203.168.129.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS211392 DREAM CLOUD INNOVATION LIMITED RPKI valid 1 20409220766291693528089661580258453211392 2026-09-18 2026-10-25
AS135074 DREAM CLOUD INNOVATION PTE. LTD. RPKI valid 1 49673315003113323764135074 2026-10-10 2026-10-25

RPKI

11 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
203.168.129.0/24 /24 AS135074 apnic wrong origin
203.168.129.0/24 /24 AS146806 apnic wrong origin
203.168.129.0/24 /24 AS211392 apnic authorises it
203.168.128.0/23 /23 AS146806 apnic wrong origin
203.168.128.0/23 /23 AS211392 apnic too specific
203.168.128.0/22 /22 AS13335 apnic wrong origin
203.168.128.0/22 /22 AS135074 apnic wrong origin
203.168.128.0/22 /22 AS146806 apnic wrong origin
203.168.128.0/22 /22 AS209242 apnic wrong origin
203.168.128.0/22 /22 AS211392 apnic too specific
203.168.128.0/22 /24 AS401160 apnic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
203.168.128.0/22
RIR
APNIC
Country
πŸ‡ΈπŸ‡¬ SG
Status
allocated
Allocated
2000-05-17

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
203.168.128.0/22 v4 AS13335 Cloudflare, Inc. RPKI valid 48 3454913335 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-10-23 08:05:00Z origin change AS135074 β†’ AS211392 20409220766291693528089661580258453211392
2026-10-23 08:02:59Z origin change AS211392 β†’ AS135074 204092340192916935280771323764135074