You need to monitor where that device is phoning to and block those requests using an adblocking solution (I don't want to name any specific ones, since it's a contentious topic) and, possibly, a firewall.
Doesn’t the AP have to communicate with the root router to serve the AP’s client devices? So blocking all traffic from the AP would effectively disable it?