APNIC Updates: RPKI, what we’ve learned and what we’ve been doing by Zen Chuan
•
1 like•69 views
This document summarizes initiatives by APNIC to promote adoption of Resource Public Key Infrastructure (RPKI) and Route Origin Authorization (ROA) in the Asia-Pacific region. It finds that some economies in Southeast Asia have over 65% ROA adoption rates, with the Philippines at 96.36%. While Malaysia has made progress, full 100% adoption has not been achieved. The document outlines APNIC's efforts like training, campaigns and interface improvements to help members create and maintain valid ROAs. It also discusses ongoing work like alerts, pre-validation and API improvements to reduce invalid routes and ROA downtimes.
Recommended
More Related Content
Similar to APNIC Updates: RPKI, what we’ve learned and what we’ve been doing by Zen Chuan
Similar to APNIC Updates: RPKI, what we’ve learned and what we’ve been doing by Zen Chuan (20)
More from MyNOG
More from MyNOG (20)
Recently uploaded
Recently uploaded (20)
APNIC Updates: RPKI, what we’ve learned and what we’ve been doing by Zen Chuan
- 1. 1 RPKI, what we’ve learned and what we’ve been doing MyNOG 9 Zen Chuan Ng Senior Internet Resource Analyst
- 2. 2 2 Resource Public Key Infrastructure What is RPKI? A robust security framework for verifying the association between resource holders and their Internet number resources. 2
- 3. 3 3 Route Origin Authorization What is contained in a ROA? – The AS number you have authorized – The prefix that is being originated from it – The most specific prefix (maximum length) that the AS may announce For example: “ISP 4 permits AS65551 to originate a route for the prefix 198.51.100.0/24" 3
- 4. 4 4 RPKI initiatives 10 face-to-face and eLearning RPKI training courses delivered RPKI presentations to NOGs and conferences Development of the ‘Ready to ROA’ campaign – hands on sessions to help Members create ROAs New shirts, stickers, web content to promote campaign Ready to ROA launched in 2015 Initial challenge was to get APNIC Members to create ROAs
- 5. 5 ROA adoption in SEA 5 Economy ROA adoption rate (%) Philippines 96.36% Myanmar 89.09% Singapore 83.50% Lao PDR 76.90% Cambodia 68.14% Thailand 66.80% Vietnam 62.15%
- 6. 6 How is Malaysia doing? 6 https://lirportal.ripe.net/certification/content/static/statistics/world-roas.html
- 7. 7 Can Malaysia be the first to reach 100%?
- 8. 8 BUT….. more work needs to be done! Why???
- 9. 9 IPv4 ROA coverage in Malaysia https://stats.labs.apnic.net/roas
- 10. 10 IPv6 ROA coverage in Malaysia https://stats.labs.apnic.net/roas
- 13. 13 13 RPKI invalids • On 27 April 2021, we saw 3,526 RPKI invalid routes for IPv4 addresses delegated to APNIC Members
- 14. 14 What improvements have we made?
- 15. 15 15 Cleaning up RPKI invalids • Email campaign in June 2021 to reach out to Members with RPKI invalid announcements
- 17. 17 17 Improved ROA creation interface
- 18. 18 18 Routing status alerts in DASH https://dash.apnic.net/
- 19. 19 19 Routing status alerts in DASH
- 20. 20 20 Routing status alerts in DASH
- 21. 21 Reducing ROA downtime during transfers • Facilitate resource transfers involving live networks • Existing ROAs published for 2 weeks after transfers • Avoid any down time
- 23. 23 23 Upcoming RPKI improvements • Routing status alerts notification • ROA pre-validation • Registry API – https://blog.apnic.net/2022/03/22/apnic-registry-api/ • New ROA guides and Help Centre articles
- 24. 24 Questions?