When resolving a cname for example test.
example.com we are recieving a DNS SEC error that is only happening occasinally and only happens when using 220.127.116.11 the message from linux (dig) is as follows:
failed to verify signatures for
example.com opt-out proof
Error 10 - RRSIGs Missing
This does not occur when using 18.104.22.168 as the resolver.