211.99.103.0/24 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS134763 CHINANET Guangdong province network RPKI valid 31 70184134134763 2026-09-18 2026-09-23
AS134543 China Unicom Guangdong IP network RPKI valid 10 3454955114837134543 2026-09-18 2026-09-23

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
211.99.103.0/24 /24 AS134543 apnic wrong origin
211.99.103.0/24 /24 AS134763 apnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
211.99.96.0/19
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
1999-12-14

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
211.99.96.0/20 v4 AS134763 CHINANET Guangdong province network no ROA 41 70184134134763 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-18 07:14:22Z origin change AS134543 → AS134763 57381427084134134763
2026-09-18 06:29:50Z origin change AS134763 → AS134543 34927566554837134543