## page was renamed from DNSSEC/キャッシュサーバ/jp
## page was renamed from DNS/DNSSEC/キャッシュサーバ/jp
DNSSECキャッシュがどういう手順でDNS RRのintegrityを検証しているのかを調べる。[[DNS/DNSSEC/query]]

root の trust anchor は正しく設定されているものと信じる。
----
JPサーバのNSレコードを入手する。

$ dig +dnssec jp ns @a.root-servers.net
{{{
; <<>> DiG 9.7.1-P2 <<>> +dnssec jp ns @a.root-servers.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8225
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 10, ADDITIONAL: 14
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 512
;; QUESTION SECTION:
;jp.				IN	NS

;; AUTHORITY SECTION:
jp.			172800	IN	NS	a.dns.jp.
jp.			172800	IN	NS	b.dns.jp.
jp.			172800	IN	NS	c.dns.jp.
jp.			172800	IN	NS	d.dns.jp.
jp.			172800	IN	NS	e.dns.jp.
jp.			172800	IN	NS	f.dns.jp.
jp.			172800	IN	NS	g.dns.jp.
jp.			86400	IN	DS	1369 8 1 59E20603E1BBA03E0A42FF5648A517FD238AE6D9
jp.			86400	IN	DS	1369 8 2 1F3F4A66E954C27FB16DF88CA5EA0E88CA9384690BBCE3A6B7F54E9E 6BCA169B
jp.			86400	IN	RRSIG	DS 8 1 86400 20110306000000 20110226230000 21639 . GAxRRVx+lRNwER11fGIaVhiYbRjDPF/ERL4lJ4bwrmXTnUCxPSd4Tl5a VOuu7IvCiuu7eBzz8Go1JUWEuOBuMphaa3/A0hf9ODOdEAS8ho/ErXae MRNWwoLlzJz/nENlX/ouKTe5g/0+8e7HrKCUShcfNHiYr+P7XBN9Sc+e Npg=

;; ADDITIONAL SECTION:
a.dns.jp.		86400	IN	AAAA	2001:dc4::1
a.dns.jp.		86400	IN	A	203.119.1.1
b.dns.jp.		86400	IN	AAAA	2001:dc2::1
b.dns.jp.		86400	IN	A	202.12.30.131
c.dns.jp.		86400	IN	AAAA	2001:502:ad09::5
c.dns.jp.		86400	IN	A	156.154.100.5
d.dns.jp.		86400	IN	AAAA	2001:240::53
d.dns.jp.		86400	IN	A	210.138.175.244
e.dns.jp.		86400	IN	AAAA	2001:200:c000::35
e.dns.jp.		86400	IN	A	192.50.43.53
f.dns.jp.		86400	IN	AAAA	2001:2f8:0:100::153
f.dns.jp.		86400	IN	A	150.100.2.3
g.dns.jp.		86400	IN	A	203.119.40.1

;; Query time: 99 msec
;; SERVER: 198.41.0.4#53(198.41.0.4)
;; WHEN: Mon Feb 28 13:55:45 2011
;; MSG SIZE  rcvd: 670
}}}