2408:4000:101::/48 RPKI valid MOAS

Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.

This prefix is announced by more than one AS. Compare how many collector peers see each origin below: a hijack is usually visible as a second origin seen by far fewer peers than the legitimate one.

Origins

Origin ASRPKI Peers seeing itSample path First seenLast seen
AS45102 Alibaba (US) Technology Co., Ltd. RPKI valid 34 38001349145102 2026-09-18 2026-11-08
AS37963 Hangzhou Alibaba Advertising Co.,Ltd. RPKI valid 1 34549551148371762137963 2026-09-18 2026-11-08

RPKI

2 ROAs cover this prefix

ROA prefixMax lengthAuthorised originTrust anchorResult for this route
2408:4000::/22 /48 AS37963 apnic wrong origin
2408:4000::/22 /48 AS45102 apnic authorises it

Registry

Who this address space is delegated to, regardless of whether it is routed

Delegated block
2408:4000::/22
RIR
APNIC
Country
🇨🇳 CN
Status
allocated
Allocated
2015-12-21

Less specific routes

Announced prefixes that contain this one

More specific routes

0 announced prefixes inside this one

Nothing more specific is announced.

Recorded changes

WhenChangeOriginPath
2026-11-02 00:13:23Z origin change AS45102 → AS37963 34549551148371762137963
2026-11-01 16:44:06Z origin change AS37963 → AS45102 388556939477545102
2026-11-01 13:33:43Z origin change AS45102 → AS37963 34549551148371762137963
2026-11-01 13:03:04Z origin change AS37963 → AS45102 44393580576939477545102
2026-11-01 12:50:35Z origin change AS45102 → AS37963 34549551148371762137963
2026-10-29 17:17:30Z origin change AS37963 → AS45102 379896939477545102