Summary

  • The APNIC abuse mailbox for NEXGENET COMPANY LIMITED, at the company domain, carries a validation remark dated 7 July 2026 — the newest dated signal that the accountability contact surface is actively maintained, post-dating prior coverage of this operator.
  • Every accountability role for three autonomous systems — AS151210, AS152663 and AS153311 — funnels through a single role object, NCLA4-AP, which literally names itself 'NEXGENET COMPANY LIMITED administrator' and lists itself as both admin-c and tech-c.
  • Only AS151210 routes traffic: three prefixes, all RPKI-valid, with peering in Bangkok and Yangon. AS152663 has been invisible in the global routing table since 11 September 2024, and its registered holder remains disputed between public mirrors.

The registry hub of this story is APNIC organisation object ORG-NGN2-AP: NEXGENET COMPANY LIMITED, a local internet registry registered at No. 838–839 Thuzitar Road, North Okkalapa Township, Yangon, with contact e-mail at the company domain and a last-modified timestamp of 5 September 2023 (whois: ORG-NGN2-AP).

What prior coverage established — and this briefing extends — is the shape of the contact surface. The role object NCLA4-AP carries the literal name 'NEXGENET COMPANY LIMITED administrator' and is self-referential: it lists itself as both administrative and technical contact, with no named individual anywhere above it in the chain (whois: NCLA4-AP). The abuse path, AN3144-AP ('ABUSE NCLMM'), is generated from an IRT object and routes to the same company-domain mailbox, citing NCLA4-AP as its admin-c and tech-c (whois: AN3144-AP).

The delta from the articles published on 27 September 2026 is a single dated fact: the IPInsight mirror reproduces the IRT-NCL-MM object with a remark that the abuse mailbox was validated on 7 July 2026, with the IRT itself last-modified 7 July 2026 (IPInsight mirror of AS151210). That validation matters because an abuse contact that fails validation is the standard precursor to registry escalation; one that passes is the standard evidence of a live, maintained contact. It does not, however, identify any person.

The routing picture around that mailbox remains sharply asymmetric. AS151210 — NCL-AS-AP, registered 3 May 2023 — originates 103.132.102.0/24, 103.132.103.0/24 and 2001:df2:5fc0::/48, with upstreams NTT America (AS2914) and International gateway co., Ltd (AS137557/AS140867) (bgp.tools). Hurricane Electric reports all three originated prefixes as RPKI-valid, roughly 20 observed IPv4 peers, and exchange presences at BKNIX and TH-IX in Bangkok plus a Yangon endpoint — while also flagging that AS151210 announces bogons (bgp.he.net). PeeringDB, self-declared data, lists the network as an NSP with an as-set AS151210:AS-CUSTOMERS and 20G peering at BKNIX (PeeringDB).

The two sponsored ASNs are the accountability gap. AS152663 has not been visible in the global routing table since 11 September 2024 per Hurricane Electric, which shows one observed peer — an IPv6 session with AS151210 — and a page whose title reads SMART & SHINE COMPANY LIMITED while its embedded whois renders the newer NEXGENET record (bgp.he.net). Public mirrors actively disagree about who holds it: bgp.tools reproduces the original aut-num as SMART & SHINE COMPANY LIMITED (ORG-SSCL4-AP) with NEXGENET as sponsoring organisation, registered 27 March 2024 and currently originating zero prefixes (bgp.tools), while Robtex renders it as NEXGENET COMPANY LIMITED with a last-modified timestamp of 2 July 2026 and a single RADB route6 object, 2401:8d20::/32, maintained by MAINT-AS137557 — the Thai third party — with RPKI origin-validation state not_found (Robtex). AS153311, registered to SMMCL in Keng Tung, Shan State, with NEXGENET as sponsoring organisation, originates nothing and shows zero peers (bgp.he.net).

One honest limitation frames all of this: the authoritative APNIC RDAP endpoints for the three autnums were requested but not directly retrieved in this research run, so the AS152663 holder conflict is adjudicated only through disagreeing mirrors, not through the registry of record (rdap autnum/151210, rdap autnum/152663, rdap autnum/153311). The company's own website, which claims a 2015 founding and an international gateway licence predating its first registry objects by eight years, remains self-declared (nexgenetwork.com).