Orbit

Hi Everyone,

As some of you have already seen the discussion [1] on twitter, started by Fakrul.

Just sharing the problem here. As part of some of the additional request/reference in prop-125 (Validation of “abuse-mailbox” and other IRT emails) "APNIC will publish the IRT also as abuse-c, in order to facilitate the search in whois, for the same information, regardless if looking for abuse-c or IRT. This is done in order to assimilate the IRT to the majority of the RIRs where it is abuse-c."

APNIC Secretariat implemented this by adding "abuse-c" attribute in the inetnum (example below) and inet6num. 

inetnum:        103.162.142.0 - 103.162.143.255
netname:        ISAL-SG
descr:          Internet Society Asia Limited
descr:          3 Temasek Avenue Level 21 Centennial Tower
country:        SG
org:            ORG-ISAL1-AP
admin-c:        ISAL1-AP
tech-c:         ISAL1-AP
abuse-c:        AI706-AP

The abuse-c attribute requires NIC-handle but which NIC-handle? There can be many NIC-handle within the organisation but one organisation can only have one IRT object. So, APNIC generated a new "role object" using the data from the IRT-object. 

Now, the problem is that role object has some mandatory field as per APNIC whois policy defined here [2], which either doesn't exist (country) or are optional (phone) in IRT object i.e.

role:          [mandatory]  [single]     [lookup key]
address:        [mandatory]  [multiple]   [ ]
country:        [mandatory]  [single]     [ ]
phone:          [mandatory]  [multiple]   [ ]
irt:            [mandatory]  [single]     [primary/lookup key]
address:        [mandatory]  [multiple]   [ ]
phone:          [optional]   [multiple]   [ ]
fax-no:         [optional]   [multiple]   [ ]
When APNIC auto generated the data for this new abuse-c NIC-handle, they filled it with bogus data.

role:           ABUSE ISALSG
address:        3 Temasek Avenue Level 21 Centennial Tower, Singapore Singapore 039190
country:        ZZ
phone:          +000000000

The APNIC Secretariat is seeking suggestions to fix this problem as to how to fill up the missing information. 

IMO, a simple way would be to make Country (ISO-3166) and Phone number mandatory in the IRT object (currently they are optional).  This can be done during the next IRT validation cycle.
Btw, Country Code in the role object is not a mandatory attribute (it doesn't exist) as per RFC2622 [3] but it is as per APNIC whois policy. 

[1] - https://twitter.com/rapappu/status/1397522066002247686?s=21[2] - https://www.apnic.net/manage-ip/using-whois/guide/role/
[3] - https://datatracker.ietf.org/doc/html/rfc2622#section-3.3

Regards,

Aftab A. Siddiqui

Orbit

[sig-policy] Abuse Role Object

Activity Summary