fixes #8591 - explicitly set where to subnets.id

can you add a test please?