103.23.171.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS41095 IPTP LTD RPKI valid 39 333341095 2026-09-18 2026-10-08
AS140951 IPTP Networks RPKI valid 3 38001140951 2026-09-18 2026-10-08

RPKI

3 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
103.23.171.0/24 /24 AS41095 apnic authorises it
103.23.171.0/24 /24 AS140951 apnic wrong origin
103.23.168.0/22 /22 AS41095 apnic too specific

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
103.23.168.0/22
RIR
APNIC
Country
🇭🇰 HK
Status
allocated
Allocated
2011-11-30

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-07 17:58:20Z origin change AS41095 → AS140951 557206939140951
2026-10-07 16:18:55Z origin change AS140951 → AS41095 149071299335641095
2026-10-07 16:09:25Z origin change AS41095 → AS140951 3798956300132132140951
2026-10-01 08:33:49Z origin change AS140951 → AS41095 85241095
2026-10-01 08:00:11Z origin change AS41095 → AS140951 557206939140951
2026-09-29 18:02:51Z origin change AS140951 → AS41095 85241095
2026-09-29 17:09:00Z origin change AS41095 → AS140951 557206939140951
2026-09-29 03:48:47Z origin change AS140951 → AS41095 85241095
2026-09-28 21:22:36Z origin change AS41095 → AS140951 557206939140951