<div dir="ltr"><span style="font-variant-ligatures:normal">Dear Colleagues:</span><div style="font-variant-ligatures:normal"><br></div><div style="font-variant-ligatures:normal">I remain firmly oppose this policy. And for the future of AFRINIC, I hope this policy can be modified and further discussed. And here are my reasons:</div><div style="font-variant-ligatures:normal"><div style="font-family:'San Francisco',-apple-system,system-ui,'.SFNSText-Regular',sans-serif;color:rgb(29,33,41);font-size:17px;letter-spacing:-0.26px"><div class="gmail-_1t_p gmail-clearfix" style="zoom:1;margin-bottom:15px;font-family:inherit"><div class="gmail-_41ud" style="margin-left:36px;font-family:inherit"></div></div></div></div><div style="font-variant-ligatures:normal"><div>First of all, this policy is in direct conflict with transfer policy, if someone wants to sell their address space, they surely not commit to use it with the original purpose, should AFRINIC instead of allowing them to transfer the space, but reclaim them and redistribute them for "better use"? If that is the case, the transfer policy will have no use because of that.<br></div><div><br></div><div>RIPE NCC does review their members as well, they call it assisted registry check, basically they check the contact details and so on and ask you to confirm if all OK, they also verify that assignments are registered, if anything is wrong, LIR is asked to fix it, there are no threats of de-registration, as far as I know, no RIR has ever de-register allocation from their active member ever in history. I would agree to the policy if the review was carry out on the assignment base (just imagine if you have to review entire MTN or liquid telecom), and if member does not comply, the punishment should be no more future additional allocation, therefore we do not let anyone lose their connection, so we can avoid the legal issue by doing that.</div><div><br></div><div>I would oppose review on the allocation base, image review an entire /12 allocation for example, it will cost both member and AFRINIC millions of dollars, and if you are nitpicking, you always find policy valuation in any large telcos, it's just impossible in business to follow the policy rule exactly if you are running a company like MTN, if you deregister MTN's range because of that....I only can image it become end of AFRINIC as we know it.</div><div><br></div><div>And as we can see from the data here, <a href="http://bgp.potaroo.net/ipv4-stats/allocated-afrinic.html">http://bgp.potaroo.net/ipv4-stats/allocated-afrinic.html</a> , 7.23 /8s Assigned, 6.27 /8s Allocated, 0.96 /8s in RIR Pool, 5.49 /8s Advertised, in which means,<b> at this moment there is 1.76 /8 have been assigned to members in Afrinic region, but not even advertised in the internet</b>, that is equal to 29527900 IP addresses, If, there is a review being conducted to this 29 million IP addresses, <b>I am sure by current policy, they can have "better use" than sitting idle or being used internally.</b> Since transfer policy have been passed, those address has market value of 300 million dollars, reclaim those amount of address space, without any additional business damage, <b>would very likely results AFRINIC paying over 300 millions dollar worth of damage, in which is more than half a century income for AFRINIC.</b></div><div><br></div><div><br></div><div><br></div><div><br></div><div>And below I will add my email on the topic a year ago, in which all the point still stands:</div><div><br></div><div><div style="color:rgb(0,0,0);font-size:12.800000190734863px;white-space:pre-wrap">I'd like to contribute my own 2 cents.<br><br>Let's assume, this policy really putting into action and found a policy breach, stay with me with the example(so let's say the policy in fact works on its purpose of finding policy breach):<br><br>National telecom A from country B has a lot of its practice that not following the policy,Afrinic therefore by RSA trying to reclaim the address from the national telecom A from the requested audit.<br><br>Because of the reclamation, a lot of people lost their connection in country B.<br><br>National telecom taking Afrinic to court and country B government talking to UN and ITU to dismiss Afrinic.<br><br>Does Afrinic, being an 30 people organization with only 4 million dollar in budget, even stay a chance to fight them at all?<br><br>So this reclamation will risk the very existence of Afrinic, for a maybe a /15 misused address, seriously is it worth it for the community as a whole?<br><br>Maybe some would claim that not every company has 4 million in budget, not every member that Afrinic are not able to fight in court, the simple truth is, the one are smaller than Afrinic in size and budget, their space will be small enough that will not make difference for the community(audit an /22 and get it back will really worth nothing to the community, and you can hardly call /22 stock piling as well).<br><br>And any company go though RIR process and justified their need in which is greater than, let's say, /16, will surely have multiple times size of Afrinic with much stronger financial power, Afrinic can not afford fighting them in court under today's condition. Let's face it, Afrinic has no real enforcement power like some might think it does, Afrinic is an registration service, it already does everything it can during the process issuing the IP address to make sure fair distribution according to the policy, and keep the whois database accurate, that is all what community ask them to do, and that is all what Afrinic capable of doing. <br><br>There is no single RIR, RIPE NCC being 5 times bigger budget than Afrinic included, are able to reclaim address from member who do not need them anymore, and that is the exact reason why we have a transfer policy in most of the region now. People transferring are clearly not needing address anymore, why none of RIR today reclaim them from the holder? There might be quite few argument to that, but the one I understand is, none of them able to, most large block holder, if not all, are multiple size of the RIR both in number of staff and financial power, sometime even in political influence, and it is really not worth to risk all the member fees to fight an single member(or multiple members, consider the amount of transfer happening every month). <b>Market works better than central planning</b>, communist country learned this in hard way.</div><div style="color:rgb(0,0,0);font-size:12.800000190734863px;white-space:pre-wrap"><br></div><div style="color:rgb(0,0,0);font-size:12.800000190734863px;white-space:pre-wrap"><b>What is the normal practice in every region until now, is that, assignment can be cancelled by RIR, however, allocation are untouchable once it is issued, no RIR has ever in history claimed back an allocation from member due to insufficient usage. </b>Not to mention Afrinic being the smallest, least funded RIR among them all.<br><br>Let's distribute the rest v4 at fair pace, and stop asking Afrinic acting as communist country's central government, <b>all Afrinic has is an database, with 30 people maintain it under 4 million USD budget,</b> the only reason all those government and large telecom leave Afrinic alone, is because Afrinic does not claim any power but only maintain the database, once Afrinic claim its power to manage whole continent's infrastructure(like one of the hostmaster mistakenly claimed in one of Afrinic meeting), it will simply be the day Afrinic ends as we know it. <b>For that power, we will need a much bigger Afrinic with each country's gov setting on the board to decided things(and enforce it with real power), just like you see in most international governing organizations.</b><br><br>So please keep Afrinic doing registration service alone, like <span class="gmail-il">Rob</span>, the first RIPE chair and much respected globe community member once said, <b>RIR are bookkeepers, nothing more.</b> The wise man help establish the RIR system as we know it today, and I believe its bookkeeper analogy are what protect the RIR's very existence for past 3 decates.</div><div style="color:rgb(0,0,0);font-size:12.800000190734863px;white-space:pre-wrap"><br></div><div style="color:rgb(0,0,0);font-size:12.800000190734863px;white-space:pre-wrap">Otherwise, you will need not just a policy to make the intend of this policy work, <b>you will need high level enforcement power from the each countries' government, and you will need a much bigger Afrinic, or rather, "Africa internet government".</b></div></div><div style="color:rgb(0,0,0);font-size:12.800000190734863px;white-space:pre-wrap"><b><br></b></div><div><b><font color="#000000"><span style="font-size:12.800000190734863px;white-space:pre-wrap">I would appreciate author to address all the above concerns.</span></font></b></div><div><br></div><div><font color="#000000"><span style="font-size:12.800000190734863px;white-space:pre-wrap"><b>With regards.</b></span></font></div><div><font color="#000000"><span style="font-size:12.800000190734863px;white-space:pre-wrap"><b><br></b></span></font></div><div><font color="#000000"><span style="font-size:12.800000190734863px;white-space:pre-wrap"><b>Lu</b></span></font></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 26 June 2017 at 01:57, David Hilario <span dir="ltr"><<a href="mailto:d.hilario@laruscloudservice.net" target="_blank">d.hilario@laruscloudservice.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Arnaud,<br>
<br>
AFRINIC Ltd being put in direct danger of legal actions and financial<br>
claims from its members is still a possibility regardless of how we<br>
look at the situation, this will continue to be the case for as long<br>
as the proposal threatens to de-register resources..<br>
<br>
This is the reason why an objections were raised, it is even part of<br>
the reasoning in staff assessment as a very real possibility, I don't<br>
believe we can simply close our eyes on this one and just act as if it<br>
isn't there.<br>
<br>
RSA is "only" a legal document between a member and AFRINIC LTD, it<br>
contains some resources related guidelines, but as we have seen with<br>
the transfer policy it is not above AFRINIC policies.<br>
The policies are above the RSA when it comes to resource management<br>
and distribution, RSA gets invalidated by any policy contradicting it,<br>
as such basing and defending a policy a policy proposal on the content<br>
of the current RSA may be unwise, the policy needs to stand on its own<br>
without having to refer to the RSA.<br>
<br>
<br>
<br>
David Hilario<br>
<br>
IP Manager<br>
<br>
Larus Cloud Service Limited<br>
<br>
p: <a href="tel:%2B852%2029888918" value="+85229888918">+852 29888918</a> m: <a href="tel:%2B359%2089%20764%201784" value="+359897641784">+359 89 764 1784</a><br>
f: <a href="tel:%2B852%2029888068" value="+85229888068">+852 29888068</a><br>
a: Flat B5, 11/F, TML Tower, No.3 Hoi Shing Road, Tsuen Wan, HKSAR<br>
w: <a href="http://laruscloudservice.net" rel="noreferrer" target="_blank">laruscloudservice.net</a><br>
e: <a href="mailto:d.hilario@laruscloudservice.net">d.hilario@laruscloudservice.<wbr>net</a><br>
<div class="HOEnZb"><div class="h5"><br>
<br>
On 23 June 2017 at 19:33, Arnaud AMELINA <<a href="mailto:amelnaud@gmail.com">amelnaud@gmail.com</a>> wrote:<br>
> Hello Ashok, please find inside lines in red color, authors response to your<br>
> concerns :<br>
><br>
> 2017-06-19 1:34 GMT+00:00 Ashok Radhakissoon <<a href="mailto:ashok@afrinic.net">ashok@afrinic.net</a>>:<br>
>><br>
>><br>
>><br>
>> To the Attention of the Co -Chairs-PDWG<br>
>><br>
>> I refer to the proposed" Internet Number Resources Review" policy and<br>
>> specifically to my observations thereon from a legal perspective.( attached<br>
>> here)<br>
>> Indeed I made two assessments. The first was for the first version of the<br>
>> said proposal<br>
><br>
><br>
> Your first assessment is very inspiring and can be seen at<br>
> <a href="https://afrinic.net/community/policy-development/policy-proposals/1947-internet-number-resources-review-by-afrinic#assessment" rel="noreferrer" target="_blank">https://afrinic.net/community/<wbr>policy-development/policy-<wbr>proposals/1947-internet-<wbr>number-resources-review-by-<wbr>afrinic#assessment</a><br>
> It says:<br>
><br>
><br>
> Legal:<br>
><br>
> The RSA is a community approved document and all members are bound by<br>
> each and every clause thereof once they sign the agreement. It is a contract<br>
> where both parties subscribe to clear obligations.<br>
> In application of the law of contract of Mauritius as found in Article<br>
> 1134 of the Mauritius Civil Code Section 4, the RSA is already binding, as a<br>
> result on all members who sign the agreement.<br>
> It is perfectly lawful , in terms of the application of the Mauritius<br>
> Civil Code , for AFRINIC to act under the said section and reclaim resources<br>
> from those members who/which fail an audit/review exercise.<br>
> The policy can do no more than allow AFRINIC to do what it is already<br>
> doing in a clear and transparent manner on the basis of a community approved<br>
> document<br>
><br>
><br>
>><br>
>> and the second was for the amended versions thereof.<br>
><br>
><br>
> It will be good if you could point out the amendments and how they bring<br>
> some potential risks<br>
><br>
>><br>
>> Whilst my first observation rested on the contractual aspect of the RSA<br>
>> and the contractual obligation of members to comply thereto-See clause 4 of<br>
>> the RSA. My second assessment was made from the perspective of the<br>
>> implementation of the proposal.<br>
><br>
><br>
> As there is no legal concerns about adopting a policy to implement<br>
> contractual obligations set by the RSA and allocations/assignment policies,<br>
> it sounds good to discuss implementation.<br>
><br>
>><br>
>> As these assessments were submitted by AFRINIC to the authors in good time<br>
>> before the face to face discussion thereon, I expected that they were to be<br>
>> considered as a fourth version of the proposal was presented.<br>
><br>
><br>
> Just for records: version 4 was submitted on April 11, Second staff and<br>
> legal assessment was published on April 26<br>
><br>
>><br>
>> To all intents and purposes, it is my humble opinion that the legal issues<br>
>> were not addressed by the authors nor did you draw attention to them during<br>
>> the face to face meeting.<br>
><br>
><br>
> Authors responded to this second assessment on the mailing list. See<br>
> <a href="https://lists.afrinic.net/pipermail/rpd/2017/006889.html" rel="noreferrer" target="_blank">https://lists.afrinic.net/<wbr>pipermail/rpd/2017/006889.html</a> and spoke about<br>
> them in the presentation made during the PPM<br>
><br>
>><br>
>> I believed that since the assessments were part of the record for the<br>
>> purposes of discussions and consideration, I did not draw the attention of<br>
>> the working group to them.<br>
>> I am now doing so.<br>
><br>
><br>
> Thank you. We believe this give the working Group and yourself a single<br>
> opportunity to progress and close this issues.<br>
><br>
>><br>
>> I reiterate that the proposal, as submitted and later amended, would<br>
>> expose AFRINIC to potential legal suits if the following issues which I have<br>
>> raised in my assessment are not addressed.<br>
><br>
><br>
> See below<br>
><br>
><br>
>><br>
>> 1- The testing of data/facts/ evidence submitted( by third parties) to<br>
>> staff require the latter to verify the veracity/admissibility/<wbr>authenticity<br>
>> thereof.If AFRINIC was to act on these, and they later reveal themselves to<br>
>> be forged/untrue/inadmissible/, AFRINIC may potentially face civil suits at<br>
>> the behest of members from whom resources would have been recovered and<br>
>> which could have been prejudicial to them(members).<br>
><br>
><br>
> You point to Third parties with “data/facts/evidence submitted by (third<br>
> Parties) to staff. You are then referring to section 13.3.2(b) below<br>
><br>
><br>
> 13.3.2 Selected<br>
> A member is selected because of an internal report or due to a lack of<br>
> contact between the AFRINIC and the member.<br>
> 13.3.3 Reported: Here, members are reviewed either because:<br>
> a. They have requested the review themselves or;<br>
> b. There has been a community complaint made against them that warrants<br>
> investigation. Complaints shall be backed by evidence and AFRINIC staff<br>
> shall evaluate the facts as appropriate to conduct the review. However, this<br>
> review is not applicable to a member with the same resources portfolio on<br>
> which a full review has been completed in the preceding 24 months.<br>
><br>
><br>
> Staff shall evaluate the facts at their discretion just to know if the<br>
> complaint is worth establishing a review. The decision to run a review in<br>
> all cases fall under RSA and policies provisions.<br>
><br>
> section 4 (iii) of RSA<br>
><br>
> Further acknowledges that AFRINIC may at its own discretion and<br>
> for good cause and<br>
> common Interest of the stability of the Internet, investigate or cause to be<br>
> investigated, the Applicant’s<br>
> use of the services by the appropriate and competent authority(ies).<br>
><br>
><br>
>><br>
>> I also referred to the problem of multi-jurisdictional sources of<br>
>> evidence/facts etc<br>
><br>
><br>
> No need for a legal document/evidence as explain above.<br>
><br>
> But in case this would be needed, one could expect the company legal counsel<br>
> to guide the organization as how it works by default.<br>
><br>
> AFRINIC already deals with evidences/Facts from members and potential<br>
> members when evaluating request for allocations and additional allocations.<br>
><br>
><br>
>><br>
>> 2- The authors must pronounce themselves on whether members should have<br>
>> recourse to sworn affidavits or go through the services of a commissioner of<br>
>> oath or propose any other modus to enable the staff of AFRINIC to undertake<br>
>> the testing exercise on the basis of reliable evidence, before embarking<br>
>> upon a review process.<br>
><br>
><br>
> RSA does not require sworn affidavit to provide information to staff<br>
><br>
>><br>
>> 3-My remarks would apply for the two "classes" of review- complaints from<br>
>> community- AFRINIC's own decision-<br>
><br>
><br>
> this is addressed above<br>
><br>
>><br>
>> 4- I have also not seen the stand of the authors regarding the fact as to<br>
>> the "arbiration award" being unequivocal and my observation related to an<br>
>> incompatibility with the Code of Civil Procedure of Mauritius.<br>
><br>
><br>
> There seems to be some confusions and misunderstandings here. Below is again<br>
> the text of the appeal procedure:<br>
><br>
><br>
> 13.5 Appeal procedure<br>
><br>
> The review shall be conducted in full transparency and neutrality.<br>
><br>
> Reviewed members who are not satisfied have the right to appeal against the<br>
> result.<br>
><br>
> Appeals shall follow an arbitration process as defined by AFRINIC, which<br>
> shall publish the process and the pool of arbitrators whom shall be<br>
> knowledgeable volunteers from the community. The outcome of the arbitration<br>
> process is unequivocal.<br>
><br>
><br>
> It is about an appeal against the result of the audit. Nothing more. An<br>
> appeal process as we do have for example in the section 3.5 of the CPM.<br>
><br>
> The Arbitration process to be defined by AFRINIC “must” only cover appeals<br>
> against the results of review and not appeal against actions taken by<br>
> AFRINIC after a review.<br>
><br>
> This must be separated from any dispute which may arise from action taken by<br>
> AFRINIC as results of a review or other mechanisms which shall follow the<br>
> Number Resource Dispute Resolution of AFRINIC as shown at this URL.<br>
> <a href="https://www.nro.net/about-the-nro/rir-governance-matrix/#disputes" rel="noreferrer" target="_blank">https://www.nro.net/about-the-<wbr>nro/rir-governance-matrix/#<wbr>disputes</a><br>
><br>
> So question is “ is section 13 of the RSA incompatible with the Code of<br>
> Civil procedure of Mauritius” ?. But this discussion does not fall under<br>
> this policy proposal<br>
><br>
><br>
><br>
>><br>
>> 5- I also raised the issue of " hearing" the investigated party( a<br>
>> requirement of the rules of natural justice) and expressly stated that the<br>
>> proposal does not provide anything in this regard.<br>
><br>
><br>
> Policies and RSA provide mechanisms for staff to conduct review of<br>
> allocation/assignment requests and allocated resources usage. This policy<br>
> proposal does not need to define any other mechanisms.<br>
> Investigated party must collaborate and provide information required by<br>
> AFRINIC.<br>
><br>
> Afrinic does not conduct hearings with requesting members, so not required<br>
><br>
><br>
>><br>
>> 6-The question of choice of jurisdiction wherein the arbitration be<br>
>> held-Would it always be Mauritius ? This is the law that applies to the RSA.<br>
><br>
><br>
> As stated above, the Arbitration this policy proposal refers to does not<br>
> require jurisdiction.<br>
><br>
> Choice of jurisdiction according to the RSA is Mauritius, and we expect this<br>
> to apply to Number Resource Dispute Resolution as defined in the RSA<br>
><br>
><br>
>><br>
>> In the light of the above ,may I request the Co-Chairs to consider same<br>
>> and consequently decide, whether further discussions are required on this<br>
>> proposal.<br>
><br>
><br>
> Hope the above clarify things and address your concerns<br>
><br>
><br>
>><br>
>> I thank you for you kind consideration.<br>
>> Ashok.B.Radhakissoon<br>
>> Afrinic-Legal Adviser.<br>
>><br>
>><br>
><br>
> Warm Regards<br>
><br>
> Arnaud A. A. A.<br>
> Active Community member ;)<br>
>><br>
>><br>
>><br>
>> ______________________________<wbr>_________________<br>
>> RPD mailing list<br>
>> <a href="mailto:RPD@afrinic.net">RPD@afrinic.net</a><br>
>> <a href="https://lists.afrinic.net/mailman/listinfo/rpd" rel="noreferrer" target="_blank">https://lists.afrinic.net/<wbr>mailman/listinfo/rpd</a><br>
>><br>
><br>
><br>
> ______________________________<wbr>_________________<br>
> RPD mailing list<br>
> <a href="mailto:RPD@afrinic.net">RPD@afrinic.net</a><br>
> <a href="https://lists.afrinic.net/mailman/listinfo/rpd" rel="noreferrer" target="_blank">https://lists.afrinic.net/<wbr>mailman/listinfo/rpd</a><br>
><br>
<br>
______________________________<wbr>_________________<br>
RPD mailing list<br>
<a href="mailto:RPD@afrinic.net">RPD@afrinic.net</a><br>
<a href="https://lists.afrinic.net/mailman/listinfo/rpd" rel="noreferrer" target="_blank">https://lists.afrinic.net/<wbr>mailman/listinfo/rpd</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>--<br>Kind regards.<br>Lu<br><br></div></div></div>
</div>