<p>The domain name system (DNS) provides essential services for translations between human-readable domain names and IP addresses, which runs under global DNS roots. DNS roots face security vulnerabilities and trust risks due to the centralized management architecture. Several related schemes have been proposed to mitigate the security vulnerabilities and trust risks. However, most methods on trust risks focus on verifying their mechanisms. The comparison of the actual operational effectiveness of these methods and the existing DNS is rarely disclosed. In this paper, we present a trustworthy decentralized DNS root management architecture called AR based on blockchain. Instead of all top level domains (TLDs) authorized by an institution, the root owner in AR has the authority over its TLDs. Our proposed AR can work with the global roots without influencing the operation of the existing DNS. A cross-national and cross-regional research testbed is constructed on the Internet to verify the feasibility and practicality of our proposed AR.</p>