Out of interest, take an AS1 with single malicious upstream AS2, what stops AS2 to pretend that AS1 has made bogus announcements and make them for its own purposes? This situation looks pretty real without RPKI or other advertisement strengthening methods, as I could see. How experts are supposed to behave in this situation?