2001:f40:11::/48 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin AS	RPKI	Peers seeing it	Sample path	First seen	Last seen
AS9930 TIME dotCom Bhd	RPKI valid	31	37989 9930	2026-09-19	2026-11-04
AS65206	RPKI invalid	1	38001 9930 65206	2026-09-19	2026-11-04

RPKI

2 ROAs cover this prefix

ROA prefix	Max length	Authorised origin	Trust anchor	Result for this route
2001:f40:11::/48	/48	AS9930	apnic	authorises it
2001:f40::/32	/32	AS9930	apnic	too specific

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block: 2001:f40::/32
RIR: APNIC
Country: 🇲🇾 MY
Status: allocated
Allocated: 2004-07-27

Less specific routes

Announced prefixes that contain this one

Prefix	Origin	RPKI	Peers	Sample path	First seen
2001:f40::/32 v6	AS9930 TIME dotCom Bhd	RPKI valid	32	38001 9930	2026-09-18
2000::/6 v6	AS29632 Netassist International EOOD	no ROA	1	61218 29632	2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

When	Change	Origin	Path
2026-10-31 16:24:25Z	origin change	AS65206 → AS9930	37989 9930
2026-10-31 01:23:30Z	origin change	AS9930 → AS65206	38001 9930 65206
2026-10-27 19:09:22Z	origin change	AS65206 → AS9930	37989 9930
2026-10-27 16:46:23Z	origin change	AS9930 → AS65206	38001 9930 65206