1. Issue Date:
Revision:
APNIC Update 2014
IDNOG 1
WITA LAKSONO
[31 May 2014]
[4]

2. Overview
APNIC’s Vision:
“A global, open,
stable, and
secure Internet
that serves the
entire Asia Pacific
community”
2
Serving APNIC Members
Supporting Internet development
in the Asia Pacific region
Collaborating with the Internet
community

3. 3

4. APNIC’s Mission
• Function as the RIR for the Asia Pacific, in the service of the
community of Members and others
• Provide Internet registry services to the highest possible
standards of trust, neutrality, and accuracy
• Provide information, training, and supporting services to
assist the community in building and managing the Internet
• Support critical Internet infrastructure to assist in creating and
maintaining a robust Internet environment
• Provide leadership and advocacy in support of its vision and
the community
• Facilitate regional Internet development as needed throughout
the APNIC community
4

5. Serving APNIC
Members
• IPv6 statistics
• IPv4
– Last /8 statistics
– Market transfer statistics
• ASN statistics
• Membership growth
• Services update
– Whois
– MyAPNIC updates
“Function as the RIR for
the Asia Pacific, in the
service of the community
of Members and others”
“Provide Internet registry
services to the highest
possible standards of
trust, neutrality, and
accuracy”
5

6. Cumulative IPv6 Delegations (/32s)
0
5000
10000
15000
20000
25000
30000
35000
40000
45000
50000
2009 2010 2011 2012 2013
Date
Numberof/32s
6

7. IPv6 Delegations by Year
0
100
200
300
400
500
600
700
2009 2010 2011 2012 2013
Date
Numberofdelegations
7

8. IPv4 Last /8 Delegations
0
20
40
60
80
100
120
140
160
180
200
Apr-11
May-11
Jun-11
Jul-11
Aug-11
Sep-11
Oct-11
Nov-11
Dec-11
Jan-12
Feb-12
Mar-12
Apr-12
May-12
Jun-12
Jul-12
Aug-12
Sep-12
Oct-12
Nov-12
Dec-12
Jan-13
Feb-13
Mar-13
Apr-13
May-13
Jun-13
Jul-13
Aug-13
Sep-13
Oct-13
Nov-13
Dec-13
Jan-14
Feb-14
Mar-14
Apr-14
May-14
Date
Delegations
8
As at 31 May 2014

9. IPv4 Market Transfers
0
2
4
6
8
10
12
14
16
18
20
Nov-10
Dec-10
Jan-11
Feb-11
Mar-11
Apr-11
May-11
Jun-11
Jul-11
Aug-11
Sep-11
Oct-11
Nov-11
Dec-11
Jan-12
Feb-12
Mar-12
Apr-12
May-12
Jun-12
Jul-12
Aug-12
Sep-12
Oct-12
Nov-12
Dec-12
Jan-13
Feb-13
Mar-13
Apr-13
May-13
Jun-13
Jul-13
Aug-13
Sep-13
Oct-13
Nov-13
Dec-13
Jan-14
Feb-14
Mar-14
Apr-14
May-14
Inter-RIR
Transfers
Date
Numberoftransfers
9
As at 31 May 2014

10. Cumulative ASN Delegations
0.00
1,000.00
2,000.00
3,000.00
4,000.00
5,000.00
6,000.00
7,000.00
8,000.00
9,000.00
10,000.00
2009 2010 2011 2012 2013
4-byte
2-byte
Date
Delegations
10

11. Membership Growth
0
500
1000
1500
2000
2500
3000
3500
4000
4500
1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013
XL
VL
L
M
S
VS
AS
Date
Members
11

12. Whois Updates
12
New features
• ‘geoloc’ and language
attributes
• ‘whowas’ functionality
RDAP
• WEIRDS
• Pilot service
available
• Contribution to
RIPE whois server

13. MyAPNIC Improvements
13
Referral application
Bulk feature for IRT added
Interface improvements
https://myapnic.net
http://www.apnic.net/myapnic

14. Supporting Internet
Development in the Asia
Pacific Region
• Policy development
• IPv6 support
• Training
• APNIC Events
• Infrastructure capacity building
• Information Society Innovation
Fund (ISIF Asia)
“Provide information,
training, and supporting
services to assist the
community in building and
managing the Internet”
“Support critical Internet
infrastructure to assist in
creating and maintaining a
robust Internet
environment”
“Facilitate regional Internet
development as needed
throughout the APNIC
community”
14

15. Policy Implementations
• prop-108: Suggested changes to the APNIC Policy
Development Process
• prop-107: AS Number transfer policy proposal
• prop-109: Allocate 1.0.0.0/24 and 1.1.1.0/24 to APNIC Labs
as Research Prefixes
• prop-105: Distribution of returned IPv4 address
(Modification of prop-088)
15

16. IPv6 Support
16
www.apnic.net/ipv6
• ASEAN ICT SMEs Conference, Hanoi
• IPv6 Event by ISOC HK, Hong Kong
• ICANN 49, IPv6 Roundtable, Singapore
• Global IPv6 and Next Generation Summit 2014,
Beijing
• APEC TEL 49
Outreach
• Asia Pacific IPv6 Task Force
• APNIC continues to provide Secretariat services
• Met at APNIC 36 and APRICOT 2014/APNIC 37
APIPv6TF
• White paper published
• www.apnic.net/ipv6-decision-makers
IPv6 for Decision
Makers

17. Training
• Continuing focus on
IPv6 deploymentIPv6
• Extensive exercises
in virtual and
physical training labs
Hands-on
• Every Wednesday is
IPv6 day; 179 hours
training provided
eLearning
17

18. APNIC Events
• APNIC 36: Xi’an, China
– Total on-site delegates: 251
– Total remote participants: 409
• APRICOT 2014/APNIC 37:
Petaling Jaya, Malaysia
– Total on-site delegates: 466
– Total remote participants: 262
• NEW: APNIC Regional Meetings
(ARM)
– Free one-day events
– ARM 1 with MyNOG 3 in Kuala
Lumpur on 29 November 2013
– ARM 2 - in conjunction with
Internet20PH on 4 April 2014 in
Manila
– ARM 3 – with bdNOG on 24 May in
Dhaka
18

19. Infrastructure Capacity Building
19
Provided training and
equipment to help establish
the Vanuatu IXP
Helped establish an I-Root
server instance in Port Vila,
Vanuatu
IXP Workshop held in
Bangkok, Thailand -
working towards
establishing the country’s
first IXP
APNIC supported the
establishment of bdNOG,
BTNOG and IDNOG,
new network operators
groups in Bangladesh,
Bhutan and Indonesia

20. ISIF and Seed Alliance
20
• Small grants and awards
• AUD 1.3m over 3 years (IDRC, Canada)
• So far, AUD 1.2m to 38 projects in 17 economies
• 2014 Call for Grants: 11 projects selected for implementation
in 2014
• 2014 ISIF Asia Awards: 93 applications received; 34 passed
pre-screening
ISIF Asia
• Joint project of ISIF (APNIC), Frida (LACNIC), FIRE
(AFRINIC)
• AUD 1.5m over 3 years (Sida, Sweden)
Seed
Alliance

21. Collaborating with the
Internet Community
• APNIC Labs
• Strategic Engagement
• Internet cooperation
“Provide leadership and
advocacy in support of
APNIC’s vision and the
community”
21

22. APNIC Labs
• Measurement activities
– IPv6 readiness by economy and ISP;
IPv6 performance
– Repurposed IPv6 measurement for
DNSSEC validation by economy and
ISP
– Tracking growth of routing table in
IPv4 and IPv6
– RPKI use across the Internet
• Long-term investigation exercise
into evolving nature of dark traffic in
both IPv4 and IPv6
• Internet number resource reporting
and analysis
labs.apnic.net
blabs.apnic.net
22

23. Strategic Engagement
23
• NOGs, NIR OPMs, I*, CERTs, ISOC
Chapters, PACINET, PICISOC, PTC,
PITA
Technical
community
• APEC-TEL 47 and 48, ITU WTPF, APT,
WSIS+10, ITU Connect Asia Pacific
Summit, ITU Telecom World 2013, APEC
TEL 49, NETmundial
Governmental
• National IGFs (Nethui, auIGF), APrIGF
• Bali IGF - significant support given for
fundraising and logistics
IGF

24. APNIC Resource
Certification Service

25. Internet Routing Security
• Routing security is essential to integrity of Internet
– Need to Improve security of inter-domain routing
• Who has the authority to advertise what information into the
routing system ?
• The majority of network relationships are based on system
of mutual trust
– Each party trusts that routes used to transmit information are safe
• The trust model is increasingly open to potential abuse and
attack
25

26. About RPKI
• An architecture to support improved security of Internet
routing using PKI infrastructure
• A robust security framework for verifying the association
between resource holders and their Internet resources
– “cryptographically verifiable attestations” for IP address delegation
and their use
• This architecture is called Resource Public Key
Infrastructure (RPKI)
26

27. Resource Delegation Hierarchy
IANA
AFRINIC RIPE NCC ARIN APNIC LACNIC
NIR1 NIR2
ISP ISP ISP ISP
ISP ISP ISP

28. About RPKI
• “Trustable authority” mirrors the administrative resource
allocation hierarchy with certificates that match current
resource delegations
• A resource holder operating a sub-delegation registry (e.g.
an LIR) may use an RPKI system to generate certificates
that correspond to these delegations
– grant a unique "right-of-use" for the associated set of IP resources
28

29. About RPKI
• These certificates are called resource certificates and they
conform to X.509 PKIX standards
• RPKI is not used to validate attestations of an individual's
identity or that individual's role, but as a means to validate
that person’s authority to use IP address resources
• An RPKI resource certificate is required to enable a
resource holder to issue “Route Origination
Authorizations” (ROAs)
29

30. What is a ROA ?
• It is a digital object that contains a list of address prefixes
and one AS number
• It is an authority created by a prefix holder to authorizes an
AS number to originate one or more specific route
advertisements
• It does not contain any routing policy information, nor does
it convey whether or not the AS holder has even consented
to actually announce the prefix(es) into the routing system

31. APNIC’s RPKI Service
• Enhancement to the RIR Registry
– Offers verifiable proof of resources holdings
• Resource certification is an opt-in service
– Resource holders choose to request a certificate and provide their
public key to be certified
• APNIC has integrated RPKI management service into
MyAPNIC for APNIC Member use
31

32. What You Need To Know
• You are encouraged to experiment, test, play and develop
– Eg, you can create your ROAs
• RPKI standards are still being developed, and the operating
environment for RPKI use is still fragile
• It's ready for testing and prototyping. It's probably not ready
for production use just yet
• Please tell us what you find but don’t rely on it in your
network yet

33. APNIC Survey 2014
• 11 June - 11 July 2014
• Opportunity to provide input on APNIC’s performance,
development, and future direction
• Contributes to APNIC’s future planning processes
• Run by an impartial, independent research organization
• Confidentiality of respondents guaranteed
• Focus Group Report available
33
survey.apnic.net #apnicsurvey2014

34. You’re Invited!
• APNIC 38: Brisbane, Australia, 9-19 Sep 2014
• APRICOT 2015: Fukuoka, Japan, 24 Feb-6 Mar 2015
34

35. THANK YOU
www.facebook.com/APNIC
www.twitter.com/apnic
www.youtube.com/apnicmultimedia
www.flickr.com/apnic
www.weibo.com/APNICrir