APNIC · RIR Watchdog
Story
BTW reporting and context linked to this RIR. For the proposal-by-proposal history, the people involved and their changing positions, start with Policy.
Story
Latest stories
292Stories
Story
RPKI MaxLength and the Cost of a Typo
A single prefix-length choice can turn an intended routing authorization into evidence that a legitimate route is unauthorized. The error then travels through certificates, repositories, validators and the policies of networks the resource holder cannot direct. Calling this user…
Story
AS0 ROAs: Conservation Tool or Pre-Emptive Denial?
An AS0 ROA says that a prefix and its more-specifics should not be used for public routing. Applied to genuinely unallocated space, it can turn a registry's conservation duty into a machine-readable warning against misoriginations. Applied to a wrongly classified or newly…
Story
RPKI-to-Router Deployment and the Missing Governance Layer
RPKI can tell a router that a route origin is Valid, Invalid or NotFound, but it does not command the router to carry or reject the route. Between a registry's signed statement and a packet's path sits a succession of validators, caches, router implementations, peering contracts…
Story
The Source Attribute That Became a Trust Label
In RPSL, `source:` was meant to identify the routing registry in which an entity was registered. Operators gradually made it do more. A short name such as ARIN, APNIC, RIPE or RADB now helps determine which declarations enter filters and which are ignored. That practical…
Story
IRR Route Objects After the Network Has Moved
A network can change transit provider, origin AS, corporate owner or regional registry while an old Internet Routing Registry route object remains where it was first lodged. That residue matters whenever an operator still turns registry declarations into prefix filters. Migration…
Story
The Parent Zone and the Power to Refuse a Child
A reverse-DNS operator can serve a technically perfect child zone and still remain invisible if the parent will not publish its delegation. In the hierarchy beneath `in-addr.arpa` and `ip6.arpa`, refusal can occur at more than one boundary, for more than one reason, under more…
Story
Reverse DNS as a Quiet Sanction
An address block can remain routed, its servers can keep answering and its forward names can still resolve, yet a small deletion higher in the reverse-DNS tree can make its mail look untrustworthy and its network harder to operate. That is why reverse delegation should not be…
Story
WHOIS History and the Right to Prove a Chain of Control
A current WHOIS or RDAP answer can identify the organisation recorded against an address today. It cannot, by itself, prove how that state came to be. Transfers, mergers, name changes, legacy allocations and disputed updates require a historical proof layer: one that preserves…
Story
The RDAP Bootstrap File as a Governance Map
The RDAP Bootstrap File as a Governance Map intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The Story intelligence…
Story
Redaction Without an Appeal Button
A contact field can fail in two opposite ways. It can expose a person who should be protected, or it can disappear from the public record when operators still need a reliable route to the organisation responsible. In both cases the damage is made worse when nobody can identify…
Story
RDAP Authentication and the Return of Tiered Public Records
Authentication changes a registration directory before it reveals a single extra field. It converts a record that anyone can inspect into a series of conditional views, each shaped by who is asking, why the person is asking and which institution is prepared to vouch for them.…
Story
RPKI Terms of Service Versus Routing Liability
When a registry-controlled certificate or published authorisation changes a legitimate route from Valid to Invalid, networks that reject Invalid announcements can make the error economically real within minutes. Terms that give an institution decisive certificate powers while…
Story
The RPKI Repository Outage That Policy Reports Miss
An RPKI repository is not available merely because its operator can reach a server. It is available when independent relying parties can fetch a complete, current and cryptographically coherent view before relevant certificates, manifests or revocation lists expire, and when that…
Story
Validator Diversity Cannot Cure a Single Trust Anchor
Three independent validators can parse the same RPKI hierarchy, reject malformed objects in different code and survive different software failures. Yet if all three begin with the same trust-anchor key for a resource, they inherit the same upstream certification decision.…
Story
The ROA That Survived a Transfer Too Long
A number-resource transfer can be complete in the registry and still unfinished in routing authority. The dangerous interval begins when the recognised holder changes but validators continue to accept an old Route Origin Authorisation, or when the old authority disappears before…
Story
Hosted RPKI and the Convenience Trap
Hosted RPKI turns a difficult security function into a few choices in a registry portal. That is a genuine public benefit. It also places the certificate key, signing service, publication system and revocation path close to the same registrar that controls resource records.…
Story
A Certificate Authority Above the Operator
A Certificate Authority Above the Operator intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The Story intelligence…
Story
APNIC's 103/8 Rationing Experiment
APNIC tried to preserve a small IPv4 foothold for future networks by limiting each account holder to a fixed share of 103/8. The rule extended access for more than a decade, but it also made the account boundary economically valuable. Applicants adapted through smaller requests…
Story
The Grant Programme That Funds Future Supporters
Internet-development grants can finance infrastructure, research and skills that commercial markets neglect. They can also create a circle of recipients whose careers, organisations and regional visibility become entangled with the institution that selected them. The answer is…
Story
APNIC's Investment Portfolio and the Member's Risk Appetite
APNIC has turned a once mostly cash reserve into a substantial market portfolio. The central governance question is not whether a regional registry may invest prudently, but whether members can see, understand and withdraw the risk mandate carried in their name.