APNIC Network Analyst and Technical Trainer Awal Haoloder gives an update on RPKI deployment in the region and globally at the inaugural KRNOG, held in Seoul, South Korea on 13 April 2023.
2. 2 v1.0
2
RPKI ROA Adoption – Number of ROAs
https://rpki.cloudflare.com/?view=statistics
APAC
Global
3. 3 v1.0
3
RPKI ROA Adoption Trend
World East Asia
https://observatory.manrs.org/
100.0% 100.0% 100.0%
APAC
4. 4 v1.0
4
RPKI Valid Routes by APAC Subregions
https://stats.labs.apnic.net/roa
0.00
10.00
20.00
30.00
40.00
50.00
60.00
70.00
80.00
90.00
100.00
1-Apr-22 9-Apr-23 Difference
% of Valid Routes
East Asia South Asia South-East Asia Oceania
5. 5 v1.0
5
RPKI Not-Found Routes by APAC Subregions
https://stats.labs.apnic.net/roa
-20.00
-10.00
0.00
10.00
20.00
30.00
40.00
50.00
60.00
70.00
80.00
90.00
100.00
1-Apr-22 9-Apr-23 Difference
% of Not-found Routes
East Asia South Asia South-East Asia Oceania
6. 6 v1.0
6
RPKI Invalid Routes by APAC Subregions
https://stats.labs.apnic.net/roa
-0.30
-0.20
-0.10
0.00
0.10
0.20
0.30
0.40
0.50
0.60
1-Apr-22 9-Apr-23 Difference
% of Invalid Routes
East Asia South Asia South-East Asia Oceania
9. 9 v1.0
9
RPKI: East Asia Leaderboard
https://stats.labs.apnic.net/roa
0
10
20
30
40
50
60
70
80
90
100
Mongolia Taiwan Japan Hong Kong South Korea Macao China North Korea
% of Valid Routes
12. 12 v1.0
12
Origin Validation by APAC Subregions
-10.00
0.00
10.00
20.00
30.00
40.00
50.00
60.00
1-Apr-22 8-Apr-23 Difference
% of ROV Filtering
East Asia South Asia South-East Asia Oceania
https://stats.labs.apnic.net/rpki
13. 13 v1.0
13
Origin Validation by Subregions
https://stats.labs.apnic.net/rpki
0
10
20
30
40
50
60
% of ROV Filtering
15. 15 v1.0
15
Origin Validation: East Asia Leaderboard
https://stats.labs.apnic.net/rpki
0
10
20
30
40
50
60
70
80
90
Taiwan Hong Kong China Japan Mongolia South Korea North Korea
% of ROV Filtering
16. 16 v1.0
16
RPKI Update: AS Path Validation
• RIPE NCC starts ASPA pilot
❑ Follow SIDROPS ML for updates
▪ https://www.ietf.org/mailman/listinfo/sidrops
❑ aspa-objects on test:
▪ AS 970 - https://console.rpki-client.org/rpki-
rps.arin.net/repository/8a848adf8143bf6201823bd454752
be6/0/AS970.asa.html
▪ AS 21957 - https://console.rpki-client.org/rpki-
rps.arin.net/repository/8a848adf8143bf6201823bd454752
be6/0/AS21957.asa.html
▪ AS 15562 - https://console.rpki-
client.org/chloe.sobornost.net/rpki/RIPE-
nljobsnijders/VCIb3NxttGlL0VzKekHcAGpU9Ls.asa.html
17. 17 v1.0
17
RPKI at APNIC
❑ New MyAPNIC portal
▪ Helpful information added while ROAs to be created
18. 18 v1.0
18
RPKI at APNIC: Historic Resources
❑ APNIC51 (22/02/2021)
▪ RPKI available for historic resources
❑ Further questions?
▪ Contact the helpdesk
▪ https://help.apnic.net/s/contactsupport
▪ helpdesk@apnic.net
https://blog.apnic.net/2021/03/26/rpki-services-now-available-to-apnic-historical-resource-holders/