140.207.197.0/24 RPKI invalid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS138421 China Unicom RPKI invalid 7 57381427084837138421 2026-10-21 2026-10-23
AS17621 China Unicom Shanghai network RPKI valid 1 21324190025511483717621 2026-09-18 2026-10-23

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
140.207.197.0/24 /24 AS17621 apnic wrong origin
140.207.0.0/16 /16 AS17621 apnic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
140.206.0.0/15
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2011-03-09

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
140.207.0.0/16 v4 AS17621 China Unicom Shanghai network RPKI valid 42 345495511483717621 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-21 15:39:23Z origin change AS17621 → AS138421 2020569394837138421
2026-10-21 09:51:52Z origin change AS138421 → AS17621 33331136291433564837483717621
2026-10-21 09:51:42Z origin change AS17621 → AS138421 3800174734837138421
2026-10-21 08:22:55Z origin change AS138421 → AS17621 61218693933564837483717621
2026-10-21 07:35:38Z origin change AS17621 → AS138421 49673123894837138421