111.31.25.0/24 RPKI invalid MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS38019 China Mobile Tianjin Province Network | RPKI invalid | 6 | 5030458807980838019 | 2026-09-18 | 2026-09-30 |
| AS9808 China Mobile Backbone | RPKI valid | 3 | 557202376441349808 | 2026-09-18 | 2026-09-30 |
RPKI
3 ROAs cover this prefix
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 111.0.0.0/10
- RIR
- APNIC
- Country
- 🇨🇳 CN
- Status
- allocated
- Allocated
- 2009-05-06
Less specific routes
Announced prefixes that contain this one
| Prefix | Origin | RPKI | Peers | Sample path | First seen |
|---|---|---|---|---|---|
| 111.31.0.0/18 v4 | AS38019 China Mobile Tianjin Province Network | RPKI valid | 39 | 34549129958453980838019 | 2026-09-18 |
| 111.31.0.0/17 v4 | AS38019 China Mobile Tianjin Province Network | RPKI valid | 39 | 34549129958453980838019 | 2026-09-18 |
| 111.0.0.0/10 v4 | AS9808 China Mobile Backbone | no ROA | 40 | 345491299584539808 | 2026-09-18 |
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-09-22 09:16:21Z | origin change | AS9808 → AS38019 | 55720993058807980838019 |
| 2026-09-22 05:41:06Z | origin change | AS38019 → AS9808 | 44393357104809480941349808 |
| 2026-09-19 19:07:58Z | origin change | AS9808 → AS38019 | 55720993058807980838019 |
| 2026-09-19 19:07:54Z | origin change | AS38019 → AS9808 | 557202376441349808 |