103.238.188.0/22 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS4816 China Telecom (Group)	RPKI valid	41	7018 4134 4816	2026-09-18	2026-10-18
AS135061 China Unicom Guangdong IP network	RPKI valid	1	37989 56300 132132 10099 4837 135061	2026-10-08	2026-10-18

RPKI

3 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
103.238.188.0/22	/22	AS4816	apnic	authorises it
103.238.188.0/22	/22	AS59072	apnic	wrong origin
103.238.188.0/22	/22	AS135061	apnic	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 103.238.188.0/22
RIR: APNIC
Country: 🇨🇳 CN
Status: allocated
Allocated: 2014-07-25

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-14 03:34:34Z	origin change	AS135061 → AS4816	328840 327727 174 4134 4816
2026-10-14 03:32:12Z	origin change	AS4816 → AS135061	37989 56300 132132 10099 4837 135061
2026-10-09 04:03:47Z	origin change	AS59072 → AS4816	55720 2914 4134 4816
2026-10-09 03:30:31Z	origin change	AS4816 → AS59072	55720 17476 58453 9808 56040 59072
2026-10-07 16:19:40Z	origin change	AS135061 → AS4816	14907 1299 4134 4816
2026-10-07 16:09:07Z	origin change	AS4816 → AS135061	37989 56300 132132 10099 4837 135061