA covers it. Add a ROA for AS58866, maxLength 24. |
| Route object: RIR | 210.74.40.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 210.74.41.0/24 | No ROA covers it. Add a ROA for AS58866, maxLength 24. |
| Route object: RIR | 210.74.41.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 210.74.42.0/24 | No ROA covers it. Add a ROA for AS58866, maxLength 24. |
| Route object: RIR | 210.74.42.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 210.74.43.0/24 | No ROA covers it. Add a ROA for AS58866, maxLength 24. |
| Route object: RIR | 210.74.43.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 210.74.44.0/24 | No ROA covers it. Add a ROA for AS58866, maxLength 24. |
| Route object: RIR | 210.74.44.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 210.74.45.0/24 | No ROA covers it. Add a ROA for AS58866, maxLength 24. |
| Route object: RIR | 210.74.45.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
| ROA: none | 210.74.47.0/24 | No ROA covers it. Add a ROA for AS58866, maxLength 24. |
| Route object: RIR | 210.74.47.0/24 | Route object only in RADB. Add it in the RIR database for the space. |
Route objects not announced
Route objects with origin AS58866 whose prefix no peer sees AS58866 announce. Many are kept on purpose (backup routes, space announced only in some places).
| 210.74.40.0/21 | APNIC | No ROA |
| 210.74.46.0/24 | RADB | No ROA |
Routes: the 08:00 UTC snapshots of 2026-11-12 from 75 RIPE RIS and RouteViews collectors. RPKI: our rpki-client run before the snapshot. IRR: the day's dumps of the five RIR databases and RADB's mirrors. The LEVEL3 and IDNIC databases publish no dump and aren't read, so route objects only there count as none.