DNS/nlnetlabsについて、ここに記述してください。
NXDOMAIN返答ではあるが、SOAが2nd fragmentに含まれるかもしれない例。-- ToshinoriMaeno 2018-11-21 00:37:16
$ dig +dnssec -t a xxx.nsecwc.nlnetlabs.nl @ns.nlnetlabs.nl
; <<>> DiG 9.12.3 <<>> +dnssec -t a xxx.nsecwc.nlnetlabs.nl @ns.nlnetlabs.nl ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55787 ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;xxx.nsecwc.nlnetlabs.nl. IN A ;; AUTHORITY SECTION: z.qq.nsecwc.nlnetlabs.nl. 3600 IN NSEC *.zz.nsecwc.nlnetlabs.nl. TXT RRSIG NSEC z.qq.nsecwc.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 5 3600 20200101000000 20171108114635 565 nsecwc.nlnetlabs.nl. p2FFG7BgpGMUf2UgWTN9OpnwimHBBRe8u3MYc9y+J9MvagTumLHrhtkA VMzf2q9YuZHdXFKPxJY3fzY7fUTcFw2s9Y4jJok3l4we0RdYDcvcW9NZ URMUFZhv9ejqQrqYDHxcWwPeWqNxsXFwLijXEsTNXTaz4X5u6Mg7RlXu 5j8= !.nsecwc.nlnetlabs.nl. 3600 IN NSEC delegation.nsecwc.nlnetlabs.nl. TXT RRSIG NSEC !.nsecwc.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 3 3600 20200101000000 20171108114635 565 nsecwc.nlnetlabs.nl. ddy1MRbshFuFJswlouNGHsZUF/tYu8BOCztY2JuHeTMyWL7rhRKp73q/ 1RAXMwywKsynT5ioY0bMtEQszeIEn29IYaPDHieLAobjF6BMu1kO7U2/ oEBrSHM/fx28BcaM5G4nfCIm3BlhQhWvk1NDHLn3Q26x4hF/dnmFOUet aXw= nsecwc.nlnetlabs.nl. 3600 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 nsecwc.nlnetlabs.nl. 3600 IN RRSIG SOA 8 3 3600 20200101000000 20171108114635 565 nsecwc.nlnetlabs.nl. bYibpCDg1LgrnYJgVahgu94LBqLIcNs4iC0SW8LV7pTI1hhuFKbLkO2O ekPdkJAWmu/KTytf8D+cdcK6X/9VS8QCVIF5S0hraHtNezu0f1B5ztg3 7Rqy+uJSucNKoykueAsz2z43GMgO0rGH3bqM7+3ii8p2E2rhzqEtG/D3 qyY= ;; Query time: 251 msec ;; SERVER: 185.49.140.60#53(185.49.140.60) ;; WHEN: 水 11月 21 09:30:39 JST 2018 ;; MSG SIZE rcvd: 739