139.5.60.0/22 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS134764 CHINANET Guangdong province network RPKI valid 30 70184134134764 2026-09-18 2026-09-29
AS136958 China Unicom Guangdong IDC Network RPKI valid 10 3454955114837136958 2026-09-18 2026-09-29

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
139.5.60.0/22 /22 AS134764 apnic authorises it
139.5.60.0/22 /22 AS136958 apnic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
139.5.60.0/22
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2016-03-03

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-28 14:36:57Z origin change AS136958 → AS134764 3492712994134134764
2026-09-28 14:36:53Z origin change AS134764 → AS136958 3492712994837136958
2026-09-28 14:27:13Z origin change AS136958 → AS134764 2265212994134134764
2026-09-28 14:25:54Z origin change AS134764 → AS136958 2265212994837136958
2026-09-28 14:25:20Z origin change AS136958 → AS134764 3492712994134134764
2026-09-28 14:25:18Z origin change AS134764 → AS136958 3492712994837136958
2026-09-27 21:04:06Z origin change AS136958 → AS134764 85232574134134764
2026-09-27 20:29:51Z origin change AS134764 → AS136958 14035777014837136958
2026-09-27 05:31:40Z origin change AS136958 → AS134764 3288403277271744134134764
2026-09-27 03:52:08Z origin change AS134764 → AS136958 1763969394837136958
2026-09-18 07:14:25Z origin change AS136958 → AS134764 57381427084134134764