@next_hopself on Backlist

Malformed AS_PATHs can bypass ASPA unless you enforce First AS

BGP hijacks can still pass newer validation schemes when networks fail to enforce that the first AS in a received route is the neighbor that sent it