103.197.2.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS55996 CYPRESS TELECOM (CHINA) LIMITED	RPKI valid	2	55720 17476 58453 9808 56048 55996	2026-09-18	2026-09-21
AS58542 China Telecom Tianjin Province IDC Network	RPKI valid	1	44393 35710 10099 9929 4134 58542	2026-09-18	2026-09-21

RPKI

4 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
103.197.2.0/24	/24	AS55996	apnic	authorises it
103.197.2.0/24	/24	AS58542	apnic	wrong origin
103.197.2.0/23	/24	AS55996	apnic	authorises it
103.197.2.0/23	/24	AS131274	apnic	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 103.197.0.0/22
RIR: APNIC
Country: 🇨🇳 CN
Status: assigned
Allocated: 2015-09-30

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
103.197.2.0/23 v4	AS131274 Cypresstel Global Network	RPKI valid	16	34549 3257 131274	2026-09-18
103.197.2.0/23 v4	AS55996 CYPRESS TELECOM (CHINA) LIMITED	RPKI valid	30	6939 131274 55996	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.