Can you provide your vnet/subnet ranges, your service CIDR and the CNI you are using ?
My expectation is that you can't access pod ranges because the service tag VirtualNetwork doesn't contains your pod CIDR.