116.198.168.0/21 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS4811 China Telecom Shanghai IDC Network RPKI valid 31 701841344811 2026-09-18 2026-09-19
AS138421 China Unicom RPKI valid 11 3454955114837138421 2026-09-18 2026-09-19

RPKI

9 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
116.198.168.0/21 /21 AS4811 apnic authorises it
116.198.168.0/21 /21 AS131486 apnic wrong origin
116.198.168.0/21 /21 AS138421 apnic wrong origin
116.198.0.0/16 /24 AS4808 apnic wrong origin
116.198.0.0/16 /24 AS4811 apnic authorises it
116.198.0.0/16 /24 AS23724 apnic wrong origin
116.198.0.0/16 /24 AS131486 apnic wrong origin
116.198.0.0/16 /24 AS137699 apnic wrong origin
116.198.0.0/16 /24 AS138421 apnic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
116.198.0.0/16
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2007-04-16

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-18 07:14:22Z origin change AS138421 → AS4811 573814270841344811
2026-09-18 05:28:21Z origin change AS4811 → AS138421 49673204854837138421
2026-09-18 05:28:06Z origin change AS138421 → AS4811 496732048541344811