Hi Everyone,

As some of you have already seen the discussion
<https://twitter.com/rapappu/status/1397522066002247686?s=21> [1] on
twitter, started by Fakrul.

Just sharing the problem here. As part of some of the additional
request/reference in prop-125 (Validation of “abuse-mailbox” and other IRT
emails) "*APNIC will publish the IRT also as abuse-c, in order to
facilitate the search in whois, for the same information, regardless if
looking for abuse-c or IRT. This is done in order to assimilate the IRT to
the majority of the RIRs where it is abuse-c.*"

APNIC Secretariat implemented this by adding "abuse-c" attribute in the
inetnum (example below) and inet6num.

inetnum:        103.162.142.0 - 103.162.143.255
netname:        ISAL-SG
descr:          Internet Society Asia Limited
descr:          3 Temasek Avenue Level 21 Centennial Tower
country:        SG
org:            ORG-ISAL1-AP
admin-c:        ISAL1-AP
tech-c:         ISAL1-AP

*abuse-c:        AI706-AP*

The abuse-c attribute requires NIC-handle but which NIC-handle? There can
be many NIC-handle within the organisation but one organisation can only
have one IRT object. So, APNIC generated a new "role object" using the data
from the IRT-object.

Now, the problem is that role object has some mandatory field as per APNIC
whois policy defined here
<https://www.apnic.net/manage-ip/using-whois/guide/role/> [2], which either
doesn't exist (country) or are optional (phone) in IRT object i.e.

role:          [mandatory]  [single]     [lookup key]
address:        [mandatory]  [multiple]   [ ]
country:        [mandatory]  [single]     [ ]
phone:          [mandatory]  [multiple]   [ ]

irt:            [mandatory]  [single]     [primary/lookup key]
address:        [mandatory]  [multiple]   [ ]
phone:          [optional]   [multiple]   [ ]
fax-no:         [optional]   [multiple]   [ ]

When APNIC auto generated the data for this new abuse-c NIC-handle, they
filled it with bogus data.

role:           ABUSE ISALSG
address:        3 Temasek Avenue Level 21 Centennial Tower, Singapore
Singapore 039190


*country:        ZZphone:          +000000000*

The APNIC Secretariat is seeking suggestions to fix this problem as to how
to fill up the missing information.

IMO, a simple way would be to make Country (ISO-3166) and Phone number
mandatory in the IRT object (currently they are optional). This can be done
during the next IRT validation cycle.
Btw, Country Code in the role object is not a mandatory attribute (it
doesn't exist) as per RFC2622
<https://datatracker.ietf.org/doc/html/rfc2622#section-3.3> [3] but it is
as per APNIC whois policy.

[1] - https://twitter.com/rapappu/status/1397522066002247686?s=21
[2] - https://www.apnic.net/manage-ip/using-whois/guide/role/
[3] - https://datatracker.ietf.org/doc/html/rfc2622#section-3.3

Regards,

Aftab A. Siddiqui
*              sig-policy:  APNIC SIG on resource management policy           *
_______________________________________________
sig-policy mailing list
sig-policy@lists.apnic.net
https://mailman.apnic.net/mailman/listinfo/sig-policy

Reply via email to