So based on my friend - Abdul Awal’s tweet, I started looking at the latest RPKI ROA data for India. His Tweet came when I was in the middle of moving my blog from WordPress running over LXC containers to now WordPress over docker with Bitnami image. Bit of optimisation is still pending. My routing security project with @nsrcworld & @mozilla started in Oct-19 to improve #RPKI deployment in South Asia+Myanmar.
A friend of mine buzzed me yesterday about his missing route objects. Later multiple other ISPs told the same story which triggered me to put this as a question on INNOG Mailing list. Many folks replied of missing route objects there and it seems to be limited to IRINN members only. I also asked the same question on APNIC mailing list and it was again confirmed about the issue. Before I proceed further, here’s what it is all about.
In Melbourne for the week for APRICOT 2020. Someone jokingly said it’s should be “APRICOT and RPKI 2020”. :-) It seems like both JPNIC and TWNIC are doing a good job at promoting their member operators in Japan & Taiwan for signing ROA. I thought to check for the status in India to find how India is doing. RPKI ROA status for India Total prefixes: 40,834 (IPv4 + IPv6) Prefixes with valid ROA: 4693 Prefixes with invalid ROA: 354 Prefixes without ROA: 35,787 IRR route objects Prefixes with at least one valid IRR route object: 38,075
IRINN (Indian Registry for Internet Names and Numbers) is a NIR (National Internet Registry) for India operating under the APNIC RIR (Regional Internet Registry). IRINN is run and managed by NIXI. It’s a decent NIR and was set up in 2012. Indian organisations have the option to either maintain relation with APNIC or with IRINN. A large number of small networks prefer IRINN because it’s annual charges are 25000 INR / $351 USD against APNIC’s membership fee which is over 2x of that.
Last week I saw an interesting post at APNIC mailing list about IRINN (recently formed NIR in Indian region). Poster Jimmy was concerned about IRINN’s netname inetnum: 0.0.0.0 - 255.255.255.255 netname: IRINN-BROADCAST-ADDRESSES descr: Broadcast addresses descr: These addresses cannot (should not) be routed on the Internet. country: IN admin-c: IH1-IN tech-c: IH1-IN status: ALLOCATED PORTABLE remarks: send spam and abuse report to email@example.com mnt-by: IRINN-HM mnt-irt: IRT-IRINNHM-IN mnt-lower: IRINN-HM changed: hostmaster2@irinn.