asn.dev

Routing security

AS24371 CNGI-CHC-IX-AS-AP CERNET2 IX at Jilin University

Unclassified APNIC

RPKI valid 97% 65 of 67 announcements
RPKI invalid 0 none
No ROA 2 not covered by any ROA
IRR registered 0% 67 missing · 0 other origin
ROAs 65 authorising this AS

Announcements

What this network originates

67 observed

Every prefix observed with AS24371 as its origin, checked against RPKI and the IRR. Problems sort first.

PrefixRPKIIRRVantage points
49.140.0.0/16No ROANo IRR6
2403:8c00::/32No ROANo IRR31
2001:250:740a::/48RPKI validNo IRR1
2001:250:740b::/48RPKI validNo IRR1
2001:250:740c::/48RPKI validNo IRR1
2001:250:740d::/48RPKI validNo IRR1
2001:250:740e::/48RPKI validNo IRR1
2001:250:741a::/48RPKI validNo IRR1
2001:250:741b::/48RPKI validNo IRR1
2001:250:741c::/48RPKI validNo IRR1
2001:250:741d::/48RPKI validNo IRR1
2001:250:741e::/48RPKI validNo IRR1
2001:250:741f::/48RPKI validNo IRR1
2001:250:742a::/48RPKI validNo IRR1
2001:250:742b::/48RPKI validNo IRR1
2001:250:742c::/48RPKI validNo IRR1
2001:250:742d::/48RPKI validNo IRR1
2001:250:742e::/48RPKI validNo IRR1
2001:250:742f::/48RPKI validNo IRR1
2001:250:7401::/48RPKI validNo IRR1
2001:250:7402::/48RPKI validNo IRR1
2001:250:7403::/48RPKI validNo IRR1
2001:250:7404::/48RPKI validNo IRR1
2001:250:7405::/48RPKI validNo IRR1
2001:250:7406::/48RPKI validNo IRR1
2001:250:7407::/48RPKI validNo IRR1
2001:250:7408::/48RPKI validNo IRR1
2001:250:7409::/48RPKI validNo IRR1
2001:250:7410::/48RPKI validNo IRR1
2001:250:7411::/48RPKI validNo IRR1
2001:250:7412::/48RPKI validNo IRR1
2001:250:7413::/48RPKI validNo IRR1
2001:250:7414::/48RPKI validNo IRR1
2001:250:7415::/48RPKI validNo IRR1
2001:250:7416::/48RPKI validNo IRR1
2001:250:7417::/48RPKI validNo IRR1
2001:250:7418::/48RPKI validNo IRR1
2001:250:7419::/48RPKI validNo IRR1
2001:250:7420::/48RPKI validNo IRR1
2001:250:7421::/48RPKI validNo IRR1
2001:250:7422::/48RPKI validNo IRR1
2001:250:7423::/48RPKI validNo IRR1
2001:250:7424::/48RPKI validNo IRR1
2001:250:7425::/48RPKI validNo IRR1
2001:250:7426::/48RPKI validNo IRR1
2001:250:7427::/48RPKI validNo IRR1
2001:250:7428::/48RPKI validNo IRR1
2001:250:7429::/48RPKI validNo IRR1
2001:250:7430::/48RPKI validNo IRR1
2001:da8:aa::/48RPKI validNo IRR1
2001:da8:b000::/48RPKI validNo IRR1
2001:da8:b00a::/48RPKI validNo IRR1
2001:da8:b00b::/48RPKI validNo IRR1
2001:da8:b00c::/48RPKI validNo IRR1
2001:da8:b00d::/48RPKI validNo IRR1
2001:da8:b00e::/48RPKI validNo IRR1
2001:da8:b00f::/48RPKI validNo IRR1
2001:da8:b001::/48RPKI validNo IRR1
2001:da8:b002::/48RPKI validNo IRR1
2001:da8:b003::/48RPKI validNo IRR1
2001:da8:b004::/48RPKI validNo IRR1
2001:da8:b005::/48RPKI validNo IRR1
2001:da8:b006::/48RPKI validNo IRR1
2001:da8:b007::/48RPKI validNo IRR1
2001:da8:b008::/48RPKI validNo IRR1
2001:da8:b011::/48RPKI validNo IRR1
2001:da8:b012::/48RPKI validNo IRR1

RPKI · ROAs

Route origin authorisations

65 ROAs

Signed statements by address holders that AS24371 may originate these prefixes, up to the maximum length shown.

PrefixMax lengthTrust anchor
2001:250:7401::/48/48APNIC
2001:250:7402::/48/48APNIC
2001:250:7403::/48/48APNIC
2001:250:7404::/48/48APNIC
2001:250:7405::/48/48APNIC
2001:250:7406::/48/48APNIC
2001:250:7407::/48/48APNIC
2001:250:7408::/48/48APNIC
2001:250:7409::/48/48APNIC
2001:250:740a::/48/48APNIC
2001:250:740b::/48/48APNIC
2001:250:740c::/48/48APNIC
2001:250:740d::/48/48APNIC
2001:250:740e::/48/48APNIC
2001:250:7410::/48/48APNIC
2001:250:7411::/48/48APNIC
2001:250:7412::/48/48APNIC
2001:250:7413::/48/48APNIC
2001:250:7414::/48/48APNIC
2001:250:7415::/48/48APNIC
2001:250:7416::/48/48APNIC
2001:250:7417::/48/48APNIC
2001:250:7418::/48/48APNIC
2001:250:7419::/48/48APNIC
2001:250:741a::/48/48APNIC
2001:250:741b::/48/48APNIC
2001:250:741c::/48/48APNIC
2001:250:741d::/48/48APNIC
2001:250:741e::/48/48APNIC
2001:250:741f::/48/48APNIC
2001:250:7420::/48/48APNIC
2001:250:7421::/48/48APNIC
2001:250:7422::/48/48APNIC
2001:250:7423::/48/48APNIC
2001:250:7424::/48/48APNIC
2001:250:7425::/48/48APNIC
2001:250:7426::/48/48APNIC
2001:250:7427::/48/48APNIC
2001:250:7428::/48/48APNIC
2001:250:7429::/48/48APNIC
2001:250:742a::/48/48APNIC
2001:250:742b::/48/48APNIC
2001:250:742c::/48/48APNIC
2001:250:742d::/48/48APNIC
2001:250:742e::/48/48APNIC
2001:250:742f::/48/48APNIC
2001:250:7430::/48/48APNIC
2001:da8:aa::/48/48APNIC
2001:da8:b000::/48/48APNIC
2001:da8:b001::/48/48APNIC
2001:da8:b002::/48/48APNIC
2001:da8:b003::/48/48APNIC
2001:da8:b004::/48/48APNIC
2001:da8:b005::/48/48APNIC
2001:da8:b006::/48/48APNIC
2001:da8:b007::/48/48APNIC
2001:da8:b008::/48/48APNIC
2001:da8:b00a::/48/48APNIC
2001:da8:b00b::/48/48APNIC
2001:da8:b00c::/48/48APNIC
2001:da8:b00d::/48/48APNIC
2001:da8:b00e::/48/48APNIC
2001:da8:b00f::/48/48APNIC
2001:da8:b011::/48/48APNIC
2001:da8:b012::/48/48APNIC

ROA-based and RPKI-valid-only prefix lists for routers are on asn.ipinfo.app.

RPKI · ASPA

Declared transit providers

No ASPA record This network has not published an ASPA object. ASPA lets a network sign the list of its transit providers, so routers can reject paths that route through anyone else (route leaks). Only a few thousand networks publish one so far, so its absence is normal.

IRR

Registered route objects

0 objects · 0 not announced

Route objects naming AS24371 as origin, across RADb, the RIR registries, ALTDB and NTTCOM. Objects that are registered but not announced come first: a stale object lets anyone who can spoof this origin through an IRR-built filter.

No route objects name this AS as origin.

IRR

AS-sets

The as-set is what upstreams expand to build this network's customer filter. Sets that list AS24371 directly show who expects to carry it.

AS-setWhereRelationship
AS-HURRICANEV6RADBLists AS24371 as a direct member
AS20965:AS-FROM-TEIN-TO-GEANTRIPELists AS24371 as a direct member
AS23911:AS-CUSTOMERS-V6APNICLists AS24371 as a direct member
AS293:AS-FROM-SINGAREN-TO-ESNETARINLists AS24371 as a direct member
AS4538:AS-CUSTOMERSAPNICLists AS24371 as a direct member
AS4538:AS-CUSTOMERS-V6APNICLists AS24371 as a direct member

RPKI from rpki-client, validated 2026-10-18 12:08 UTC. IRR from ARIN, RADB, RIPE, ALTDB, APNIC, LACNIC, NTTCOM, AFRINIC, collected 2026-10-18. Cross-check on bgp.he.net.