101.7.7.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS9405 Test platform Service Center RPKI valid 38 34549129945389405 2026-09-18 2026-09-23
AS4538 China Education and Research Network Center RPKI valid 2 557202376441344538 2026-09-18 2026-09-23

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
101.7.7.0/24 /24 AS4538 apnic wrong origin
101.7.7.0/24 /24 AS9405 apnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
101.4.0.0/14
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2010-12-09

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
101.4.0.0/14 v4 AS4538 China Education and Research Network Center no ROA 48 244824538 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-22 11:37:50Z origin change AS4538 → AS9405 852129945389405
2026-09-22 11:29:51Z origin change AS9405 → AS4538 5572023764413445384538