DNSSEC Analyzer - ASAP.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-20 02:25:15 UTC, NTP stratum 4

Analyzing DNSSEC problems for ASAP.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 13687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190502000000 20190411000000 20326 . kquHnaziV2mG5TuwV6/NotYIe6Jkf2tLUNkCkR89a97gGLzCVZGtCrq5qLM+pvgru2Jji3h4w7dI h1oalr3fMmrAuX+hcbBYI2H/JzfTCvo1i3gZf/ZYIelFSD19cjgFaGl7sxXcLGuMXQaozHJ4K46l VEClvyy4crkbAuSxA4045om/9eRfxw+C2OMHhrZJIu59m9+oK8kiaxiAq/cufmQI4eCLJtfwVC6X f2H+jkoXQHklFvdrCJvw+WiXQezmN2rGy2ihUda3DBEcTujyhG1a6oqR71EF6dyjhv8Lqn8vFv78 XD54lrf8eCj4RZK69Nl3pQpNdRYFcAXLPr4psg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190502000000 20190411000000 20326 . kquHnaziV2mG5TuwV6/NotYIe6Jkf2tLUNkCkR89a97gGLzCVZGtCrq5qLM+pvgru2Jji3h4w7dI h1oalr3fMmrAuX+hcbBYI2H/JzfTCvo1i3gZf/ZYIelFSD19cjgFaGl7sxXcLGuMXQaozHJ4K46l VEClvyy4crkbAuSxA4045om/9eRfxw+C2OMHhrZJIu59m9+oK8kiaxiAq/cufmQI4eCLJtfwVC6X f2H+jkoXQHklFvdrCJvw+WiXQezmN2rGy2ihUda3DBEcTujyhG1a6oqR71EF6dyjhv8Lqn8vFv78 XD54lrf8eCj4RZK69Nl3pQpNdRYFcAXLPr4psg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to f.root-servers.net for ASAP.GOV/A
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for ASAP.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (666 bytes) ;; HEADER SECTION ;; id = 38674 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190502170000 20190419160000 25266 . JNR110HTPcViZ86tz1CmK3VDl+PYDeeLUuYbewYRH+uzpdEEI7sOoscfZyxYqJeqdhVc22/77fWK Klso1LC2gtXreVX+MMNi9vu4NMeboI5L9VeMc1wN7gjwJpbY4hLbRM2lcwpJjEI57ZjOIxk/WH5e HGF6GKSt3F43iHp5F3jjYLHd4uVZFbnSetTKA86TF8VZB1HLK3lOCCjRUIU1B2mZ60SO3ondbGTU BAxYe4StheLZ21xzAlBt8m6aSWQCg8ia9xoup3woUb8P8DpBbvKAj5/BjVx72r1kTp0/U42JpZpA o7nJJOSrqvjR46Iy8W7K/UvgccuJTyZOCOelIA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 29503 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190502170000 20190419160000 25266 . JNR110HTPcViZ86tz1CmK3VDl+PYDeeLUuYbewYRH+uzpdEEI7sOoscfZyxYqJeqdhVc22/77fWK Klso1LC2gtXreVX+MMNi9vu4NMeboI5L9VeMc1wN7gjwJpbY4hLbRM2lcwpJjEI57ZjOIxk/WH5e HGF6GKSt3F43iHp5F3jjYLHd4uVZFbnSetTKA86TF8VZB1HLK3lOCCjRUIU1B2mZ60SO3ondbGTU BAxYe4StheLZ21xzAlBt8m6aSWQCg8ia9xoup3woUb8P8DpBbvKAj5/BjVx72r1kTp0/U42JpZpA o7nJJOSrqvjR46Iy8W7K/UvgccuJTyZOCOelIA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 406 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (406 bytes) ;; HEADER SECTION ;; id = 39114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190502170000 20190419160000 25266 . JNR110HTPcViZ86tz1CmK3VDl+PYDeeLUuYbewYRH+uzpdEEI7sOoscfZyxYqJeqdhVc22/77fWK Klso1LC2gtXreVX+MMNi9vu4NMeboI5L9VeMc1wN7gjwJpbY4hLbRM2lcwpJjEI57ZjOIxk/WH5e HGF6GKSt3F43iHp5F3jjYLHd4uVZFbnSetTKA86TF8VZB1HLK3lOCCjRUIU1B2mZ60SO3ondbGTU BAxYe4StheLZ21xzAlBt8m6aSWQCg8ia9xoup3woUb8P8DpBbvKAj5/BjVx72r1kTp0/U42JpZpA o7nJJOSrqvjR46Iy8W7K/UvgccuJTyZOCOelIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190502170000 20190419160000 25266 . JNR110HTPcViZ86tz1CmK3VDl+PYDeeLUuYbewYRH+uzpdEEI7sOoscfZyxYqJeqdhVc22/77fWK Klso1LC2gtXreVX+MMNi9vu4NMeboI5L9VeMc1wN7gjwJpbY4hLbRM2lcwpJjEI57ZjOIxk/WH5e HGF6GKSt3F43iHp5F3jjYLHd4uVZFbnSetTKA86TF8VZB1HLK3lOCCjRUIU1B2mZ60SO3ondbGTU BAxYe4StheLZ21xzAlBt8m6aSWQCg8ia9xoup3woUb8P8DpBbvKAj5/BjVx72r1kTp0/U42JpZpA o7nJJOSrqvjR46Iy8W7K/UvgccuJTyZOCOelIA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 889 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (889 bytes) ;; HEADER SECTION ;; id = 21168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. ocIs3qBX77aDfCB2wAonk4kOqze7WaOKI/7LzbvuBdk5MVppdtS0gPFNZe8ipffRxym+rApFZHQA 9K/V52gv58SgVLlp0yLuytomPI0/ut/a+ZRzxNOJLue+9OzwKLYskFdMeZ2TaBaocBL2kdy6hZUw zbh8fobHnwCldcCUa6hwYQ3h+zwcIJSNVLYWRDymNcsEXO9cGeNK9A4WWkxS2ZTCZ5DbEWhjz6Sg iEyebGW6VCRKhgRLhEY39YbDtAOHwEAiIyvzYcOHCelHIzFgQjUUH4znPy97mt9BBMsX1lusKrqt 2FzZKzR8RM7k911VKhSs8iLtvc8/u9R00fxIgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. ocIs3qBX77aDfCB2wAonk4kOqze7WaOKI/7LzbvuBdk5MVppdtS0gPFNZe8ipffRxym+rApFZHQA 9K/V52gv58SgVLlp0yLuytomPI0/ut/a+ZRzxNOJLue+9OzwKLYskFdMeZ2TaBaocBL2kdy6hZUw zbh8fobHnwCldcCUa6hwYQ3h+zwcIJSNVLYWRDymNcsEXO9cGeNK9A4WWkxS2ZTCZ5DbEWhjz6Sg iEyebGW6VCRKhgRLhEY39YbDtAOHwEAiIyvzYcOHCelHIzFgQjUUH4znPy97mt9BBMsX1lusKrqt 2FzZKzR8RM7k911VKhSs8iLtvc8/u9R00fxIgg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for ASAP.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for ASAP.GOV/A: 'IPv6 transport disabled'
	Received 385 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (385 bytes) ;; HEADER SECTION ;; id = 46929 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ASAP.GOV. 86400 IN NS ns2.twai.GOV. ASAP.GOV. 86400 IN NS ns1.twai.GOV. ASAP.GOV. 3600 IN DS ( 9003 7 2 3e30971740331cc1b65381e9bd7390ae3f32c2aaa0c5701c520b58e46ae744ff ) ASAP.GOV. 3600 IN DS 9003 7 1 540769c22ddf51257898d6d044b9d3af8ed9d15d ASAP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. WjNl30Er19EmfM6KfZTYkfarefn8k2zLWj+wNJxNyVEd57SllvWcSx6/ojCd4yCzsXmjG/EI/i0H JfjxaKjmMmwn8hR49O9otB+Qmc7ue/OJXDHe2mM5XPjmB6+pLPDbElJCv64IxChDhBJqnlVRd1i6 3BAdr5YSD07fs6zylLA= ) ;; ADDITIONAL SECTION (4 records) ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ns1.twai.GOV. 86400 IN A 199.169.194.28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for ASAP.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for ASAP.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 385 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (385 bytes) ;; HEADER SECTION ;; id = 36490 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ASAP.GOV. 86400 IN NS ns1.twai.GOV. ASAP.GOV. 86400 IN NS ns2.twai.GOV. ASAP.GOV. 3600 IN DS 9003 7 1 540769c22ddf51257898d6d044b9d3af8ed9d15d ASAP.GOV. 3600 IN DS ( 9003 7 2 3e30971740331cc1b65381e9bd7390ae3f32c2aaa0c5701c520b58e46ae744ff ) ASAP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. WjNl30Er19EmfM6KfZTYkfarefn8k2zLWj+wNJxNyVEd57SllvWcSx6/ojCd4yCzsXmjG/EI/i0H JfjxaKjmMmwn8hR49O9otB+Qmc7ue/OJXDHe2mM5XPjmB6+pLPDbElJCv64IxChDhBJqnlVRd1i6 3BAdr5YSD07fs6zylLA= ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone ASAP.GOV

ASAP.GOV

	Checking DS between GOV and ASAP.GOV
	Query to c.gov-servers.net for ASAP.GOV/DS
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for ASAP.GOV/DS: 'IPv6 transport disabled'
	Received 284 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (284 bytes) ;; HEADER SECTION ;; id = 26341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN DS ;; ANSWER SECTION (3 records) ASAP.GOV. 3600 IN DS 9003 7 1 540769c22ddf51257898d6d044b9d3af8ed9d15d ASAP.GOV. 3600 IN DS ( 9003 7 2 3e30971740331cc1b65381e9bd7390ae3f32c2aaa0c5701c520b58e46ae744ff ) ASAP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. WjNl30Er19EmfM6KfZTYkfarefn8k2zLWj+wNJxNyVEd57SllvWcSx6/ojCd4yCzsXmjG/EI/i0H JfjxaKjmMmwn8hR49O9otB+Qmc7ue/OJXDHe2mM5XPjmB6+pLPDbElJCv64IxChDhBJqnlVRd1i6 3BAdr5YSD07fs6zylLA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for ASAP.GOV in the GOV zone
	DS=9003/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=9003/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`ASAP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. WjNl30Er19EmfM6KfZTYkfarefn8k2zLWj+wNJxNyVEd57SllvWcSx6/ojCd4yCzsXmjG/EI/i0H JfjxaKjmMmwn8hR49O9otB+Qmc7ue/OJXDHe2mM5XPjmB6+pLPDbElJCv64IxChDhBJqnlVRd1i6 3BAdr5YSD07fs6zylLA= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=9003/SHA-1 is now in the chain-of-trust
	`ASAP.GOV. 3600 IN DS 9003 7 1 540769c22ddf51257898d6d044b9d3af8ed9d15d`
	`ASAP.GOV. 3600 IN DS ( 9003 7 2 3e30971740331cc1b65381e9bd7390ae3f32c2aaa0c5701c520b58e46ae744ff )`
	Query to ns1.twai.GOV for ASAP.GOV/DNSKEY
	Received 1241 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1241 bytes) ;; HEADER SECTION ;; id = 33193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) ASAP.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAZZF0QUF+NC7hWEYY41mmoO7KaYHglXGEzBq2+VCs8DW7YS5GPLcizcVm99aJFbfDJovule8 FO8HM3+x9axDCZ4V2VFJqqNXaNRXjB7q+CpqrbVeZgfjfOIt0T4xfXlUcZEPtvl5KxXk0Fj465VM k+Bqll3sIUmllE3T56sUd6iH ) ; Key ID = 30065 ASAP.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAa8VdsTAgW1m9WNknnnu/10BJZYv5F67/hLfIvG1+hPXYdf2urWaBoE5HobwnIQZJTFlDgWx RTwQLwpdg1AW/IzWINdaNBuj/T2GpYrSlpYMMA0SNKGf1XniKPinZ6XW+RUJhpxRVcBMXkLzV0FG NhgOY5HKRDleCgJqVI9mlbwn ) ; Key ID = 52289 ASAP.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAcMyj128v+iZ+vhUQCC6ZFDeFXwVSkax3jhFpWn7nQ8N7K7xz9zKQE2pGJmZH1Nse1TygFAH 8RgNm+WocmmW7E+9l/G/Fu6329gFbPJhZNZi090U589pwCFpyzRwC9Lau5lJtqM24qlaWGazKiRU UESFiui82lz2pX1gGiDnv/vAXyBvZ+Xitz0gDQQeFAVQtf0X4vdS7vP1gR3PSIGFYPtv0YY9j65F 1eIb2Lzm8szQ7xGlEFEXALa45gmGyRRCN9DuF3bvUmdfjWYcIoijqyUO7fdt1GyY1Scsxxi22oPe bvC3lwfJkSxYg43OiKeTgrdo55Lo9u3FnX1EX9oUbC0= ) ; Key ID = 9003 ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190426135604 20190419135604 30065 asap.gov. famV4NDgNPdjMoAnTwtrqU8HiBZT7aFqLCBFp6CpumcEGTqBoD2ar7Dl48Ix4Ks+G7ONyRUJ+ZYM zMaqB3clXnS7jarLQ8J9EPUMncgBT66bonupt8wiRrx6c7uATTS+4swGgaD7bJbSWX/5hV9A/14v nvW6X/Xl+LZ2Mrf9Ofs= ) ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190426135604 20190419135604 52289 asap.gov. Q4t1K3L+qX8JdzBYhOveuG4jw8TTM0gjMlBlTcx+umUnmCZZ1OkaDQUhltwPnT64PgRcu7wC0PJC uab2bNrbbVYgl128gNYv1/tQ8IpyjZJlri18FNvtEuJWcZNeAzFNp4vT59Se2WNBI/U9T0TLoi8k jq5OeVdQXMtsZ4eNjI8= ) ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190426135604 20190419135604 9003 asap.gov. arn7Bps2JihPSc/EeN8ZN6Vm7ryIQjnFJhtlOv0531XtwhAwb8sjNBC/8JPzkTIIV0MyosDMCKOb QiMTiKpWPEedlFVEkOS3Ylw24FhmbRa+BJwb+BS+KkHpPK4mMaJfQjij+co7mPrDNfsrWUFZnemz wEKJiXYB0kW51VRBVepiooLWXDErkgvH/t6ylMD5ydDZCzGbehIAA9AuJx/fIpiS49OraOEw9DdC XYiYiy58yirf/zjhXg3Xiz0Md89SXWVbKEj88LQGytWJlCqt2EjYr/HpUPOirKQYQrYd063wp07P znz6R+r1i4v+4/ssOxLCxsvI7qYawogzUXN7QQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ASAP.GOV
	`ASAP.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAZZF0QUF+NC7hWEYY41mmoO7KaYHglXGEzBq2+VCs8DW7YS5GPLcizcVm99aJFbfDJovule8 FO8HM3+x9axDCZ4V2VFJqqNXaNRXjB7q+CpqrbVeZgfjfOIt0T4xfXlUcZEPtvl5KxXk0Fj465VM k+Bqll3sIUmllE3T56sUd6iH ) ; Key ID = 30065`
	`ASAP.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAa8VdsTAgW1m9WNknnnu/10BJZYv5F67/hLfIvG1+hPXYdf2urWaBoE5HobwnIQZJTFlDgWx RTwQLwpdg1AW/IzWINdaNBuj/T2GpYrSlpYMMA0SNKGf1XniKPinZ6XW+RUJhpxRVcBMXkLzV0FG NhgOY5HKRDleCgJqVI9mlbwn ) ; Key ID = 52289`
	`ASAP.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAcMyj128v+iZ+vhUQCC6ZFDeFXwVSkax3jhFpWn7nQ8N7K7xz9zKQE2pGJmZH1Nse1TygFAH 8RgNm+WocmmW7E+9l/G/Fu6329gFbPJhZNZi090U589pwCFpyzRwC9Lau5lJtqM24qlaWGazKiRU UESFiui82lz2pX1gGiDnv/vAXyBvZ+Xitz0gDQQeFAVQtf0X4vdS7vP1gR3PSIGFYPtv0YY9j65F 1eIb2Lzm8szQ7xGlEFEXALa45gmGyRRCN9DuF3bvUmdfjWYcIoijqyUO7fdt1GyY1Scsxxi22oPe bvC3lwfJkSxYg43OiKeTgrdo55Lo9u3FnX1EX9oUbC0= ) ; Key ID = 9003`
	DNSKEY=9003/SEP is now in the chain-of-trust
	DS=9003/SHA-1 verifies DNSKEY=9003/SEP
	DS=9003/SHA-256 verifies DNSKEY=9003/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190426135604 20190419135604 30065 asap.gov. famV4NDgNPdjMoAnTwtrqU8HiBZT7aFqLCBFp6CpumcEGTqBoD2ar7Dl48Ix4Ks+G7ONyRUJ+ZYM zMaqB3clXnS7jarLQ8J9EPUMncgBT66bonupt8wiRrx6c7uATTS+4swGgaD7bJbSWX/5hV9A/14v nvW6X/Xl+LZ2Mrf9Ofs= )`
	`ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190426135604 20190419135604 52289 asap.gov. Q4t1K3L+qX8JdzBYhOveuG4jw8TTM0gjMlBlTcx+umUnmCZZ1OkaDQUhltwPnT64PgRcu7wC0PJC uab2bNrbbVYgl128gNYv1/tQ8IpyjZJlri18FNvtEuJWcZNeAzFNp4vT59Se2WNBI/U9T0TLoi8k jq5OeVdQXMtsZ4eNjI8= )`
	`ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190426135604 20190419135604 9003 asap.gov. arn7Bps2JihPSc/EeN8ZN6Vm7ryIQjnFJhtlOv0531XtwhAwb8sjNBC/8JPzkTIIV0MyosDMCKOb QiMTiKpWPEedlFVEkOS3Ylw24FhmbRa+BJwb+BS+KkHpPK4mMaJfQjij+co7mPrDNfsrWUFZnemz wEKJiXYB0kW51VRBVepiooLWXDErkgvH/t6ylMD5ydDZCzGbehIAA9AuJx/fIpiS49OraOEw9DdC XYiYiy58yirf/zjhXg3Xiz0Md89SXWVbKEj88LQGytWJlCqt2EjYr/HpUPOirKQYQrYd063wp07P znz6R+r1i4v+4/ssOxLCxsvI7qYawogzUXN7QQ== )`
	RRSIG=30065 and DNSKEY=30065 verifies the DNSKEY RRset
	RRSIG=52289 and DNSKEY=52289 verifies the DNSKEY RRset
	RRSIG=9003 and DNSKEY=9003/SEP verifies the DNSKEY RRset
	DNSKEY=30065 is now in the chain-of-trust
	DNSKEY=52289 is now in the chain-of-trust
	Query to ns2.twai.GOV for ASAP.GOV/A
	Received 389 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (389 bytes) ;; HEADER SECTION ;; id = 54893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN A ;; ANSWER SECTION (3 records) ASAP.GOV. 5 IN A 199.169.192.25 ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20190424055142 20190417055142 30065 asap.gov. EuZnubtaJ50Kzm26seYA5fnSNNmNF3KKx5EfCVryQrK0IBE3nGVISmQQdUvnHPmdf6Yh3q3uiBPt OQBued4g0HN3yGoUsM8pzx23s2Rpwc7sxZqz6JP+tYrzLZyNYDqo28ubSu08AHmE0Kfri0zedhnv TrzlZCA2OtITEznaQzI= ) ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20190426135159 20190419135159 52289 asap.gov. hkk+rAJCPRdkD1/SSxV6z6vkFh9iBFKSWuXBCrKytrcFn2NbVCwMIWxhpb3XXvBisfZ1YibzO7bp VMHnqaThV95ejtu+wc1NxNLc7mi0DKdyq/pPBs+pk65U1OZwi1q/BO3XCYk6b4jN6oEdrezkEEnv WVIB1oWc1uDQEUK1J+g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ASAP.GOV is authoritative for ASAP.GOV
	Found RRSIG signed by asap.gov zone
	Query to ns1.twai.GOV for ASAP.GOV/SOA
	Received 2223 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (2223 bytes) ;; HEADER SECTION ;; id = 313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN SOA ;; ANSWER SECTION (3 records) ASAP.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2018101601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) ASAP.GOV. 30 IN RRSIG ( SOA 7 2 30 20190424080437 20190417080437 30065 asap.gov. gkcM7jpOVDIwi7LcFa5uE6PzfZoGYBuaX8dtVrrTKV7ZuBVxgq9fVGqa23fQRYWfPkRbUPKGhmr2 RAFQ8hBtoVAmL/3lA3VgCAsOnru6EbZ57tn6bIcvDiDtH+YhzKkKkhnryBaioO6pajzHdvW87l7G 3Jzp6BSsisJKXzZhLMs= ) ASAP.GOV. 30 IN RRSIG ( SOA 7 2 30 20190426142158 20190419142158 52289 asap.gov. KZ94NTFqw0EdzxdDzYm9zCE9Esl1/7QdX65bXaStEcBKnMLrjTvoYv7XN1xc+nmYKzf7dKDVYT9q u5hboKjF2cA4bPFcHkfh8EaBhHzf2VLyx2CwKJvnNQ/vh6T1l0i72wB7uagK5otViJBZDfiW9Jt5 1W1JJpQAQGfiiaKPlW4= ) ;; AUTHORITY SECTION (4 records) ASAP.GOV. 30 IN NS ns2.twai.GOV. ASAP.GOV. 30 IN NS ns1.twai.GOV. ASAP.GOV. 30 IN RRSIG ( NS 7 2 30 20190424063004 20190417063004 30065 asap.gov. jz1+h8vSoJ0T1vk+37F3AkFrx9K8Dk2yHeqpCGEZIumRG4Zir1m9wCa6/W2QtPYYimQGvatNFehL czW620cmSjYRWI7qwwW/PmnpptYLFz5jeuuwEw+8n5EXHeFGjbjPyJXQ65UEseADQC/EKT1hR+yl jnExcZ52MrMrRu3R65o= ) ASAP.GOV. 30 IN RRSIG ( NS 7 2 30 20190426135535 20190419135535 52289 asap.gov. ajS0H1j2oeKXejjQ2omBAxGqUvaY3zKHxRRnrdI3RTqpY7dvUnkbxFr0l92x2zrVbEFamxponLUp sIb/B9ofs5VLe2y9uWQl3dBzg5AgN2sjHT3Ad6PQJWQYv3pEtWbdeJ+068FLeKt4+QbnwFHugX4r gHleJk4D7PD02LqFMcA= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190424055018 20190417055018 22478 twai.gov. PsfWMt/DpSkl2nOO+BrK8t7xI2Nw8Hb6m7hovTlzC1MSy0UP1lz9FJle21BlCRBdgzaeY4p2eaUb GiYBsGehbbTJO4JJg81kRn+rFpmhWIDk7jt/b+HwQAFxJZ70sJzpH9TgJVMOuZRySsakm4GaPpCN 6ojWGx7r/c2Qaju/MtQ= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190426135015 20190419135015 12287 twai.gov. PeI4CZqCwoqFe+P0dUiDbTucsCUiw2InXhq5X2WzmpBRRhTXTAb9uHU3tT/DhOChSTtpcp8iXnDr 7AwRTMc2mtF6pqSfYhorlMAAluOx5IjH33YFUIEpjRAAq8Iy4c/bW4nIrcXMt5Yl4479CTJG1sdA +5h4XzzSMirTNQXWSpk= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190424055018 20190417055018 22478 twai.gov. UJDk2DkqKRE2OUNcL2y4p0JYmlebiYdM0q0UVAABoUgjGQcVYezuj6/H9vrZ1xTvmNc88ZKEx5oh HJK6UFbqm4R/zH0TdYD4VpvHlLhDTz66Z8r2YO+5TiSd9zpmpDxTJ7nOhslY5xlEE1oaaIg2ZASn zqmJdZ/+MLMGZnH+/0I= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190426135015 20190419135015 12287 twai.gov. uhNKMd86hGTaIrlpM40shrtXuZl/5D64WLIojZfxj+h3mibSDT3dE9hslqX55+FHr8hoybglZ9dO v+CQlSUeg1fpEYfH8cSNo5gsP6PDmPtpq1XzobHB0jGD74EE0FUkx2KagBOX7dK6eUaUFyF7FHDK /lx11eIg+bF4vPpaBn4= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190424055018 20190417055018 22478 twai.gov. Ii76CqyJlFyGW0j72DcxRBWcsAciN1xEESqsRFcG9vGVlkrA9y8ZhNfyPzOdxFLmtQB5MjI2yIzJ fZaneb/7OI5pPfxFYzJ392XQFLDw+BArZWyTzpLR9RfElUoAOwxjcaLlNIlrJIJppQJ85fT5XCaR 27L5D7NBeETPormJoKw= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190426135015 20190419135015 12287 twai.gov. XRm6QBw5cye0M35sIISLVS0xyfiBLQdDbuuza3FaFxKAxy3JIm69TXv6c+S7U6Uffi1kBrjA4Eie 5+FjlC2uTfQuGGXi979sdchZmTDlqZlbVcy61bFTAU2bp2sfJjBHFoa2+b5QNN76u2rcekgqC2LL uAafc5ku87O7asYwH+Y= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190424055018 20190417055018 22478 twai.gov. IC696WgN7ulTxY6yjeMDPsaFsJ17jrLddXLS0KuvaJ/uZhHH1TmsYAZfwdgHno74XgfKWOil8tO+ Utd78WLvpG5HJshLBjBWqViUrVORcM3mpzFm3vujP6WwpIptXFzZA8ZVLfEo7+bT7c4wyaq+6Qx2 SKWZ2FaM4J0jjL7MXJM= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190426135015 20190419135015 12287 twai.gov. XyzvHSUi5NJkJFdCvCcAFMkVgQ0MASQphvQ6I4gL01/xNlppMzpdo4h0xSOt9cmnLJtDeNJqxwxn qZkWzk71nEgriwqIxbxaMXo5EEWGBkPokF7/cK81ApDRNguDiilFA1IzWZl40iQOiJUyj61bMNqc MW1q8IeRsWdJOpgdCbM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for ASAP.GOV/SOA
	Received 2223 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (2223 bytes) ;; HEADER SECTION ;; id = 10021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN SOA ;; ANSWER SECTION (3 records) ASAP.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2018101601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) ASAP.GOV. 30 IN RRSIG ( SOA 7 2 30 20190424080300 20190417080300 30065 asap.gov. R+6oBPdqky4lstOCBNidi2zkAzZ+lgImS69eWHhD5+z0zx+Y5twaA5VOs9SUZ3lBMV9e3begCgI5 Z4F2gW5hFTMNo2DkFlW0vyqBcrUndCdXBhzcUKFCel6/BdXBCeT3tdWfyrSQUMszxl5coX229tjd Q5Ua2vLeB+hTySKuuAU= ) ASAP.GOV. 30 IN RRSIG ( SOA 7 2 30 20190426135802 20190419135802 52289 asap.gov. AtROU9/+twZj1MSctClle6SfydY3EEarbPR2ysL+rpFVB9cWjkje1sLoaEUx1hEu7wQHIIer6f7+ 40zcK8hgHNcRNw8GUTD/ZI3udEl8ucOBsrvEk8ohTnwLAM33/O99k6MqC6vkRBCP1DPPQiho5q7g 98oc2VGRdmsSl73j2J0= ) ;; AUTHORITY SECTION (4 records) ASAP.GOV. 30 IN NS ns2.twai.GOV. ASAP.GOV. 30 IN NS ns1.twai.GOV. ASAP.GOV. 30 IN RRSIG ( NS 7 2 30 20190424061339 20190417061339 30065 asap.gov. YwLgbxo8OMkABXNSuvU+FsNpg7fEEWSU+wsNRseu22QFmJAvdeFLRWCUBlQ2wxehjU2C8H7OMC1s W6kjxg4tBEI7CmxZwnot4PfwH9YMD9k+ha0/reKU/81X5F6FnYAtgWoKxM705ZOwH8conTSHBidb oCzr0JCwb2jJGE8kNcg= ) ASAP.GOV. 30 IN RRSIG ( NS 7 2 30 20190426135541 20190419135541 52289 asap.gov. VGYohgQ/8xXw70j2TJk+v/fiw436P2UmWVllap/QlxF9yy+uxcEmLmxtF1bP2tAqeQ6TZjhXPzpN CCw3+aODIxGiLpulrbbmSdd1mu+oF6MWwOyGBEofLFFUUtrEygwW7gmwziU1d4wVi8s9V08pF44M 7FeE4OOXVvH1xoHZlS4= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190424055018 20190417055018 22478 twai.gov. PsfWMt/DpSkl2nOO+BrK8t7xI2Nw8Hb6m7hovTlzC1MSy0UP1lz9FJle21BlCRBdgzaeY4p2eaUb GiYBsGehbbTJO4JJg81kRn+rFpmhWIDk7jt/b+HwQAFxJZ70sJzpH9TgJVMOuZRySsakm4GaPpCN 6ojWGx7r/c2Qaju/MtQ= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190426135017 20190419135017 12287 twai.gov. h8xo3nnwBs1dCQgPZjsIqLx0w6sK+i2XS+ig6SmsGulxf1gcFiyOWT36/uL8jrly0CUDuCgxCWBs 6eneOhIFxmJyYG2F2SYwpQ8wrpXxc8iJ+8UJ/+iWfLe19hYI9NZ6op3dMKIB+I6BwKytqdHl/I8R vGdHQd3OPGxTgh6aokU= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190424055018 20190417055018 22478 twai.gov. UJDk2DkqKRE2OUNcL2y4p0JYmlebiYdM0q0UVAABoUgjGQcVYezuj6/H9vrZ1xTvmNc88ZKEx5oh HJK6UFbqm4R/zH0TdYD4VpvHlLhDTz66Z8r2YO+5TiSd9zpmpDxTJ7nOhslY5xlEE1oaaIg2ZASn zqmJdZ/+MLMGZnH+/0I= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190426135017 20190419135017 12287 twai.gov. BHCCS8bUyxAZ/ccFmgPXAiYvYcZhLlJRQwNm1IIlR1CJBJFuLSK+Hv+mB+pjTQ7nyCSYIU0Hh3sz l8gcOcG/HQSC4/zDERzTLg5VGE+POgEI5y5xndzfSbADkhTEzfFs8ecJlK10uDn4R9dN1bIOYz+y GNEC1k0p6+xni2RZn60= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190424055018 20190417055018 22478 twai.gov. Ii76CqyJlFyGW0j72DcxRBWcsAciN1xEESqsRFcG9vGVlkrA9y8ZhNfyPzOdxFLmtQB5MjI2yIzJ fZaneb/7OI5pPfxFYzJ392XQFLDw+BArZWyTzpLR9RfElUoAOwxjcaLlNIlrJIJppQJ85fT5XCaR 27L5D7NBeETPormJoKw= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190426135017 20190419135017 12287 twai.gov. ECBIWjkNOUJjBqH4udu8yxst10HNE4ee3XtwLpQ0B+R5B24QFyJVKFYRIhyl8f4PvnKqCYUiviju w/AnkRwf84kDyt2kJvIN4u6qOikhbvZqh5PVWbzdpsXapLKHJDf50iJydRqhVEjDPbx2L6j1YUjt 9OvycjVMh0480L2LcOY= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190424055018 20190417055018 22478 twai.gov. IC696WgN7ulTxY6yjeMDPsaFsJ17jrLddXLS0KuvaJ/uZhHH1TmsYAZfwdgHno74XgfKWOil8tO+ Utd78WLvpG5HJshLBjBWqViUrVORcM3mpzFm3vujP6WwpIptXFzZA8ZVLfEo7+bT7c4wyaq+6Qx2 SKWZ2FaM4J0jjL7MXJM= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190426135017 20190419135017 12287 twai.gov. aJRS9BRXtEtlogl/UW4aj6gvlF6SWDEhZnlfBB5JallO/kLQSelYCk0NX7ELQAB9tPiKl6Vl78j0 HkceKM8MBNxVywFFbJIvXumqDDYQBgrwRdNA271lPKe+u04t7y949wC+uB9t97jFM5xV+0UJnhhw GTyKb3Wwi3KfgauXILs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for ASAP.GOV/A
	Error querying ns2.twai.GOV/2605:3100:fffd:100:0:0:0:7 for ASAP.GOV/A: 'IPv6 transport disabled'
	Received 389 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (389 bytes) ;; HEADER SECTION ;; id = 11785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN A ;; ANSWER SECTION (3 records) ASAP.GOV. 5 IN A 199.169.192.25 ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20190424055232 20190417055232 30065 asap.gov. ktMnYbwh29mu1xHADqhoSrm47dvHtuIy3vpbEk39AEKvLe7dx+NB0lk2rV4bDScrPKA+7JpYK5SW 5/016LDL+Wb8ZChn7JRVxkiNumVw12P4uOlJSWl8uTn5pc20IwHbnvVpOcbx8VMTBDVESOgxgOUC NJB5RqTFvQbibLQK62I= ) ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20190426135125 20190419135125 52289 asap.gov. Ub8aO0GnLbiYyfEw8ObfRQADPsoeHvOroB6oo8gsWnwsjDxTXOERqZ/3jdpPqdP4rfJumO2xDFrt psQgHVBIaTHMNw+WTnYNnicU5PADVXp2cb+AL96Yzz2qJKFrVi1bifVr7ZsR1M+Z3A2Pe3vfO/h7 Gw34FihzeNoVhXBIfWc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ASAP.GOV A RR has value 199.169.192.25
	Found 2 RRSIGs over A RRset
	`ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20190424055232 20190417055232 30065 asap.gov. ktMnYbwh29mu1xHADqhoSrm47dvHtuIy3vpbEk39AEKvLe7dx+NB0lk2rV4bDScrPKA+7JpYK5SW 5/016LDL+Wb8ZChn7JRVxkiNumVw12P4uOlJSWl8uTn5pc20IwHbnvVpOcbx8VMTBDVESOgxgOUC NJB5RqTFvQbibLQK62I= )`
	`ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20190426135125 20190419135125 52289 asap.gov. Ub8aO0GnLbiYyfEw8ObfRQADPsoeHvOroB6oo8gsWnwsjDxTXOERqZ/3jdpPqdP4rfJumO2xDFrt psQgHVBIaTHMNw+WTnYNnicU5PADVXp2cb+AL96Yzz2qJKFrVi1bifVr7ZsR1M+Z3A2Pe3vfO/h7 Gw34FihzeNoVhXBIfWc= )`
	RRSIG=30065 and DNSKEY=30065 verifies the A RRset
	RRSIG=52289 and DNSKEY=52289 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ASAP.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: