ルートゾーンKSK/primingについて、ここに記述してください。 RRSIGなし？ つまり、A レコードはroot zoneの管理下ではないということ。 {{{ $ dig +dnssec +norec k.root-servers.net @k.root-servers.net ; <<>> DiG 9.11.1 <<>> +dnssec +norec k.root-servers.net @k.root-servers.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27748 ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ; COOKIE: 0c627f712b8fa54ebb204cbb5975296016cccdf4c8205e1f (good) ;; QUESTION SECTION: ;k.root-servers.net. IN A ;; ANSWER SECTION: k.root-servers.net. 3600000 IN A 193.0.14.129 ;; Query time: 9 msec ;; SERVER: 193.0.14.129#53(193.0.14.129) ;; WHEN: Mon Jul 24 07:55:28 JST 2017 ;; MSG SIZE rcvd: 91 }}} $ dig +dnssec m.root-servers.net @a.root-servers.net {{{ ; <<>> DiG 9.11.1 <<>> +dnssec m.root-servers.net @a.root-servers.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63740 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 26 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;m.root-servers.net. IN A ;; ANSWER SECTION: m.root-servers.net. 3600000 IN A 202.12.27.33 ;; AUTHORITY SECTION: root-servers.net. 3600000 IN NS a.root-servers.net. root-servers.net. 3600000 IN NS f.root-servers.net. root-servers.net. 3600000 IN NS l.root-servers.net. root-servers.net. 3600000 IN NS d.root-servers.net. root-servers.net. 3600000 IN NS k.root-servers.net. root-servers.net. 3600000 IN NS c.root-servers.net. root-servers.net. 3600000 IN NS j.root-servers.net. root-servers.net. 3600000 IN NS b.root-servers.net. root-servers.net. 3600000 IN NS i.root-servers.net. root-servers.net. 3600000 IN NS e.root-servers.net. root-servers.net. 3600000 IN NS m.root-servers.net. root-servers.net. 3600000 IN NS g.root-servers.net. root-servers.net. 3600000 IN NS h.root-servers.net. ;; ADDITIONAL SECTION: a.root-servers.net. 3600000 IN A 198.41.0.4 a.root-servers.net. 3600000 IN AAAA 2001:503:ba3e::2:30 f.root-servers.net. 3600000 IN A 192.5.5.241 f.root-servers.net. 3600000 IN AAAA 2001:500:2f::f l.root-servers.net. 3600000 IN A 199.7.83.42 l.root-servers.net. 3600000 IN AAAA 2001:500:9f::42 d.root-servers.net. 3600000 IN A 199.7.91.13 d.root-servers.net. 3600000 IN AAAA 2001:500:2d::d k.root-servers.net. 3600000 IN A 193.0.14.129 k.root-servers.net. 3600000 IN AAAA 2001:7fd::1 c.root-servers.net. 3600000 IN A 192.33.4.12 c.root-servers.net. 3600000 IN AAAA 2001:500:2::c j.root-servers.net. 3600000 IN A 192.58.128.30 j.root-servers.net. 3600000 IN AAAA 2001:503:c27::2:30 b.root-servers.net. 3600000 IN A 192.228.79.201 b.root-servers.net. 3600000 IN AAAA 2001:500:200::b i.root-servers.net. 3600000 IN A 192.36.148.17 i.root-servers.net. 3600000 IN AAAA 2001:7fe::53 e.root-servers.net. 3600000 IN A 192.203.230.10 e.root-servers.net. 3600000 IN AAAA 2001:500:a8::e m.root-servers.net. 3600000 IN AAAA 2001:dc3::35 g.root-servers.net. 3600000 IN A 192.112.36.4 g.root-servers.net. 3600000 IN AAAA 2001:500:12::d0d h.root-servers.net. 3600000 IN A 198.97.190.53 h.root-servers.net. 3600000 IN AAAA 2001:500:1::53 ;; Query time: 62 msec ;; SERVER: 198.41.0.4#53(198.41.0.4) ;; WHEN: Mon Jul 24 07:48:01 JST 2017 ;; MSG SIZE rcvd: 825 }}} == NS == {{{ $ dig +dnssec +norec -t ns . @c.root-servers.net ; <<>> DiG 9.11.1 <<>> +dnssec +norec -t ns . @c.root-servers.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31424 ;; flags: qr aa; QUERY: 1, ANSWER: 14, AUTHORITY: 0, ADDITIONAL: 27 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 518400 IN NS c.root-servers.net. . 518400 IN NS l.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS h.root-servers.net. . 518400 IN NS i.root-servers.net. . 518400 IN NS j.root-servers.net. . 518400 IN NS k.root-servers.net. . 518400 IN NS m.root-servers.net. . 518400 IN NS f.root-servers.net. . 518400 IN NS g.root-servers.net. . 518400 IN NS d.root-servers.net. . 518400 IN NS a.root-servers.net. . 518400 IN NS e.root-servers.net. . 518400 IN RRSIG NS 8 0 518400 20170805170000 20170723160000 15768 . VCbNOaTpB6vKmw3R9IdTGcYpscjgbwQanmL5yS+vvQrSnhlOL9RZOHve 2+QjWdO3Eq9lEreTzW9B+j67yKwy0bfy7Tx1N01LlnRSxjyoVlBetLvu bweVomqzM59/2XxTJxYlpcb1obwuJW0cG2YwOEGdzxa90XBFKsLLu9C3 3cxkJrtg725ah0OZre91hno71BFSVo7CaIW7yJifofmnmej+msS7MERy 2pbRCKZ9D7+mxC6uHDMs3YxqBr82zg/knX8AIZsWljFxL9/3V6jauKyM LPdedLMqlMue+woVasAVev42dDikm2JMope2lL1ixXUrJI0JbuSp8U6I FoWGDw== ;; ADDITIONAL SECTION: a.root-servers.net. 3600000 IN A 198.41.0.4 b.root-servers.net. 3600000 IN A 192.228.79.201 c.root-servers.net. 3600000 IN A 192.33.4.12 d.root-servers.net. 3600000 IN A 199.7.91.13 e.root-servers.net. 3600000 IN A 192.203.230.10 f.root-servers.net. 3600000 IN A 192.5.5.241 g.root-servers.net. 3600000 IN A 192.112.36.4 h.root-servers.net. 3600000 IN A 198.97.190.53 i.root-servers.net. 3600000 IN A 192.36.148.17 j.root-servers.net. 3600000 IN A 192.58.128.30 k.root-servers.net. 3600000 IN A 193.0.14.129 l.root-servers.net. 3600000 IN A 199.7.83.42 m.root-servers.net. 3600000 IN A 202.12.27.33 a.root-servers.net. 3600000 IN AAAA 2001:503:ba3e::2:30 b.root-servers.net. 3600000 IN AAAA 2001:500:200::b c.root-servers.net. 3600000 IN AAAA 2001:500:2::c d.root-servers.net. 3600000 IN AAAA 2001:500:2d::d e.root-servers.net. 3600000 IN AAAA 2001:500:a8::e f.root-servers.net. 3600000 IN AAAA 2001:500:2f::f g.root-servers.net. 3600000 IN AAAA 2001:500:12::d0d h.root-servers.net. 3600000 IN AAAA 2001:500:1::53 i.root-servers.net. 3600000 IN AAAA 2001:7fe::53 j.root-servers.net. 3600000 IN AAAA 2001:503:c27::2:30 k.root-servers.net. 3600000 IN AAAA 2001:7fd::1 l.root-servers.net. 3600000 IN AAAA 2001:500:9f::42 m.root-servers.net. 3600000 IN AAAA 2001:dc3::35 ;; Query time: 127 msec ;; SERVER: 192.33.4.12#53(192.33.4.12) ;; WHEN: Mon Jul 24 07:53:55 JST 2017 ;; MSG SIZE rcvd: 1097 }}}