2001:f40:11::/48 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS9930 TIME dotCom Bhd RPKI valid 32 176399930 2026-09-18 2026-09-19
AS65206 RPKI invalid 1 38001993065206 2026-09-18 2026-09-19

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2001:f40:11::/48 /48 AS9930 apnic authorises it
2001:f40::/32 /32 AS9930 apnic too specific

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2001:f40::/32
RIR
APNIC
Country
🇲🇾 MY
Status
allocated
Allocated
2004-07-27

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
2001:f40::/32 v6 AS9930 TIME dotCom Bhd RPKI valid 34 380019930 2026-09-18
2000::/6 v6 AS29632 Netassist International EOOD no ROA 1 6121829632 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-19 02:54:08Z origin change AS65206 → AS9930 213241900229149930
2026-09-19 02:54:05Z origin change AS9930 → AS65206 38001993065206
2026-09-19 02:30:33Z origin change AS65206 → AS9930 701829149930
2026-09-19 02:30:32Z origin change AS9930 → AS65206 38001993065206
2026-09-18 06:41:22Z origin change AS65206 → AS9930 494322155103154369399930