139.159.104.0/22 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS63199 CDS Global Cloud Co., Ltd RPKI valid 43 3454963199 2026-09-18 2026-10-17
AS4811 China Telecom Shanghai IDC Network RPKI invalid 1 557202376441344811 2026-10-01 2026-10-17

RPKI

1 ROA covers this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
139.159.104.0/22 /24 AS63199 apnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
139.159.0.0/16
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2011-03-09

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

3 announced prefixes inside this one

Recorded changes

WhenChangeOriginPath
2026-10-15 18:47:23Z origin change AS4811 → AS63199 202365693947669957928663199
2026-10-15 17:57:57Z origin change AS63199 → AS4811 557202376441344811
2026-10-08 17:21:23Z origin change AS4811 → AS63199 202365693947669957928663199
2026-10-08 17:08:45Z origin change AS63199 → AS4811 557202376441344811
2026-10-07 19:03:46Z origin change AS4811 → AS63199 202365693947669957928663199
2026-10-07 17:58:31Z origin change AS63199 → AS4811 557202376441344811