103.251.239.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS401254 NETSOLVE NETWORK TECHNOLOGY LIMITED RPKI valid 38 38001140570398704401254 2026-09-18 2026-10-06
AS398704 STACKS INC RPKI valid 3 24482398704 2026-09-18 2026-10-06

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
103.251.239.0/24 /24 AS398704 apnic wrong origin
103.251.239.0/24 /24 AS401254 apnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
103.251.236.0/22
RIR
APNIC
Country
🇭🇰 HK
Status
allocated
Allocated
2013-08-06

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-02 11:36:58Z origin change AS398704 → AS401254 460875759002398704401254
2026-10-02 08:35:22Z origin change AS401254 → AS398704 176394635398704
2026-09-27 05:31:46Z origin change AS398704 → AS401254 328840327727174140570398704401254
2026-09-27 03:52:16Z origin change AS401254 → AS398704 176394635398704