2401:1d40:100::/48 RPKI valid MOAS

Announced by 3 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS59019 Beijing Kingsoft Cloud Internet Technology Co., Ltd RPKI valid 18 24482239112391013311159019 2026-09-18 2026-09-18
AS23724 China Telecom Beijing IDC Network RPKI valid 16 7018413423724 2026-09-18 2026-09-18
AS133119 China Unicom IP network RPKI valid 4 3454955114837133119 2026-09-18 2026-09-18

RPKI

5 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2401:1d40:100::/48 /48 AS23724 apnic wrong origin
2401:1d40:100::/48 /48 AS59019 apnic authorises it
2401:1d40:100::/48 /48 AS133119 apnic wrong origin
2401:1d40::/36 /36 AS59019 apnic too specific
2401:1d40::/32 /32 AS59019 apnic too specific

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2401:1d40::/32
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2017-05-05

Less specific routes

Announced prefixes that contain this one

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-09-18 11:21:51Z origin change AS23724 → AS59019 6939239112391013311159019
2026-09-18 07:10:59Z origin change AS59019 → AS23724 5738142708413423724
2026-09-18 06:41:23Z origin change AS133119 → AS59019 49432215510581156939239112391013311159019
2026-09-18 06:29:34Z origin change AS59019 → AS133119 34927566554837133119
2026-09-18 04:44:44Z origin change AS133119 → AS59019 6939239112391013311159019