DNSSEC Analyzer - ASAP.GOV

Domain Name:

Time: 2019-12-12 18:40:08 UTC, NTP stratum 4

Analyzing DNSSEC problems for ASAP.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (864 bytes) ;; HEADER SECTION ;; id = 13262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to g.root-servers.net for ASAP.GOV/A
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ASAP.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (666 bytes) ;; HEADER SECTION ;; id = 15071 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (658 bytes) ;; HEADER SECTION ;; id = 48513 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Received 406 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (406 bytes) ;; HEADER SECTION ;; id = 46040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 50314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191226200254 20191211195754 7698 gov. TSWDNaT2YWZcvYuhy1ISjgdvmxDwfuUJNhhXMnCUD62NHheC81xZR5VuepYRxTyeIeuVBrvwV0gp IOMHMMqsD4IyCZMioFUFrXKlDiuuQTsGkByQFte/wgyW4jC1pNARdNZ54FCn5N2JY3B33MOqfpKy ocq2MULAQjrUhc6TcyiyU5nH9wfBOLTbxYIdP2YWNg1hLjc9knPnQLun7Bg2XLIpqCuypNyLbUWV 6gk/OONTvBZrzGs4sWJ0E+ad7xjkUzuzUSJlhmpyp5uSoOeys8ksYwKwgMVnb3syKMCmZ4nNCAU7 4935yc7k/D/qus++bMwSFdt1/20z1RbGhH7QNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191226200254 20191211195754 7698 gov. TSWDNaT2YWZcvYuhy1ISjgdvmxDwfuUJNhhXMnCUD62NHheC81xZR5VuepYRxTyeIeuVBrvwV0gp IOMHMMqsD4IyCZMioFUFrXKlDiuuQTsGkByQFte/wgyW4jC1pNARdNZ54FCn5N2JY3B33MOqfpKy ocq2MULAQjrUhc6TcyiyU5nH9wfBOLTbxYIdP2YWNg1hLjc9knPnQLun7Bg2XLIpqCuypNyLbUWV 6gk/OONTvBZrzGs4sWJ0E+ad7xjkUzuzUSJlhmpyp5uSoOeys8ksYwKwgMVnb3syKMCmZ4nNCAU7 4935yc7k/D/qus++bMwSFdt1/20z1RbGhH7QNw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to b.gov-servers.net for ASAP.GOV/A
	Received 369 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (369 bytes) ;; HEADER SECTION ;; id = 38732 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ASAP.GOV. 86400 IN NS ns1.twai.GOV. ASAP.GOV. 86400 IN NS ns2.twai.GOV. ASAP.GOV. 3600 IN DS 2070 7 1 64e0c74c04cbf3e98f629e32ecbc814364dd0a76 ASAP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. HRpCx3DiGPxx8pmKKiZccq0a/JUE3RDXShvUzgWxjiUMpMXtDl4UskCq65DJswYpViO7SME4zsqn DjUHGt5HNwys2jWdi/yZl4ZlAPGK/P62X5esk3wTOKIBncaAOjUyKfaL6NdUSooeaqR+JIUBB89/ Aauqo4MPvsNblA9PoT4c7kF9uPRGQdFiwYueBcx5AktkU1fuZmQxwkqk2yQh9Q== ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for ASAP.GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for ASAP.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 369 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (369 bytes) ;; HEADER SECTION ;; id = 28388 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ASAP.GOV. 86400 IN NS ns1.twai.GOV. ASAP.GOV. 86400 IN NS ns2.twai.GOV. ASAP.GOV. 3600 IN DS 2070 7 1 64e0c74c04cbf3e98f629e32ecbc814364dd0a76 ASAP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. HRpCx3DiGPxx8pmKKiZccq0a/JUE3RDXShvUzgWxjiUMpMXtDl4UskCq65DJswYpViO7SME4zsqn DjUHGt5HNwys2jWdi/yZl4ZlAPGK/P62X5esk3wTOKIBncaAOjUyKfaL6NdUSooeaqR+JIUBB89/ Aauqo4MPvsNblA9PoT4c7kF9uPRGQdFiwYueBcx5AktkU1fuZmQxwkqk2yQh9Q== ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ASAP.GOV

ASAP.GOV

	Checking DS between GOV and ASAP.GOV
	Query to a.gov-servers.net for ASAP.GOV/DS
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for ASAP.GOV/DS: 'IPv6 transport disabled'
	Received 268 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (268 bytes) ;; HEADER SECTION ;; id = 65219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN DS ;; ANSWER SECTION (2 records) ASAP.GOV. 3600 IN DS 2070 7 1 64e0c74c04cbf3e98f629e32ecbc814364dd0a76 ASAP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. HRpCx3DiGPxx8pmKKiZccq0a/JUE3RDXShvUzgWxjiUMpMXtDl4UskCq65DJswYpViO7SME4zsqn DjUHGt5HNwys2jWdi/yZl4ZlAPGK/P62X5esk3wTOKIBncaAOjUyKfaL6NdUSooeaqR+JIUBB89/ Aauqo4MPvsNblA9PoT4c7kF9uPRGQdFiwYueBcx5AktkU1fuZmQxwkqk2yQh9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ASAP.GOV in the GOV zone
	DS=2070/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`ASAP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. HRpCx3DiGPxx8pmKKiZccq0a/JUE3RDXShvUzgWxjiUMpMXtDl4UskCq65DJswYpViO7SME4zsqn DjUHGt5HNwys2jWdi/yZl4ZlAPGK/P62X5esk3wTOKIBncaAOjUyKfaL6NdUSooeaqR+JIUBB89/ Aauqo4MPvsNblA9PoT4c7kF9uPRGQdFiwYueBcx5AktkU1fuZmQxwkqk2yQh9Q== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=2070/SHA-1 is now in the chain-of-trust
	`ASAP.GOV. 3600 IN DS 2070 7 1 64e0c74c04cbf3e98f629e32ecbc814364dd0a76`
	Query to ns1.twai.GOV for ASAP.GOV/DNSKEY
	Error querying ns1.twai.GOV/2605:3100:fffc:100:0:0:0:7 for ASAP.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1241 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1241 bytes) ;; HEADER SECTION ;; id = 37866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) ASAP.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbWI1dzELqvjHL1eVMgqOFKyh5yGYgjPhN9k5AL1/16HsdAJPptf6q275LsqZJmKI3p9D4Xj 9YRXVyzG3QqaVG1RzQJQuveC8y6TCudly6yVAOjKsDuPw6B89GeAibLQTUBYgiVCCYoYt0Fx2X9V dAmJawG6ZeMji8jchYxZ5l8F ) ; Key ID = 56072 ASAP.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcCYsOCxyd3i1gSgkZBd/557Tb0hewN/gANoKVQb0Z3Wu4yjsfASU7iTKhatqoaTFcZMzMpk HMvXTQ68/UvhrTCcOorqM9UpbAo5TrxxxpozrreFcy+nf8lL9d/Jqv6Z7u9gq1I0mj374I6wb7Vn VaY1Ctz0oZvqC/WlmX45fMiV ) ; Key ID = 36497 ASAP.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbWozkHcVztHfASA7k1/n2xl8n+Qz/aOPqgS5n7ICL//YcyQJfa4demIrHEuu73SLXciC3d/ vmno+/d6mW5Lh15nDXDDh/zP6ebOrapdSf1N/C9E1MK4OR9x0sKUVMjtxAAa9I/Guy72by4URlic YzV5az/JbDMV9mdgCcHoJPQf+0KZvVS7PkeO8MeKdqmQVjEy9/z23Cs9aBmL3Vf1GmabTIrGiDf0 v8TcSBA/RkzO8VxkWIQ0CU3q/vkaPHVkMaEVed+X0150RXFEg/9qpyxE69MGa7rg1S0/ULz/5h97 aD4bHYVd0PAZdF9gM/scgsuhcR+UM7Dw1Ma4wNRNN/0= ) ; Key ID = 2070 ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191218060004 20191211060004 56072 asap.gov. N7GfSz7ZzfJKu6i+Wc6tzz5u3G9Vt+E7mHD7rqUqBbvRglRbjlbsdZulH5P16aIehyo8j2CAHrnk JKsKFSPe+CL7c2zxJeIo59/V3JjTPOoWN7IE3YYUQ+FnB2SDcHq4gGtTETyO4jrlQoZbN2YsVeTN fmfVFa1Siz4vbsijCNo= ) ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191218060004 20191211060004 36497 asap.gov. kMI9077HldlbR9Q8/ROOWt9N/yq6Up5UDdjsrQtuqw8aFXSFwmQ1c+AFuTbkO59nB+j0+Jh/i9ZB FlyYLROa0Pv9/NfKD6WYzNdbmSSS5Ln/Qd5Y8EWION7rRc1MG52GE70hnGYIPIeG3hfmSmi6no3T CsKyaWkJ9JwA5qq2rpM= ) ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191218060004 20191211060004 2070 asap.gov. cOtxOeXs9nupCTn3lMmE6v1D23TPmJY0olpQCRWRgnMy7G2rC8z/jd/RWM7RyO4q9v2jD4I1/B3r vQAoFTb7XaoXmlGfgdo0WyWHMsvza6pt7dfOuZjnDahRFPZO9y3PTB5d7AA5G5V0jkFXMBFqnPs0 ajklRiyxBoXrGu/54pRBZvlHYx/vvz31W0zGonEn1bvOIa7FSSnh6fQU8idtdwEN4Mw1dQjlpaCc ive8sR3n3CUlvRDbC+q+11MVymR0+egcTGmRqzEWRHkW14eB1tboWSPwYoDGZxmThsTNgNlrjP9g k6Emlgs3SLmvTllg1+c5tjul8wf2d121jUNKpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ASAP.GOV
	`ASAP.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbWI1dzELqvjHL1eVMgqOFKyh5yGYgjPhN9k5AL1/16HsdAJPptf6q275LsqZJmKI3p9D4Xj 9YRXVyzG3QqaVG1RzQJQuveC8y6TCudly6yVAOjKsDuPw6B89GeAibLQTUBYgiVCCYoYt0Fx2X9V dAmJawG6ZeMji8jchYxZ5l8F ) ; Key ID = 56072`
	`ASAP.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcCYsOCxyd3i1gSgkZBd/557Tb0hewN/gANoKVQb0Z3Wu4yjsfASU7iTKhatqoaTFcZMzMpk HMvXTQ68/UvhrTCcOorqM9UpbAo5TrxxxpozrreFcy+nf8lL9d/Jqv6Z7u9gq1I0mj374I6wb7Vn VaY1Ctz0oZvqC/WlmX45fMiV ) ; Key ID = 36497`
	`ASAP.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbWozkHcVztHfASA7k1/n2xl8n+Qz/aOPqgS5n7ICL//YcyQJfa4demIrHEuu73SLXciC3d/ vmno+/d6mW5Lh15nDXDDh/zP6ebOrapdSf1N/C9E1MK4OR9x0sKUVMjtxAAa9I/Guy72by4URlic YzV5az/JbDMV9mdgCcHoJPQf+0KZvVS7PkeO8MeKdqmQVjEy9/z23Cs9aBmL3Vf1GmabTIrGiDf0 v8TcSBA/RkzO8VxkWIQ0CU3q/vkaPHVkMaEVed+X0150RXFEg/9qpyxE69MGa7rg1S0/ULz/5h97 aD4bHYVd0PAZdF9gM/scgsuhcR+UM7Dw1Ma4wNRNN/0= ) ; Key ID = 2070`
	DNSKEY=2070/SEP is now in the chain-of-trust
	DS=2070/SHA-1 verifies DNSKEY=2070/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191218060004 20191211060004 56072 asap.gov. N7GfSz7ZzfJKu6i+Wc6tzz5u3G9Vt+E7mHD7rqUqBbvRglRbjlbsdZulH5P16aIehyo8j2CAHrnk JKsKFSPe+CL7c2zxJeIo59/V3JjTPOoWN7IE3YYUQ+FnB2SDcHq4gGtTETyO4jrlQoZbN2YsVeTN fmfVFa1Siz4vbsijCNo= )`
	`ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191218060004 20191211060004 36497 asap.gov. kMI9077HldlbR9Q8/ROOWt9N/yq6Up5UDdjsrQtuqw8aFXSFwmQ1c+AFuTbkO59nB+j0+Jh/i9ZB FlyYLROa0Pv9/NfKD6WYzNdbmSSS5Ln/Qd5Y8EWION7rRc1MG52GE70hnGYIPIeG3hfmSmi6no3T CsKyaWkJ9JwA5qq2rpM= )`
	`ASAP.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191218060004 20191211060004 2070 asap.gov. cOtxOeXs9nupCTn3lMmE6v1D23TPmJY0olpQCRWRgnMy7G2rC8z/jd/RWM7RyO4q9v2jD4I1/B3r vQAoFTb7XaoXmlGfgdo0WyWHMsvza6pt7dfOuZjnDahRFPZO9y3PTB5d7AA5G5V0jkFXMBFqnPs0 ajklRiyxBoXrGu/54pRBZvlHYx/vvz31W0zGonEn1bvOIa7FSSnh6fQU8idtdwEN4Mw1dQjlpaCc ive8sR3n3CUlvRDbC+q+11MVymR0+egcTGmRqzEWRHkW14eB1tboWSPwYoDGZxmThsTNgNlrjP9g k6Emlgs3SLmvTllg1+c5tjul8wf2d121jUNKpw== )`
	RRSIG=56072 and DNSKEY=56072 verifies the DNSKEY RRset
	RRSIG=36497 and DNSKEY=36497 verifies the DNSKEY RRset
	RRSIG=2070 and DNSKEY=2070/SEP verifies the DNSKEY RRset
	DNSKEY=56072 is now in the chain-of-trust
	DNSKEY=36497 is now in the chain-of-trust
	Query to ns1.twai.GOV for ASAP.GOV/A
	Error querying ns1.twai.GOV/2605:3100:fffc:100:0:0:0:7 for ASAP.GOV/A: 'IPv6 transport disabled'
	Received 389 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (389 bytes) ;; HEADER SECTION ;; id = 5842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN A ;; ANSWER SECTION (3 records) ASAP.GOV. 5 IN A 199.169.192.25 ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20191215220001 20191208220001 56072 asap.gov. GiuS9kl/4EWjJI7FdIdBfPdeY6Xjw2NnEs+YtFcCUAsyVOPpEzmpu95noPW9JsrsXr3Cn5r6ZQ+6 iTy7OHPEx3BXkGFuMSxlIgf0BjCDAHee+4QuCWlPkxtU6ik8PBh4foOjabGphL4XzkBLe9HUCGcF NNqQ5Fv8pmk2dp/ZSQw= ) ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20191218055055 20191211055055 36497 asap.gov. RBqh9brvuM9iSnyhpuCj/NVhiRE6zpFCOoyIRUNt+mvfm+ySvh11yEwnBApLVZZNOCKv3Bv70MVa yU1xbj2UffW4FNPaheau7h72LCdX5/E4+XjGt3SfOrU/Zgt6ORqLEXSKyy+Alm6Pzs84YHfeCu61 WMBixRHkfjcFXMQz2yQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ASAP.GOV is authoritative for ASAP.GOV
	Found RRSIG signed by asap.gov zone
	Query to ns1.twai.GOV for ASAP.GOV/SOA
	Error querying ns1.twai.GOV/2605:3100:fffc:100:0:0:0:7 for ASAP.GOV/SOA: 'IPv6 transport disabled'
	Received 2223 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (2223 bytes) ;; HEADER SECTION ;; id = 2277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN SOA ;; ANSWER SECTION (3 records) ASAP.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2019102601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) ASAP.GOV. 30 IN RRSIG ( SOA 7 2 30 20191216031618 20191209031618 56072 asap.gov. JgkCG193vYvnbYrjd0vS4npITDcgayG/cGvn4D/273BfuSldwxTjCbbrPOKbpCu6pr7E/dt1rJ5T 9/eR2UxnRaozoz97jlGQqw4/YTuuoQA4/cZyJNkushjhw9nr4xsF2OiPwTMXLAr/b3gFQE1ewV56 lrNFmnep0BRRqulNS3w= ) ASAP.GOV. 30 IN RRSIG ( SOA 7 2 30 20191218100856 20191211100856 36497 asap.gov. luk/EI7QlhGaalNRRHX+ltEBb+o0rs0xUw/bJK0e9NM1tKFZvJRsd1QulgFLPmOUJO36LzwsnX2K wjYD5gpohl13DjvKsIlwwbu0tSjKDwbBvYG4mG7Hza2kiEcaup9EMba2wpQa65JqBsHsr1wdfUf7 pasmBO6xjOTBI/TDsfk= ) ;; AUTHORITY SECTION (4 records) ASAP.GOV. 30 IN NS ns2.twai.GOV. ASAP.GOV. 30 IN NS ns1.twai.GOV. ASAP.GOV. 30 IN RRSIG ( NS 7 2 30 20191215225732 20191208225732 56072 asap.gov. e/hqcCwEgNReXfEkGr1lDpcCUqgqDSKFaVHznwUNfkL9Qu99zQMC4UhMlw8OgmhkKixwnju/h4bS X6dcw3zakCkjZwuPERXbqsK7QD8tGJhm4+idF+pMTaKUe5YrVoxfTwT247wwAmJ3eq4YzaXA040F jL8mszitiOp/gr50CCk= ) ASAP.GOV. 30 IN RRSIG ( NS 7 2 30 20191218061001 20191211061001 36497 asap.gov. k/2cHVPMe+6vHCYIeIWqSug3NMw+3HUO+s8VxdubFwaUmqLNMB3xypkZgozuKAKaytsv0uEuSNeH Htksw/uanBxM1BQsHogBMo186pPMoUAN5aoeWK4XNQLji/8CXl2C/R9ULgD8k0H1HzgdM78M5jq6 DI+q9fgpOTzhSWXoZQ0= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191215215041 20191208215041 54347 twai.gov. ayDjUC5m3vlSRCBBNrSsRUX9IOcgouStwo3J6IxFGP8ZvLaHd1OiNU2EC625vfe2M6/ckWVJhADn 3VY5HVngLFDUgeVh1DrG4jGyW/sLZYd2pgh5ggcDkiaJu+prIRjNWTO5EE9KInxOB7g+HAJWk4La xrmj3Kz9mtfpI4RoRBY= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191218055028 20191211055028 50918 twai.gov. iifzBtmkKJSgpQ69xJT4lqfMYhlwPN/7NJ3aStuaLi6RCNVyLepIMbC/MBe9HpuwfRoI2W3BhGMI Hw0mJtBI7Gyq8uvztl9q1En+aseTnldPpl9aZdNu3+GiC0Nt+adTf4GWhhKuwMvNxE3QVQyC5vsc n1GjPGtdUZ/xTgu0rEI= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191215215041 20191208215041 54347 twai.gov. T2xh4ZXlM/nGXlf7hMQ45GEt1pUjZ4b51LEs6CzNdD0A92UqEZwUVy0FxU174dAaaNnkj25u+LjB DoIqe4cC2yw/tIfRim0tzaXCu5u7oFHz3lqWBhBx/OkHeCEtqQz52qf4HZ3qOHSdGsAHT//j6uom I/+5ts+AcdfcaB34Iug= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191218055028 20191211055028 50918 twai.gov. BIM/Yu4N2P6Z5KXd0way64uPyJsAMW6gu32xBeM2ciESL+5CtKCLW0tjNB3uiZ4fskFWQBI8nvAO deRP709yBQrvDs3C7GICPhSC58kLsSF6BxqJtCXaNtwBxfqoaNe9Pj5eHTHen0fc6GPDdwm1qqC+ vkUZieSuSa/PbUl9XGo= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191215215041 20191208215041 54347 twai.gov. LJCeS1Q8hHKysIW7S3uGcdJ1gyoFAKWr4TghaMBwWFNC9m9ydCyv/6hjJBqT0rPAPaaQYtHrfLgP sqM+IhlpsACkcerSNnyXXadAtPnW/FBbgcA8myh1DR715LbpgKnGGGREaxwU4BB1Eg0GvhusFBvS /Ks3UsmPzUAVfy6p4Ks= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191218055028 20191211055028 50918 twai.gov. EqENIZ3IuiLbRcKfMiQ6LKIpz1CfCmSyevHySkx5VVIpQWi5LvzcJfX6Q1UYoKct5nz3Fk5Jeh+6 AM5IXNpANrkJf7+hPYxdFly4sUagCTNAtweNvfRh/PCU1eIZSOdeTkJwP5pjT0S4bHZbZvPtnPFg EAxHfsWnjvAp1yataUM= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191215215041 20191208215041 54347 twai.gov. Y2RCdtyktQHEOHBRpvUoH4uGSVbchg0XjUkqXrpyG5mzu9j43EDBybp//4gTgWfwoJ9L6CLBkJjn H1RudjRNdiA+rtbiPAsJ5JrXRE4SD52KITtnCaRxHvOTFlRmsXrjIbkGnpI9i85M9QNd9c/WnnBb LSbXUc3HnWazugmnEUY= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191218055028 20191211055028 50918 twai.gov. SrXcnaQ1SAKnrVslPJRdGLIWzZzfEDPblGBh9sgWAmMKBKVZwOO/ejwICxjjM0q4wP2+3al16e17 XnDZmcSAS+X5/wBhVPgdTqOk1+Ri0sfXoVutokzyDVhPWXqYuRJDG9qipLoJmMQdfCaAkLkvhcZE y0DJ9sjK1hwAmH1TU34= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for ASAP.GOV/SOA
	Error querying ns2.twai.GOV/2605:3100:fffd:100:0:0:0:7 for ASAP.GOV/SOA: 'IPv6 transport disabled'
	Received 2223 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (2223 bytes) ;; HEADER SECTION ;; id = 8407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN SOA ;; ANSWER SECTION (3 records) ASAP.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2019102601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) ASAP.GOV. 30 IN RRSIG ( SOA 7 2 30 20191216035820 20191209035820 56072 asap.gov. AutQjv3E8yMvFusNJdDnQsKl35iOXAAjImo1nRdN2RGPu+9ngtfIbHiIxNHl1wVX2dGtN9mJ0MO9 NTRU7Kj9UUkE+ElMYF903t+DddPoL0Wn1hePm95do0k/qpPur+8QMdJQhBEM8T8db/INOHPxkzgD VGMm1iK6hUPXt6ysyUs= ) ASAP.GOV. 30 IN RRSIG ( SOA 7 2 30 20191218065252 20191211065252 36497 asap.gov. OX84lnHDAZpZBo1GKb07AwHW+o/+QNaH9hg7/hbKuwo8W/u8ZN+k/8ViONYTnZyvQ212cp/BmVJs ffxxFUxZJJVrOBO5cdXG+y2WkXjeHNW/hE3nHcN3jJg0BkdIATTK/BA17bPI7Cj3OgGPJeOScIGF NXb8lkUMZq9YZGZgYrs= ) ;; AUTHORITY SECTION (4 records) ASAP.GOV. 30 IN NS ns1.twai.GOV. ASAP.GOV. 30 IN NS ns2.twai.GOV. ASAP.GOV. 30 IN RRSIG ( NS 7 2 30 20191215225732 20191208225732 56072 asap.gov. e/hqcCwEgNReXfEkGr1lDpcCUqgqDSKFaVHznwUNfkL9Qu99zQMC4UhMlw8OgmhkKixwnju/h4bS X6dcw3zakCkjZwuPERXbqsK7QD8tGJhm4+idF+pMTaKUe5YrVoxfTwT247wwAmJ3eq4YzaXA040F jL8mszitiOp/gr50CCk= ) ASAP.GOV. 30 IN RRSIG ( NS 7 2 30 20191218060004 20191211060004 36497 asap.gov. X7VYsPiHgbIzmNTkrfAopN2NsIrRDwfKyb1KDT7TRGTM6oI5PUu9AYZ9hvAjNcxOV3yGh7545FLI yFoXEJfQcR/idiIUAjcGkShScleGx+ENj7tuT+ancWNzQipcnmzi6FqkFMKOS10EFcRuVff1hpzC nRv5DgjNOfvmHY/aywg= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191215215033 20191208215033 54347 twai.gov. cSu9lSokdWoDEVwxWGedIT9fJ6Por0tC2VNTmON+bDbB3N1pOExHVFlZKU+BwTgSMudCZXk+LbFe x/8hll6V2eC+msWwGcJx5LRnVDF9c0Nkzs2t9KHQpvUYU07elfzB3wutR2NPILZfneNcLE2EfYBx +Klj/xFWdrd71tMisTo= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191218055030 20191211055030 50918 twai.gov. IBPFlgijPj/qaIV09xu0lI8Y2cPIND5zsj0AKQU2RPyzxgw47PNHHdftJ42Ow2l+hbBTdBZWLX4w eoRE0k3I2p5R428XGQ8ymB6R9vFZNscCrbdtaLIRbFKKpX1261DSsFYGA/EIJ6zseinuIJiAfVqn sdTQJRJHwZONndfoQTg= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191215215033 20191208215033 54347 twai.gov. RfwO4z/bgXVv/c0z5yDbCepwrLGfIHBBKHidwPlCIbXKgdMYU0ASCKH98ILKPPDV+ktTesrziYGI 982f+mT0zAzHPczTFS4Bi65tDp3Qqo4ptv64+fSgubpof7kEOQoSL9cwU9CjqGx12eaLnhsoGaTN bmaF1pi566skj3eoel4= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191218055030 20191211055030 50918 twai.gov. EzBRqVihXupU6mI+1FSwF+l16Jv/E0Onv4lvQt2+7IfjyFlVWy1HwmWhTxPVuvbQ+SlJzcFAHs/b 0JXb+aY7Qr43DNewaCueYJZT5jum7RLp63REfqv849LXPW+WD1GzYw2Mnzkma5zvMVzjA3JskTxO 6vCyEjhTiVktyNjdXHY= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191215215033 20191208215033 54347 twai.gov. UERqFITwz4ZkAsmlx5nzF+pxlkoHVGfICcUz4K/1WPXPsmyZrwwMHA8ttoacZ432wVV2At2nbsnj IYiZBOVv2N6ASDB1kD5gsD1cSSJ5UZrND2XAvEmHu7v37Gt7IrMNnyfANh6+WgK/79RUQhwBMJvs pemMJTwViNAPJ3dRLGA= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191218055030 20191211055030 50918 twai.gov. GZL0gNXripWfQy7/vjfrRzIkvnKgxkWbpLw0HqZUnK6ijFFowTpghKAvgNqDUZ82qv9xEPQ66QdQ HJk2JsXU89ngrkOjutP6Ei6uunDr0q47biiziJyZwa5OwvZFalSH5fwGo4W6GI0pBymJo+9YxXiW XQyk6zIlkcDyY990GpA= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191215215033 20191208215033 54347 twai.gov. En9EwsID1Hj+8lxXX7+r9q5jq9K5lzOqSJOzZTPSm6GASZS447x4Q8a2oZxX4mBW5+A9ozOWNIZT npH6tJiO4d7EdzE6OWyfjd61AW+AXDUOUJC8BAMHkRRETV1R80o++Mubf2mXy4nsowoNNBJFSczM dOHjPZvno4KUjwipllw= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191218055030 20191211055030 50918 twai.gov. MMoVxAEROAA8Z0wE8alGETJML2063dmzKksR0AtqKu3wXvxj62V3AX+ZEua0JB1JcmF6CtFU4cKN yruNVD06bdxKf5StxuAKDVWr9Hs4pxG3uEeihkKJBrPhnoNjhlLJE7TyGzVNGG9dQwPo6xLKQKmk d6L9qXrE12bqYAh2bvs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.twai.GOV for ASAP.GOV/A
	Received 389 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (389 bytes) ;; HEADER SECTION ;; id = 32735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ASAP.GOV. IN A ;; ANSWER SECTION (3 records) ASAP.GOV. 5 IN A 199.169.192.25 ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20191215215326 20191208215326 56072 asap.gov. bkQe5AMd2hLsmTtKprZiReTGagXTIXR99PoT41gC8fNY9Je/D19DYBqqssLQaNgtYuwlgSLLb94f XqR6p3bEiJEWEK2orgF5HU9WrQW+8jZ55F343tTuOR+2PhJNQOT1AS0jef88o8HwEiAxXMKT0w6Z NLasQ2sl/nJi2dVrnJY= ) ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20191218055225 20191211055225 36497 asap.gov. tCaiHVJqnmG6PaTzRJRCb9fL8VNpkz7CnAzYD7tByrX1nejAh+cIFSzcedfOM9IEvZcT9+uOfViW cDQGHrWmBHAY49ClOtU/uzNtm04eTWwPp8EAg/6fTzOfjNF/TFSe4NnmfnXe5dZGmGWZ8EumcGt5 fy070Cz2Do5BZSJwshQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ASAP.GOV A RR has value 199.169.192.25
	Found 2 RRSIGs over A RRset
	`ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20191215215326 20191208215326 56072 asap.gov. bkQe5AMd2hLsmTtKprZiReTGagXTIXR99PoT41gC8fNY9Je/D19DYBqqssLQaNgtYuwlgSLLb94f XqR6p3bEiJEWEK2orgF5HU9WrQW+8jZ55F343tTuOR+2PhJNQOT1AS0jef88o8HwEiAxXMKT0w6Z NLasQ2sl/nJi2dVrnJY= )`
	`ASAP.GOV. 5 IN RRSIG ( A 7 2 5 20191218055225 20191211055225 36497 asap.gov. tCaiHVJqnmG6PaTzRJRCb9fL8VNpkz7CnAzYD7tByrX1nejAh+cIFSzcedfOM9IEvZcT9+uOfViW cDQGHrWmBHAY49ClOtU/uzNtm04eTWwPp8EAg/6fTzOfjNF/TFSe4NnmfnXe5dZGmGWZ8EumcGt5 fy070Cz2Do5BZSJwshQ= )`
	RRSIG=56072 and DNSKEY=56072 verifies the A RRset
	RRSIG=36497 and DNSKEY=36497 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ASAP.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: