fixes 8591 - explicitly set where to subnets.id