question about DNSSEC in bind9

[Arlen Hing]

I use nslookup to lookup some host, but it return
"RR format error" , what is that means ?



> host.sub.i.x
Server:  [192.168.1.254]
Address:  192.168.1.254

;; res_nmkquery(QUERY, host.sub.i.x, IN, A)
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 4007, rcode = NOERROR
        header flags:  response, want recursion, recursion avail., authentic
data
        questions = 1,  answers = 2,  authority records = 2,  additional = 2

    QUESTIONS:
        host.sub.i.x, type = A, class = IN
    ANSWERS:
    ->  host.sub.i.x
        internet address = 192.168.1.102
        ttl = 86265 (23h57m45s)
    ->  host.sub.i.x
        record type SIG, interpreted as:
?.                      23h57m45s IN SIG  A 3 4 86400 \#(               ; RR
format error
        3a 1f 63 a7 39 f7 d6 a7 ad e1 03 73 75 62 01 69 ; :.c.9......sub.i
        01 78 00 04 77 8b 1f 3e 59 f6 38 50 d5 ee e1 57 ; .x..w..>Y.8P...W
        22 e4 9f f8 46 0d e2 18 23 82 cf 2a 3d 5e 09 91 ; "...F...#..*=^..
        fc 6f 5a 4a c3 78 d2 2a ae 63 a1 fc )           ; .oZJ.x.*.c..
        ttl = 86265 (23h57m45s)
    AUTHORITY RECORDS:
    ->  sub.i.x
        nameserver = es.sub.i.x
        ttl = 86265 (23h57m45s)
    ->  sub.i.x
        record type SIG, interpreted as:
?.                      23h57m45s IN SIG  NS 3 3 86400 \#(              ; RR
format error
        3a 1f 63 a7 39 f7 d6 a7 ad e1 03 73 75 62 01 69 ; :.c.9......sub.i
        01 78 00 04 9c 6c 10 29 9e fc 83 45 fc 93 71 9c ; .x...l.)...E..q.
        ae ff 0e e5 13 1e 4e 9b 37 19 54 fc 6c 00 2a d2 ; ......N.7.T.l.*.
        ea f8 b6 18 0e c1 12 2b 60 a7 c8 74 )           ; .......+`..t
        ttl = 86265 (23h57m45s)
    ADDITIONAL RECORDS:
    ->  es.sub.i.x
        internet address = 192.168.1.15
        ttl = 86246 (23h57m26s)
    ->  es.sub.i.x
        record type SIG, interpreted as:
?.                      23h57m26s IN SIG  A 3 4 86400 \#(               ; RR
format error
        3a 1f 63 a7 39 f7 d6 a7 ad e1 03 73 75 62 01 69 ; :.c.9......sub.i
        01 78 00 04 6f 57 5b d3 7e c0 29 30 1e f8 16 59 ; .x..oW[.~.)0...Y
        77 dc 7e 46 de 95 da 38 59 20 d2 8a f9 4e 13 0a ; w.~F...8Y ...N..
        f9 da 77 1a f0 f4 be 26 d2 c7 d9 47 )           ; ..w....&...G
        ttl = 86246 (23h57m26s)

------------
Answer crypto-validated by server:
Non-authoritative answer:
Name:    host.sub.i.x
Address:  192.168.1.102

>