Because ipquery starts and an ipaddress and looks through the database looking for attributes bound to that address, then to the subnet containing that address, then the subnet containing that subnet, ad nauseam looking for the attributes. There is no ip address corresponding to an authdom, like outside.plan9.bell-labs.com. I'll answer about sshnet as soon as I look at a man page to see what it is.