[DBWG] Creation of Hierarchical AS-SET problems

[Hendrik Visage]

Seems Apnic is curently only allowing hierarchical AS-SETs https://www.apnic.net/community/policy/resources#a_h_10_7
Proposed and implemented in 2023: https://www.apnic.net/community/policy/proposals/prop-151/


---
Hendrik Visage
Director - HeViS.Co Systems Pty Ltd
T/A  Envisage Cloud Solutions
Mobile: +27-84-612-5345
hvisage at hevis.co.za<mailto:hvisage at hevis.co.za>
hvisage at envisage.co.za<mailto:hvisage at envisage.co.za>
Instant messaging: https://t.me/hvisage


On 29 Oct 2025, at 22:34, Hendrik Visage <hvisage at hevis.co.za> wrote:

Good day,

I want to create a hierarchical AS-SET AS329532:AS-ENVISAGE-AF similar to AS213481:AS-ENVISAGE-RIPE

as-set:         AS213481:AS-ENVISAGE-RIPE
members:        AS213481
members:        AS216243
members:        as-as329532
tech-c:         NO2631-RIPE
admin-c:        NO2631-RIPE
mnt-by:         ENVISAGE-CLOUD-MNT
created:        2025-02-03T12:48:32Z
last-modified:  2025-10-29T19:14:03Z
source:         RIPE


First problem: my.afrinic.net IRR’s as-set doesn’t accept that (the whois.afrinic.net webui is in maintenance mode, so can’t test that at present either)

Also looking at Apnic documentation it matches their examples at https://www.apnic.net/manage-ip/using-whois/guide/as-set/#:~:text=The%20name%20of%20a%20set,starts%20with%20'AS%2D'.

mnars.org gives a similar example: https://manrs.org/2022/12/why-network-operators-should-use-hierarchical-as-sets/


Trying via Email, I get the following error:

---
Create FAILED: [as-set] AS329532:AS-ENVISAGE-AF

as-set:         AS329532:AS-ENVISAGE-AF
descr:          Envisage Cloud Solutions
descr:          Anycast usage
members:        AS329532
remarks:        LAGRANGE.CLOUD-4a295058e187ceaa43e7da0fb248645c
org:            ORG-HCSL1-AFRINIC
tech-c:         HV2-AFRINIC
admin-c:        HV2-AFRINIC
notify:         sysadmin at hevis.co.za
mnt-by:         HCSL1-MNT
changed:        hvisage at hevis.co.za 20251029
source:         AFRINIC

***Error:   Authorisation for parent [aut-num] AS329532 failed
          using "mnt-by:"
          not authenticated by: AFRINIC-HM-MNT


Am I missing something in the request?

I can however create a non-hierarchical one like, but want to create one similar to the examples as used elsewhere.

% Information related to 'as-AS329532'

as-set:         as-AS329532
admin-c:        HV2-AFRINIC
tech-c:         HV2-AFRINIC
descr:          ECS-as-set
mnt-by:         HCSL1-MNT
source:         AFRINIC # Filtered
members:        AS213481
members:        AS329532

Sub-Problem 3: as-AS329532 doesn’t show up in my.afrinic.net ’s IRR AS-SET page, as (at creation time) ORG wasn’t filled in -> shouldn’t that be rather made a mandatory field?


---
Hendrik Visage
Director - HeViS.Co Systems Pty Ltd
T/A  Envisage Cloud Solutions
Mobile: +27-84-612-5345
hvisage at hevis.co.za
hvisage at envisage.co.za Instant messaging: https://t.me/hvisage




---

Hendrik Visage

hvisage at hevis.co.za

HeViS.Co Systems Pty Ltd

https://www.envisage.co.za




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/dbwg/attachments/20251029/6fbb762d/attachment-0001.html>