2400:cd60:1280::/42 RPKI invalid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS65115 RPKI invalid 1 3800113900913905265115 2026-09-18 2026-09-20
AS139052 Power Net RPKI invalid 1 56662130309498139009139052 2026-09-19 2026-09-20

RPKI

1 ROA covers this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2400:cd60::/32 /36 AS139052 apnic wrong origin

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2400:cd60::/32
RIR
APNIC
Country
🇧🇩 BD
Status
allocated
Allocated
2022-12-20

Less specific routes

Announced prefixes that contain this one

Prefix Origin RPKI Peers Sample path First seen
2400:cd60:1000::/36 v6 AS139052 Power Net RPKI valid 38 38001139009139052 2026-09-18
2400:cd60::/32 v6 AS139052 Power Net RPKI valid 38 38001139009139052 2026-09-18

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-19 17:08:44Z origin change AS139052 → AS65115 1763913900913905213905213905213905265115
2026-09-19 03:04:22Z origin change AS65115 → AS139052 443932057943492769399498139009139052139052139052139052