103.221.49.0/24 RPKI valid MOAS

Announced by 3 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS139259 ADC GROUP CO.,LIMITED RPKI valid 27 34549291442292185913444139259 2026-09-18 2026-09-20
AS25743 EGRMP RPKI valid 14 176392185913857139488125743 2026-09-18 2026-09-20
AS139076 EnjoyVC Japan Corporation RPKI invalid 1 38001139076 2026-09-18 2026-09-20

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
103.221.49.0/24 /24 AS25743 apnic wrong origin
103.221.49.0/24 /24 AS139259 apnic authorises it
103.221.48.0/22 /24 AS139259 apnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
103.221.48.0/22
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2016-05-31

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-18 14:02:35Z origin change AS25743 → AS139259 328840327727174645342292185913444139259
2026-09-18 07:14:30Z origin change AS139259 → AS25743 57381503041299218592185913857139488125743