Abstract: Resource Public Key Infrastructure (RPKI) is an important mechanism to safeguard BGP routing security, which realizes the legitimacy verification of BGP announcements by Route Origin Authorization (ROA) and Route Origin Validation (ROV). As RPKI continues to advance globally, its deployment status and actual defense effect have become the focus of research. In recent years, researchers have carried out a great deal of researches about ROA configuration problems and ROV deployment measurements, portraying the operational status and protection capability of RPKI in real networks from different dimensions. Current RPKI-related surveys mainly focus on the theoretical research of the RPKI system itself, emphasizing its architectural vulnerabilities, without systematically organizing and deeply summarizing the key challenges and related studies encountered in the actual deployment of RPKI. This review systematically summarizes recent studies on deployment issues of the RPKI system. It focuses on classifying common types of errors in ROA configuration, including benign ROA conflicts and loose ROA registrations, providing a systematic analysis that reveals their causes and impacts on routing security. Finally, this review outlines future research directions in the field of RPKI deployment issues, providing a theoretical foundation and methodological reference for subsequent research in the directions of RPKI deployment optimization, security assessment and strategy research. This will help promote the widespread adoption of RPKI and enhance the defense against BGP prefix hijacking.

摘要： 资源公钥基础设施（RPKI）是保障BGP路由安全性的一项重要机制，通过路由源授权（ROA）和路由源验证（ROV）两项核心功能，实现对自治系统（AS）发布路由宣告的合法性验证。近年来，随着RPKI应用的持续拓展，研究者围绕ROA配置问题与ROV部署测量开展了大量工作，从不同维度刻画了RPKI在现实网络中的运行状态与防御能力。当前RPKI相关综述集中于对RPKI体系本身研究的阐述，着重强调RPKI体系的脆弱性，对于RPKI实际部署中遇到的关键问题及其相关研究并没有进行系统梳理和深入总结。对近年来RPKI系统部署问题的相关研究进行了系统综述，重点梳理了ROA配置中常见错误类型，包括ROA良性冲突以及松散ROA展开系统性分析，揭示其成因与对路由安全的影响；对现有的ROV部署测量方法进行了综合归纳，并进行了对比分析，同时总结了对ROV验证有效性与路径传播影响的评估方法，最后给出RPKI部署问题研究的未来发展方向，为后续在RPKI部署优化、安全评估与策略研究等方向提供了理论基础与方法参考，有利于促进RPKI体系的部署推广，有效防御BGP前缀劫持。