ndig
+dnssec [@server] record [TYPE]
nAnswer Flags are relevant
nExample query to a authoritative nameserver
u;
<<>> DiG 9.1.1 <<>> +dnssec @193.0.0.202 www.ripencc.dnssec.nl.nl
u;; global options: printcmd
u;; Got answer:
u;; ->>HEADER<<- opcode: QUERY, status:
NOERROR, id: 1947
u;;
flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 3, ADDITIONAL: 4
n