Regional Internet registries enhance the routing security
In order to mitigate border gateway protocol (BGP) hijacking risks, APNIC joined other regional Internet Registries (RIRs) such as ARIN, AfriNIC, RIPE NCC, in using resource public key infrastructure (RPKI), as well as to generate ‘AS0’ route origin authorization (ROA). ROA objects are cryptographically-signed binary structures that encode a list of Internet addresses and validate a specific origin-autonomous system. They are used for BGP route filtering and verification of the holder of IP address space to announce routes from a particular set of prefixes. ROA shows the state of received route announcement: valid, not found, and invalid. ‘AS0’ in ROA means that a prefix and all its more specific prefixes as invalid and should not to be used in a routing context.
This measure can greatly enhance the effectiveness of RPKI and routing security in general by network operators.
About author
DW Team
The GIP Digital Watch Observatory team, consisting of over 30 digital policy experts from around the world, excels in the fields of research and analysis on digital policy issues. The team is backed by the creative prowess of Creative Lab Diplo and the technical expertise of the Diplo tech team.