Update: 

Since I collect RPKI status data for Asian prefixes on rpki.anuragbhatia.com, I picked data from last scan (at 12th Aug noon time) with a fresh scan just now (12th Aug 11:30pm) IST. I see 64 new prefixes have suddenly become RPKI invalids. 

Here's the list: 

Origin ASPrefixAS Name
NA103.207.172.0Wi-Bro Solutions Pvt. Ltd
NA2406:9e00:1110::/48Microscan Computers Pvt. Ltd
NA2406:9e00:1111::/48Microscan Computers Pvt. Ltd
17762202.149.192.0HTIL-TTML-IN-AP Tata Teleservices Maharashtra Ltd, IN
17803123.238.26.0RELIANCE-AS-IN Reliance Communication Ltd, IN
17803123.238.96.0RELIANCE-AS-IN Reliance Communication Ltd, IN
17803124.125.231.0RELIANCE-AS-IN Reliance Communication Ltd, IN
18101220.227.178.0RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI, IN
24186103.66.76.0RAILTEL-AS-IN RailTel Corporation of India Ltd, IN
24186103.66.76.0RAILTEL-AS-IN RailTel Corporation of India Ltd, IN
24186103.66.76.0RAILTEL-AS-IN RailTel Corporation of India Ltd, IN
24186103.66.77.0RAILTEL-AS-IN RailTel Corporation of India Ltd, IN
24186103.66.78.0RAILTEL-AS-IN RailTel Corporation of India Ltd, IN
24186103.66.78.0RAILTEL-AS-IN RailTel Corporation of India Ltd, IN
24186103.66.79.0RAILTEL-AS-IN RailTel Corporation of India Ltd, IN
55352103.239.171.0MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:1::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:2::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:3::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:4::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:6::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:7::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:8::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:9::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:a::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:b::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:c::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:d::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:e::/48MCPL-IN Microscan Computers Private Limited, IN
553522406:9e00:f::/48MCPL-IN Microscan Computers Private Limited, IN
1324532400:80c0::/48TRIPLE-PLAY-IN TRIPLE PLAY BROADBAND PRIVATE LIMITED, IN
132933103.252.108.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.252.108.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.252.108.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.252.109.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.252.110.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.252.111.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.60.176.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.60.176.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.60.176.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.60.177.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.60.178.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
132933103.60.179.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
13293345.120.120.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
13293345.120.120.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
13293345.120.120.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
13293345.120.121.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
13293345.120.122.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
13293345.120.123.0CTPLAND-AS CharotarTelelink Pvt Ltd, IN
134053103.97.92.0EXPL-AS-IN ETHERNET XPRESS PVT. LTD., IN
135730103.68.25.0DMIMS-AS Datta Meghe Institute Of Medical Sciences, IN
135733103.68.16.0SPEARHEAD-AS SPEARHEAD LIFESTYLE INDIA PRIVATE LIMITED, IN
135733103.68.17.0SPEARHEAD-AS SPEARHEAD LIFESTYLE INDIA PRIVATE LIMITED, IN
135733103.68.18.0SPEARHEAD-AS SPEARHEAD LIFESTYLE INDIA PRIVATE LIMITED, IN
135733103.68.19.0SPEARHEAD-AS SPEARHEAD LIFESTYLE INDIA PRIVATE LIMITED, IN
136374103.24.109.0MICR-AS Microtalk Communications Pvt Ltd, IN
136374103.24.110.0MICR-AS Microtalk Communications Pvt Ltd, IN
13637445.120.17.0MICR-AS Microtalk Communications Pvt Ltd, IN
137166103.198.96.0DSCONNPT-AS Digital Satellite Connect Pvt Ltd, IN
137166103.198.97.0DSCONNPT-AS Digital Satellite Connect Pvt Ltd, IN
137166103.198.98.0DSCONNPT-AS Digital Satellite Connect Pvt Ltd, IN
137166103.198.99.0DSCONNPT-AS Digital Satellite Connect Pvt Ltd, IN
138754103.148.20.0KVBPL-AS-IN Kerala Vision Broad Band Private Limited, IN


Suspecting some corruption from IRINN end here. Only networks with these pools should be able to verify. 
If you see your prefix/ASN in this list - please get the RPKI ROA fixed. 


Good luck! 

On Thu, Aug 12, 2021 at 11:04 PM Anurag Bhatia <me@anuragbhatia.com> wrote:
Hello everyone,


Heard of issues in a friend's network and found that their RPKI ROAs have been tweaked. Upon noticing I see some more similar random cases where origin AS has been changed to non-existent AS in some cases. Since these pools are with IRINN, networks cannot change these directly but have to go via IRINN way. 

An example of this: AS59199 - a non-existent AS with bunch of prefixes from Railtel to Microscan: 

  
image.png



I suspect some unauthorized alteration within RPKI ROA data. Anyone else facing issues today? 


Note: RPKI Invalids will face partial connectivity and many global networks would just drop them resulting in many issues. 

--
Anurag Bhatia


--
Anurag Bhatia