185.254.243.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS40605 ANYCONNECT INFORMATION TECHNOLOGY CO., LTD RPKI valid 21 2448213796940605 2026-09-18 2026-09-20
AS2914 NTT America, Inc. RPKI valid 20 380012914 2026-09-18 2026-09-20

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
185.254.243.0/24 /24 AS2914 apnic wrong origin
185.254.243.0/24 /24 AS40605 apnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
185.254.240.0/22
RIR
APNIC
Country
🇯🇵 JP
Status
allocated
Allocated
2018-04-11

Less specific routes

Announced prefixes that contain this one

Nothing less specific is announced.

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-19 08:43:46Z origin change AS2914 → AS40605 328840327727174249713796940605
2026-09-19 08:30:36Z origin change AS40605 → AS2914 2950415935900233562914