MoinQ:

ルートゾーンKSK/日本では/dns-oarc.net/段階的検査/rst.x4090.rs.dns-oarc.netについて、ここに記述してください。

1. rst.x4090.rs.dns-oarc.net.

;; ANSWER SECTION:
rs.dns-oarc.net.        60      IN      CNAME   rst.x4090.rs.dns-oarc.net.

についてきたAuthorityなどは信用してはいけない。（毒の可能性がある）

そこで、すでに得られているzone cut情報を使ってといあわせる。i 

rs.dns-oarc.net.        3600    IN      NS      ns00.rs.dns-oarc.net.

2. 1

またも長い返答が返る。これを受け取れると、次に進める。:-) 

$ dig txt rst.x4090.rs.dns-oarc.net. @ns00.rs.dns-oarc.net.

; <<>> DiG 9.11.1-P3 <<>> txt rst.x4090.rs.dns-oarc.net. @ns00.rs.dns-oarc.net.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61908
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 106, ADDITIONAL: 107

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;rst.x4090.rs.dns-oarc.net.     IN      TXT

;; AUTHORITY SECTION:
x4090.rs.dns-oarc.net.  60      IN      NS      ns00.x4090.rs.dns-oarc.net.
x4090.rs.dns-oarc.net.  60      IN      NS      ns01.x4090.rs.dns-oarc.net.
...
x4090.rs.dns-oarc.net.  60      IN      NS      ns103.x4090.rs.dns-oarc.net.
x4090.rs.dns-oarc.net.  60      IN      NS      ns104.x4090.rs.dns-oarc.net.
x4090.rs.dns-oarc.net.  60      IN      NS      ns105.x4090.rs.dns-oarc.net.

;; ADDITIONAL SECTION:
ns00.x4090.rs.dns-oarc.net. 60  IN      A       64.191.0.134
ns01.x4090.rs.dns-oarc.net. 60  IN      A       64.191.0.134
ns02.x4090.rs.dns-oarc.net. 60  IN      A       64.191.0.134
...
ns103.x4090.rs.dns-oarc.net. 60 IN      A       64.191.0.134
ns104.x4090.rs.dns-oarc.net. 60 IN      A       64.191.0.134
ns105.x4090.rs.dns-oarc.net. 60 IN      A       64.191.0.134

;; Query time: 141 msec
;; SERVER: 64.191.0.133#53(64.191.0.133)
;; WHEN: Thu Aug 24 00:32:51 JST 2017
;; MSG SIZE  rcvd: 4071

3. 2

またもCNAMEが返ってくる。（今日はここまで）-- ToshinoriMaeno 2017-08-23 15:38:06

$ dig txt rst.x4090.rs.dns-oarc.net. @ns00.x4090.rs.dns-oarc.net. 

; <<>> DiG 9.11.1-P3 <<>> txt rst.x4090.rs.dns-oarc.net. @ns00.x4090.rs.dns-oarc.net.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22533
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 105, ADDITIONAL: 106

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;rst.x4090.rs.dns-oarc.net.     IN      TXT

;; ANSWER SECTION:
rst.x4090.rs.dns-oarc.net. 59   IN      CNAME   rst.x4058.x4090.rs.dns-oarc.net.

;; AUTHORITY SECTION:
x4058.x4090.rs.dns-oarc.net. 59 IN      NS      ns00.x4058.x4090.rs.dns-oarc.net.
x4058.x4090.rs.dns-oarc.net. 59 IN      NS      ns01.x4058.x4090.rs.dns-oarc.net.
...