106.13.254.0/23 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS58466 CHINANET Guangdong province network	RPKI valid	41	7018 4134 58466	2026-09-18	2026-10-21
AS136958 China Unicom Guangdong IDC Network	RPKI valid	1	37989 56300 132132 10099 4837 136958	2026-10-08	2026-10-21

RPKI

4 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
106.13.252.0/22	/24	AS38365	apnic	wrong origin
106.13.252.0/22	/24	AS56040	apnic	wrong origin
106.13.252.0/22	/24	AS58466	apnic	authorises it
106.13.252.0/22	/24	AS136958	apnic	wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 106.12.0.0/15
RIR: APNIC
Country: 🇨🇳 CN
Status: allocated
Allocated: 2011-03-22

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

2 announced prefixes inside this one

Prefix	Origin	RPKI	Peers	First seen
106.13.254.0/24 v4	AS56040 China Mobile Group GuangDong Company	RPKI valid	1	2026-09-18
106.13.255.0/24 v4	AS56040 China Mobile Group GuangDong Company	RPKI valid	1	2026-09-18

Recorded changes

When	Change	Origin	Path
2026-10-14 03:34:34Z	origin change	AS136958 → AS58466	328840 327727 174 4134 58466
2026-10-14 03:32:12Z	origin change	AS58466 → AS136958	37989 56300 132132 10099 4837 136958
2026-10-09 04:03:49Z	origin change	AS38365 → AS58466	55720 2914 4134 58466
2026-10-09 03:30:32Z	origin change	AS58466 → AS38365	55720 17476 58453 9808 56040 38365