ISP Q is issued 2001:db8::/32 by APNIC. ISP Q does not participate in RPKI and does not create ROAs. APNIC accidentally issues an incorrect AS 0 ROA for 2001:db8:8000::/33, taking down some fraction (up to half) of ISP Q’s customers and possibly their infrastructure.
Right now, say APNIC accidentally deletes the above registration from the database… Nothing super bad happens. Some possibility that his RDNS stops working, but his packets still get routed. Some of his RDNS continues to function for a while due to caching, so the damage is potentially significant, but not total. OTOH, if APNIC accidentally deletes the registration and issues an AS0 ROA for the entire netback, then you’re (potentially) talking about near total catastrophic routing failure for this ISP and all of his customers.
Owen
|