Thanks for the guide, I ran the two following commands and here is the output as screenshots.
Test validation
You can test DNSSEC validation using
dig fail01.dnssec.works @127.0.0.1 -p 5335
dig +ad dnssec.works @127.0.0.1 -p 5335
Is DNSSEC running correctly?
Thanks

