APNIC Home

Advanced search in the APNIC Whois

Query Options

To query Whois v3, use the following command syntax:

whois [-flags [argument]] <lookup-key>

Queries using primary and lookup keys

Example:

whois -h whois.apnic.net 202.12.29.0

Example in web lookup tool

Lookup key Objects returned by query
Address prefix or range or single address
IPv4: Most specific inetnum and route object. If single address, returns inet-rtr with matching ifaddr attribute.
IPv6: Most specific inet6num and route6 object. If single address, returns inet-rtr with matching address attribute
Network name All inetnum and inet6num objects with a netname attribute containing the name specified in the query.
Person All person and role objects with a person or role attribute containing the name specified in the query argument.
NIC-handle person or role object with a matching nic-hdl attribute.
Maintainer mntner object with a matching primary key.
Reverse domain domain with a matching primary key.
AS number aut-num object with a matching aut-num attribute and associated as-block.
AS number – AS number as-block object whose primary key matches or fully contains the query range.
Set name as-set, filter-set, peering-set, route-set or rtr-set with a matching primary key.
Domain inet-rtr objects with a matching primary key.

IP address lookups

Example:

whois -h whois.apnic.net -l 202.12.29.0

Example in web lookup tool

Flag Objects returned by query
-L All less specific inetnum, inet6num, route, or route6 objects, including exact matches.
-m First level more specific inetnum, inet6num, route, or route6 objects, excluding exact matches.
-M All more specific inetnum, inet6num, route, or route6 objects, excluding exact matches.
-l First level less specific inetnum, inet6num, route, or route6 objects, excluding exact matches.
-x Only an exact match on a prefix will be performed. If no exact match is found, no objects are returned.
-d Enables use of the -m, -M, -l and -L flags for lookups on reverse delegation domains.

 

Less specific query options

Use this option to view IP address blocks that match or are larger than the IP address or range you wish to query.

-l First level less specific Use this option when querying:

  • a single IP address
  • a range of IP addresses
  • an IP address prefix

This option returns: the smallest IP address range that includes the IP address or range specified in the query.
Hint: when querying the APNIC Whois Database on an IP address range, -l is the default option.
-L All levels less specific Use this option when querying:

  • a single IP address
  • a range of IP addresses
  • an IP address prefix

This option returns: all IP address ranges that include the IP address or range specified in the query.

Hint: use this option to view any upstream IP address blocks associated with the query range. Viewing the upstream IP address range can be useful for network troubleshooting.

Please note, that as well as upstream address blocks, the top level ‘parent’ range allocated to APNIC by IANA will also be returned. APNIC makes allocations from this range, but does operate the networks that use these
addresses. The netname of the APNIC IP address block begins with ‘APNIC-AP’ (or similar).

 

More specific query options

Use these options to view IP address blocks that match or are smaller than the IP address or range you wish to query.

-m First level more specific Use this option when querying:

  • a range of IP addresses
  • an IP address prefix

This option returns: first level more specific address ranges within the boundaries of the IP address range specified in the query.

 

Hint: use this option to:

  • view assignments made from a network’s allocation block to customers
  • view allocations or assignments made from an RIR or NIR block to networks
-M All levels more specific Use this option when querying:

  • a range of IP addresses
  • an IP address prefix

This option returns: all more specific address ranges within the boundaries of the IP address range specified in the query.

 

Hint: use this option to:

  • view all allocations and assignments made from a specified address block.
  • check that no unauthorized address blocks have been created under address space allocated or assigned to your network.

Note: do not use this option to view all allocations and assignments in a /8. If you do try to do this, you will be blocked by the server for excessive query load.

 

Exact lookups

Use this option to view IP address blocks that exactly match the IP address range you wish to query.

-x Exact match only Use this option when querying:

  • a range of IP addresses
  • an IP address prefix

This option returns: the specific address range specified in the query. If no exact match is found, nothing will be returned.

 

Hint: use this option to:

  • view details of a specific address range you know exists

Note: if you are not sure of the exact address range, do not use this option. Instead, use one of the following options: -l, -L, -m, -M.

 

Associated reverse domains

Use this option to view reverse domains associated with IP address blocks returned by the query on an IP address or range.

-d Return associated reverse domain Use this option when querying:

  • a single IP address
  • a range of IP addresses
  • an IP address prefix

This option returns: an exact match, or the smallest IP address range that includes the IP address or range specified in the query. It also returns the smallest reverse domain that encompasses that IP address range.

 

Hints: use this option to:

  • view the reverse domain associated with an IP address or range.
  • check if reverse domains have been created for all assigned address space.

Use this option in combination with -l, -L, -m or -M to:

  • view reverse domains associated with all IP address ranges returned by the normal -l, -L, -m or -M queries.

Use this option in combination with -T <object-type> to:</object-type>

  • restrict the search results to reverse domains only

Note: all assigned address space should have associated reverse domains created in the APNIC Whois Database. To create reverse domains for address blocks, see Reverse DNS Delegations Manual.

Inverse queries

Example:

whois -h whois.apnic.net -i pn NO4-AP

Example in web lookup tool

Use this option when:

  • searching for objects in the APNIC Whois Database that have an attribute matching the attribute type chosen from the inverse lookup scroll list and the query text given by the user.

This option returns: all objects that have an attribute that matches the query text and attribute type.

Hint: use this option to:

  • view all objects maintained by a particular maintainer
  • view all objects where a particular NIC-handle is referenced
  • Note: use -i person or -i mntner when staff leave a network to identify objects referencing that person that need to be updated.

 

Flag Alternative flag Lookup key Objects returned by query
-i ac -i admin-c NIC-handle or person Objects with a matching admin-c attribute.
-i pn -i person NIC-handle or person Objects with matching admin-c, tech-c, zone-c, or cross-nfy attributes.
-i mb -i mnt-by Maintainer Objects with a matching mnt-by attribute.
-i ml -i mnt-lower Maintainer Objects with a matching mnt-lower attribute.
-i mn -i mnt-nfy e-mail mntner objects with a matching mnt-nfy attribute.
-i ny -i notify e-mail Objects with a matching notify attribute.
-i ns -i nserver Domain or address prefix or range or single address domain objects with a matching nserver attribute.
-i rz -i rev-srv Domain or address prefix or range or single address inetnum and inet6num objects with a matching rev-srv attribute.
-i sd -i sub-dom Domain domain objects with a matching sub-dom attribute.
-i tc -i tech-c NIC-handle or person Objects with a matching tech-c attribute.
-i dt -i upd-to e-mail mntner objects with a matching upd-to attribute.
-i zc -i zone-c NIC-handle or person Objects with a matching zone-c attribute.
-i rb -i referral-by Maintainer mntner objects with a matching referral-by attribute.
-i la -i local-as AS number inet-rtr objects with a matching local-as attribute.
-i mr -i mbrs-by-ref Maintainer Set objects (as-set, route-set and rtr-set) with a matching mbrs-by-ref attribute.
-i mo -i member-of Set name Objects with a matching member-of attribute, provided that their membership claim is validated by the mbrs-by-ref attribute of the set.
-i mu -i mnt-routes Maintainer aut-num, inetnum and route objects with a matching mnt-routes attribute.
-i or -i origin AS number route and route6 objects with a matching origin attribute.

Miscellaneous queries

Example:

whois -h whois.apnic.net -T domain -i mb APNIC-HM

Example in web lookup tool

Flag Argument Effect
-r Switches off recursion for contact information after retrieving the objects that match the lookup key.
-T (comma separated list of object
types, no white space allowed)		 Restricts the types of objects to lookup in the query.
-a Specifies that the server should perform lookups in all available sources. See also “in-q sources” query.
-s (comma separated list of sources,
no white space allowed)		 Specifies which sources and in which order are to be looked up when performing a query.
-F Produces output using shorthand notation for attribute names. Produces slower responses.
-R Switches off use of the referral mechanism for domain lookups, so that the database returns an object in the local database with the exact match with the lookup argument, rather than doing a referral lookup.
-K Only the primary keys of an object are returned.

  • The exceptions are set objects, where the members attributes will also be returned.
  • This flag does not apply to person and role objects.

Informational queries

Example:

whois -h whois.apnic.net -q sources

Flag Argument Effect
-t Object type Template for the specified object type.
-v Object type Verbose template for the specified object type.
“help” Help on query options available in the database.
-q “sources” Current set of sources along with the information required for mirroring.
-q “version” Current version of the server.