MoinQ: watchNS/TLD/ac

watchNS/acについて、ここに記述してください。

ac.                     172800  IN      NS      c0.nic.ac.
ac.                     172800  IN      NS      a0.nic.ac.
ac.                     172800  IN      NS      b0.nic.ac.
ac.                     172800  IN      NS      a2.nic.ac.
ac.                     172800  IN      NS      ns-a1.ac.
ac.                     172800  IN      NS      ns-a3.ac.

1. gov.ac with DNSSEC

$ dig -t a gov.ac @c0.nic.ac

; <<>> DiG 9.11.2 <<>> -t a gov.ac @c0.nic.ac
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12164
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;gov.ac.                                IN      A

;; AUTHORITY SECTION:
ac.                     900     IN      SOA     a0.nic.ac. noc.afilias-nst.info. 1497206738 10800 3600 2764800 900

;; Query time: 198 msec
;; SERVER: 65.22.162.1#53(65.22.162.1)
;; WHEN: Tue Jan 16 14:30:05 JST 2018
;; MSG SIZE  rcvd: 98

$ dig +dnssec -t a gov.ac @c0.nic.ac

; <<>> DiG 9.11.2 <<>> +dnssec -t a gov.ac @c0.nic.ac
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9764
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;gov.ac.                                IN      A

;; AUTHORITY SECTION:
psdmd2tob59cu5phsqmpvkndffq25pgt.ac. 900 IN NSEC3 1 1 1 D399EAAB Q1HNPEF2REI2EH77GTNLDDRDLOQH9HT6  NS SOA RRSIG DNSKEY NSEC3PARAM
psdmd2tob59cu5phsqmpvkndffq25pgt.ac. 900 IN RRSIG NSEC3 8 2 900 20180206031925 20180116021925 47590 ac. LKbeBD9L1VpWiMHSdnTedpeRzh6nvHQz44xCHeTSO/jIjUoPC5YneZB1 og8iyGe66u25YxY3nam6MN8bvNjYxT9UnYhZqIV3CbaUAoopOJLCI47q vg7xjkd3CWjBJ0bKRzt94G38Mhv/ZYkw3rsmtKbb4nA+j0lsEQFZU0Lv D8g=
ac.                     900     IN      SOA     a0.nic.ac. noc.afilias-nst.info. 1497206738 10800 3600 2764800 900
ac.                     900     IN      RRSIG   SOA 8 1 86400 20180206031925 20180116021925 47590 ac. UFH1X//l+ms3SMsftE6CsAZzm1qbNkaCafzP2HS5OYHXJKutOEsigefm p5C6ZYEWdjWnQ8LKNC0MBusvpLX02Qk8yEoUpQ1OudXEDTZnl6f2QPbI eAV2hxkZHinPWGMPVqz7L1RVmM8es9RtWS5IIlucSs3PV474sxM69+GS OKE=
0fu4q5os8p4qbh56hj8ifvi835ql9qin.ac. 900 IN NSEC3 1 1 1 D399EAAB 0VRQ99T0JHERJC9279H8TFCDBP5KG21H  NS DS RRSIG
0fu4q5os8p4qbh56hj8ifvi835ql9qin.ac. 900 IN RRSIG NSEC3 8 2 900 20180206022423 20180116012423 47590 ac. Hufc6CqBP4ksdks4P2FCB7wliuGzyavoshrFj52Ji7ZRuWF1mTipHaO2 Hzni4vv/MrzVr/4PESr6R/N//mPlcbm/7DmyOfLPTIDwFQj/56+Qdswr olL45pVibjKwOvF4WBXD5dIAxd4l313NHOxT58zpK2caekEyHx6ltHjz lUo=

;; Query time: 174 msec
;; SERVER: 65.22.162.1#53(65.22.162.1)
;; WHEN: Tue Jan 16 14:31:04 JST 2018
;; MSG SIZE  rcvd: 751

2. ???

NSEC3が3個あるのはなに?

$ dig +dnssec -t a gov.ac @ns-a3.ac

; <<>> DiG 9.11.2 <<>> +dnssec -t a gov.ac @ns-a3.ac
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12583
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;gov.ac.                                IN      A

;; AUTHORITY SECTION:
ac.                     900     IN      SOA     a0.nic.ac. noc.afilias-nst.info. 1497206738 10800 3600 2764800 900
ac.                     900     IN      RRSIG   SOA 8 1 86400 20180206031925 20180116021925 47590 ac. UFH1X//l+ms3SMsftE6CsAZzm1qbNkaCafzP2HS5OYHXJKutOEsigefm p5C6ZYEWdjWnQ8LKNC0MBusvpLX02Qk8yEoUpQ1OudXEDTZnl6f2QPbI eAV2hxkZHinPWGMPVqz7L1RVmM8es9RtWS5IIlucSs3PV474sxM69+GS OKE=
psdmd2tob59cu5phsqmpvkndffq25pgt.ac. 900 IN NSEC3 1 1 1 D399EAAB Q1HNPEF2REI2EH77GTNLDDRDLOQH9HT6  NS SOA RRSIG DNSKEY NSEC3PARAM
psdmd2tob59cu5phsqmpvkndffq25pgt.ac. 900 IN RRSIG NSEC3 8 2 900 20180206031925 20180116021925 47590 ac. LKbeBD9L1VpWiMHSdnTedpeRzh6nvHQz44xCHeTSO/jIjUoPC5YneZB1 og8iyGe66u25YxY3nam6MN8bvNjYxT9UnYhZqIV3CbaUAoopOJLCI47q vg7xjkd3CWjBJ0bKRzt94G38Mhv/ZYkw3rsmtKbb4nA+j0lsEQFZU0Lv D8g=
0fu4q5os8p4qbh56hj8ifvi835ql9qin.ac. 900 IN NSEC3 1 1 1 D399EAAB 0VRQ99T0JHERJC9279H8TFCDBP5KG21H  NS DS RRSIG
0fu4q5os8p4qbh56hj8ifvi835ql9qin.ac. 900 IN RRSIG NSEC3 8 2 900 20180206022423 20180116012423 47590 ac. Hufc6CqBP4ksdks4P2FCB7wliuGzyavoshrFj52Ji7ZRuWF1mTipHaO2 Hzni4vv/MrzVr/4PESr6R/N//mPlcbm/7DmyOfLPTIDwFQj/56+Qdswr olL45pVibjKwOvF4WBXD5dIAxd4l313NHOxT58zpK2caekEyHx6ltHjz lUo=
nhqkep5taetplji3190minnm7uoohc83.ac. 900 IN NSEC3 1 1 1 D399EAAB OFA8R107HBRHHSNN7RJI73T5K41MT3FH  NS DS RRSIG
nhqkep5taetplji3190minnm7uoohc83.ac. 900 IN RRSIG NSEC3 8 2 900 20180206022423 20180116012423 47590 ac. NuqfnI/FxUYa4oBBNhQKNYs4fgevl9wRISFIG2Jzjo8mDvHZ/SOGenrA 6ujbrCG/64WxIo1KvjDrpXv697hAStxGuVyQ4oHwpKXo1P1IMxekvpF1 l447zfq7FxhIdLMkRKU8+WB9fW3xvXCX0NAop633lkplRAGwu0vqM6fo i8w=

;; Query time: 6 msec
;; SERVER: 74.116.178.1#53(74.116.178.1)
;; WHEN: Tue Jan 16 14:34:57 JST 2018
;; MSG SIZE  rcvd: 1008