Maybe asking from the get-go:
"What are you trying to do?"
because the question asked is fraught with peril and disaster...
Why? When you have a serious problem with a specific ASN, it's not unreasonable to drop traffic to that entire ASN.
When you have a serious problem predominantly originating from a certain country, why is it unreasonable to drop traffic to that entire country?
Just because I own an ASN and participate in the world of BGP, doesn't mean I *must* accept everyone's traffic from all over the world. My network, my rules(1)
(1) my as in the ASN whom choose to drop prefixes for an entire ASN and/or country.