120.133.240.0/22 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS17428 VNET Group, Inc. RPKI valid 41 70184134481117428 2026-09-18 2026-10-17
AS18244 Stateline Internet Data Center Co., Ltd. Shanghai RPKI valid 1 37989563001321321009948371762118244 2026-10-08 2026-10-17

RPKI

8 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
120.133.240.0/20 /32 AS4811 apnic wrong origin
120.133.240.0/20 /32 AS9308 apnic wrong origin
120.133.240.0/20 /32 AS9802 apnic wrong origin
120.133.240.0/20 /32 AS17428 apnic authorises it
120.133.240.0/20 /32 AS17621 apnic wrong origin
120.133.240.0/20 /32 AS18244 apnic wrong origin
120.133.240.0/20 /32 AS24400 apnic wrong origin
120.133.240.0/20 /32 AS59020 apnic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
120.133.0.0/16
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2008-04-04

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
120.133.240.0/21 v4 AS17428 VNET Group, Inc. RPKI valid 42 70184134481117428 2026-09-18
120.133.0.0/16 v4 AS23724 China Telecom Beijing IDC Network no ROA 42 7018413423724 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-14 03:34:56Z origin change AS18244 → AS17428 3288403277271744134481117428
2026-10-14 03:32:13Z origin change AS17428 → AS18244 37989563001321321009948371762118244
2026-10-07 16:19:59Z origin change AS18244 → AS17428 1490712994134481117428
2026-10-07 16:09:07Z origin change AS17428 → AS18244 37989563001321321009948371762118244