Keyboard Shortcuts
Thread View
j
: Next unread messagek
: Previous unread messagej a
: Jump to all threadsj l
: Jump to MailingList overview

origin: AS65010
descr: Hutchison Max Telecom Limited
Vodafone India Ltd.
414/2, Sahas Building
Off Veer Savarkar Marg,
Prabhadevi,
mnt-by: MAINT-IN-HUTCHVAS
last-modified: 2020-11-03T09:02:11Z
source: APNIC
route: 112.79.112.0/24
origin: AS65010
descr: Hutchison Max Telecom Limited
Vodafone India Ltd.
414/2, Sahas Building
Off Veer Savarkar Marg,
Prabhadevi,
mnt-by: MAINT-IN-HUTCHVAS
last-modified: 2020-11-03T09:02:17Z
source: APNIC
origin: AS65505
descr: Mango Teleservices Limited
82 Mohakhali C/A ( 12th Floor )
mnt-by: MAINT-MANGOTELESERVICE-BD
last-modified: 2018-11-05T09:08:42Z
source: APNIC
origin: AS64520
descr: Reliance Jio Infocomm Limited
Reliance Coporate IT park LTD
Ghansoli NaviMumbai
mnt-by: MAINT-IN-RELIANCEJIO
last-modified: 2018-01-16T03:50:31Z
source: APNIC
Aftab A. Siddiqui

In message CAK5YLgfKOkNBDANwHWzAcDLdfkSEOcETj0nwHHUVABQLFxUkaA@mail.gmail.com, Aftab Siddiqui aftab.siddiqui@gmail.com wrote:
I was under the impression that it is not possible to create route objects with private ASN, I tried it this morning to test as well and yes it doesn't work. But I don't know how these showed up in the database.
I am pleased to see this topic raised on the apnic-talk mailing list.
Recently, I have been in communication with all five of the Regional Internet registries and I have been doing my level best to persuade them all that they should remove from their respective route registries and and all route objects that make reference -either- (1) to unassigned "bogon" IP address blocks -or- (2) to unassigned "bogon" AS numbers.
So far I have been at least particially successful in persuading the various RIRs that such "bogon" route objects are not ones they should be carrying and publishing in their respective IRR.
In the case of AFRINIC, at least, they have now eliminated all routes that fall into either category from their data base.
Other RIRs have, in general, been cooperative in eliminating bogon route objects that fall into category (1) from their respective data bases, but ARIN, RIPE, and APNIC have expressed varying degrees of relunctance when it comes to eliminating the bogon routes that fall into category (2)... for reasons that remain quite entirely perplexing to me personally. (My own view is that junk is junk, and that -all- of the bogon route objects should be removed from all RIR route registries at the earliest possible moment.)
I have just now re-run the scripts that I've developed to try to find the remaining bogon route objects within the APNIC data base. These are summarized below.
I have been in communication with APNIC staff members about these specific bogon routes fairly continuously for over three weeks now, but the only thing I am being told is that these routes are being "discussed internally". Needless to say, that is not a terribly satisfying answer, and I continue to hope that these internal discusssion may actually reach an endpoint sometime before the (signed) system time values on my old 32-bit UNIX system rolls over to negative numbers.
IPv4 routes using bogon ASNs -------------------------------
49.40.4.0/24 64520 2018-01-16 103.70.232.0/24 7363 2018-05-31 114.130.75.0/24 65505 2018-11-05 103.127.238.0/23 209956 2019-03-07 114.130.108.0/24 65530 2020-04-05 203.9.118.0/24 18549 2020-05-25 202.82.123.0/24 26799 2020-06-12 112.79.118.0/24 65010 2020-11-03 112.79.112.0/24 65010 2020-11-03 110.164.86.0/24 135074 2021-06-01
IPv6 routes using bogon ASNs -------------------------------
2405:0700:FFFF:FFFF:FFFF:FFFF::/112 45756 2015-05-05
In fairness, I did report to APNIC staff several IPv6 routes which made reference to bogon ASNs, and with the exception of the one shown above, those have indeed already been removed from the APNIC IRR.
My hope is that all of the other bogon routes shown above will likewise follow those into oblivion in the near future.
Regards, rfg

Hi all,
On Thu, Jul 22, 2021 at 12:33:47PM +1000, Aftab Siddiqui wrote:
I was under the impression that it is not possible to create route objects with private ASN, I tried it this morning to test as well and yes it doesn't work. But I don't know how these showed up in the database.
It is not possible to create route objects with private ASNs in Whois directly, by e.g. using the Whois updates page in MyAPNIC. This is because Whois requires that such an update be authorised for both the IP address range and the ASN in the update. However, the route management interface in MyAPNIC permits users to create route objects with arbitrary ASNs (including private ASNs). This is because route management abstracts over both Whois route objects and RPKI ROAs, RPKI does not impose any authorisation requirement on the use of an ASN in a ROA (only IP authorisation is required), and using the RPKI standard across the board seemed like the sensible thing to do here when this was developed.
We intend to update Whois such that arbitrary ASNs may be used in direct updates, in order to align with the route management behaviour in MyAPNIC. However, it's not a request that comes up frequently from members, so it's not a high priority (though if it is causing problems for anybody, please let us know).
On Wed, Jul 21, 2021 at 08:52:05PM -0700, Ronald F. Guilmette wrote:
I have been in communication with APNIC staff members about these specific bogon routes fairly continuously for over three weeks now, but the only thing I am being told is that these routes are being "discussed internally".
Part of the issue here is that our system supports this purposefully at the moment, due to wanting the route management system to align where possible across both RPKI and Whois. We aren't yet sure how to deal with this problem, though. One option is to follow what RIPE do at the moment, per the discussion happening in the db-wg mailing list, and prevent route objects from being created for private/reserved ASNs. We could additionally warn the user, but allow override, for the other potentially problematic cases (route objects with undelegated ASNs, RPKI ROAs with private/reserved ASNs, RPKI ROAs with undelegated ASNs). Feedback on this from list participants would be welcome.
Regarding the specific route objects you have raised with APNIC with bogon ASNs, we are working through this list with the account holders, to avoid any unintended consequences from removal (per e.g. https://www.mail-archive.com/db-wg@ripe.net/msg02844.html). Some of those objects have since been removed, while others are still pending. We will let you know once the status of each has been resolved.
-Tom
Activity Summary
- 866 days inactive
- 866 days old
- apnic-services@apnic.net
- 3 participants
- 2 comments