validate CIDR
This isn't meant to be precise but supposed to guard against silly
mistakes.

Closes #116.