@nictool/dns-resource-record 1.4.0 → 1.6.0

package/rr/nsec3param.js

@@ -11,7 +11,7 @@ export default class NSEC3PARAM extends RR {
   setHashAlgorithm(val) {
     // Hash Algorithm is a single octet.
     // The Hash Algorithm field is represented as an unsigned decimal integer.
-    if (!val) this.throwHelp(`NSEC3PARAM: 'hash algorithm' is required`)
+    if (val === undefined || val === null) this.throwHelp(`NSEC3PARAM: 'hash algorithm' is required`)
 
     this.is8bitInt('NSEC3PARAM', 'hash algorithm', val)
 
@@ -20,7 +20,7 @@ export default class NSEC3PARAM extends RR {
 
   setFlags(val) {
     // The Flags field is represented as an unsigned decimal integer.
-    if (!val) this.throwHelp(`NSEC3PARAM: 'flags' is required`)
+    if (val === undefined || val === null) this.throwHelp(`NSEC3PARAM: 'flags' is required`)
 
     this.is8bitInt('NSEC3PARAM', 'flags', val)
 
@@ -29,7 +29,7 @@ export default class NSEC3PARAM extends RR {
 
   setIterations(val) {
     // The Iterations field is represented as an unsigned decimal integer. 0-65535
-    if (!val) this.throwHelp(`NSEC3PARAM: 'iterations' is required`)
+    if (val === undefined || val === null) this.throwHelp(`NSEC3PARAM: 'iterations' is required`)
 
     this.is16bitInt('NSEC3PARAM', 'iterations', val)
 
@@ -41,6 +41,15 @@ export default class NSEC3PARAM extends RR {
     // hexadecimal digits.  Whitespace is not allowed within the
     // sequence.  The Salt field is represented as "-" (without the
     // quotes) when the Salt Length field has a value of 0
+    if (val === '-') {
+      this.set('salt', val)
+      return
+    }
+
+    if (val !== undefined && val !== null && !/^[0-9A-Fa-f]*$/.test(val)) {
+      this.throwHelp(`NSEC3PARAM: 'salt' must be hex or '-'`)
+    }
+
     this.set('salt', val)
   }
 
@@ -48,6 +57,10 @@ export default class NSEC3PARAM extends RR {
     return 'Next Secure Parameters'
   }
 
+  getTags() {
+    return ['dnssec']
+  }
+
   getRdataFields(arg) {
     return ['hash algorithm', 'flags', 'iterations', 'salt']
   }
@@ -60,12 +73,25 @@ export default class NSEC3PARAM extends RR {
     return 51
   }
 
+  getCanonical() {
+    return {
+      owner: 'example.com.',
+      ttl: 3600,
+      class: 'IN',
+      type: 'NSEC3PARAM',
+      'hash algorithm': 1,
+      flags: 1,
+      iterations: 12,
+      salt: 'aabbccdd',
+    }
+  }
+
   /******  IMPORTERS   *******/
 
-  fromBind(str) {
+  fromBind({ bindline }) {
     // test.example.com  3600  IN  NSEC3PARAM  <hash> <flags> <iterations> <salt>
     // Example: test.example.com. 3600 IN NSEC3PARAM 1 1 12 aabbccdd
-    const [owner, ttl, c, type, ha, flags, iterations, salt] = str.split(/\s+/)
+    const [owner, ttl, c, type, ha, flags, iterations, salt] = bindline.split(/\s+/)
     return new NSEC3PARAM({
       owner,
       ttl: parseInt(ttl, 10),
@@ -78,22 +104,27 @@ export default class NSEC3PARAM extends RR {
     })
   }
 
-  fromTinydns(opts) {
-    const rd = opts.rd
-
+  fromTinydns({ tinyline }) {
     // RDATA format: Hash Algorithm (3 octal chars) + Flags (3 octal chars) + Iterations (6 octal chars) + Salt (escaped hex string)
-    if (rd.length < 12) {
+    const [owner, _typeId, rd, ttl, ts, loc] = tinyline.slice(1).split(':')
+    if (rd.length < 4) {
       this.throwHelp(`NSEC3PARAM: RDATA too short: ${rd}`)
     }
 
+    // rd may contain actual binary characters (from JS string '\\001' -> char 0x01),
+    // so convert via octalToChar and read bytes from a Buffer for robust parsing.
+    const bytes = Buffer.from(TINYDNS.octalToChar(rd), 'binary')
+
     return new NSEC3PARAM({
-      owner: this.fullyQualify(opts.owner),
-      ttl: parseInt(opts.ttl, 10),
+      owner: this.fullyQualify(owner),
+      ttl: parseInt(ttl, 10),
       type: 'NSEC3PARAM',
-      'hash algorithm': TINYDNS.octalToUInt8(rd.substring(0, 3)),
-      flags: TINYDNS.octalToUInt8(rd.substring(3, 6)),
-      iterations: TINYDNS.octalToUInt16(rd.substring(6, 12)),
-      salt: TINYDNS.unescapeOctal(rd.substring(12)),
+      'hash algorithm': bytes.readUInt8(0),
+      flags: bytes.readUInt8(1),
+      iterations: bytes.readUInt16BE(2),
+      salt: bytes.slice(4).toString('utf8'),
+      timestamp: ts,
+      location: loc?.trim() ?? '',
     })
   }
 
@@ -108,12 +139,11 @@ export default class NSEC3PARAM extends RR {
   toTinydns() {
     const dataRe = new RegExp(/[\r\n\t:\\/]/, 'g')
 
-    let rdata = ''
-    rdata += TINYDNS.UInt8toOctal(this.get('hash algorithm'))
-    rdata += TINYDNS.UInt8toOctal(this.get('flags'))
-    rdata += TINYDNS.UInt16toOctal(this.get('iterations'))
-    rdata += TINYDNS.escapeOctal(dataRe, this.get('salt'))
-
-    return this.getTinydnsGeneric(rdata)
+    return this.getTinydnsGeneric(
+      TINYDNS.UInt8toOctal(this.get('hash algorithm')) +
+        TINYDNS.UInt8toOctal(this.get('flags')) +
+        TINYDNS.UInt16toOctal(this.get('iterations')) +
+        TINYDNS.escapeOctal(dataRe, this.get('salt')),
+    )
   }
 }

package/rr/nxt.js

@@ -29,6 +29,10 @@ export default class NXT extends RR {
     return 'Next Secure'
   }
 
+  getTags() {
+    return ['deprecated']
+  }
+
   getRdataFields(arg) {
     return ['next domain', 'type bit map']
   }
@@ -41,11 +45,22 @@ export default class NXT extends RR {
     return 30
   }
 
+  getCanonical() {
+    return {
+      owner: 'big.example.com.',
+      ttl: 3600,
+      class: 'IN',
+      type: 'NXT',
+      'next domain': 'host.example.com.',
+      'type bit map': 'A MX NXT',
+    }
+  }
+
   /******  IMPORTERS   *******/
 
-  fromTinydns(opts) {
-    const [owner, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
-    if (n != 30) this.throwHelp('NXT fromTinydns, invalid n')
+  fromTinydns({ tinyline }) {
+    const [owner, n, rdata, ttl, ts, loc] = tinyline.slice(1).split(':')
+    if (parseInt(n, 10) !== this.getTypeId()) this.throwHelp('NXT fromTinydns, invalid n')
 
     const binaryRdata = Buffer.from(TINYDNS.octalToChar(rdata), 'binary')
     const [nextDomain, _escapedLen, binaryLen] = TINYDNS.unpackDomainName(rdata)
@@ -57,20 +72,20 @@ export default class NXT extends RR {
       'next domain': nextDomain,
       'type bit map': binaryRdata.slice(binaryLen).toString(),
       timestamp: ts,
-      location: loc !== '' && loc !== '\n' ? loc : '',
+      location: loc?.trim() ?? '',
     })
   }
 
-  fromBind(opts) {
+  fromBind({ bindline }) {
     // test.example.com  3600  IN  NXT NextDomain TypeBitMap
-    const [owner, ttl, c, type, next] = opts.bindline.split(/\s+/)
+    const [owner, ttl, c, type, next] = bindline.split(/\s+/)
     return new NXT({
       owner,
       ttl: parseInt(ttl, 10),
       class: c,
       type: type,
       'next domain': next,
-      'type bit map': opts.bindline.split(/\s+/).slice(5).filter(removeParens).join(' ').trim(),
+      'type bit map': bindline.split(/\s+/).slice(5).filter(removeParens).join(' ').trim(),
     })
   }
 

package/rr/openpgpkey.js

@@ -15,6 +15,10 @@ export default class OPENPGPKEY extends RR {
     return 'OpenPGP Public Key'
   }
 
+  getTags() {
+    return ['security']
+  }
+
   getRdataFields() {
     return ['public key']
   }
@@ -27,12 +31,25 @@ export default class OPENPGPKEY extends RR {
     return 61
   }
 
+  getCanonical() {
+    return {
+      owner: 'matt.example.com.',
+      ttl: 3600,
+      class: 'IN',
+      type: 'OPENPGPKEY',
+      'public key': 'mQINBFY...',
+    }
+  }
+
   /******  IMPORTERS   *******/
-  fromBind(obj) {
+  fromBind({ bindline: bindline }) {
     // test.example.com  3600  IN  OPENPGPKEY  <base64 public key>
-    const regex = /^([\S]+)\s+(\d{1,10})\s+(IN)\s+(OPENPGPKEY)\s+([\W\w]*)$/
-    // eslint-disable-next-line no-unused-vars
-    const [ignore, owner, ttl, c, type, publickey] = obj.bindline.trim().match(regex)
+    const regex =
+      /^(?<owner>\S+)\s+(?<ttl>\d{1,10})\s+(?<class>IN)\s+(?<type>OPENPGPKEY)\s+(?<publickey>\S[\s\S]*)$/i
+    const match = bindline.trim().match(regex)
+    if (!match) this.throwHelp(`unable to parse OPENPGPKEY: ${bindline}`)
+
+    const { owner, ttl, class: c, type, publickey } = match.groups
 
     return new OPENPGPKEY({
       owner,
@@ -43,12 +60,15 @@ export default class OPENPGPKEY extends RR {
     })
   }
 
-  fromTinydns(opts) {
+  fromTinydns({ tinyline }) {
+    const [owner, _typeId, rd, ttl, ts, loc] = tinyline.slice(1).split(':')
     return new OPENPGPKEY({
-      owner: this.fullyQualify(opts.owner),
-      ttl: parseInt(opts.ttl, 10),
+      owner: this.fullyQualify(owner),
+      ttl: parseInt(ttl, 10),
       type: 'OPENPGPKEY',
-      'public key': Buffer.from(TINYDNS.unescapeOctal(opts.rd), 'base64').toString('utf-8'),
+      'public key': Buffer.from(TINYDNS.unescapeOctal(rd), 'base64').toString('utf-8'),
+      timestamp: ts,
+      location: loc?.trim() ?? '',
     })
   }
 

package/rr/ptr.js

@@ -18,6 +18,10 @@ export default class PTR extends RR {
     return 'Pointer'
   }
 
+  getTags() {
+    return ['common']
+  }
+
   getRdataFields(arg) {
     return ['dname']
   }
@@ -30,10 +34,20 @@ export default class PTR extends RR {
     return 12
   }
 
+  getCanonical() {
+    return {
+      owner: '2.2.0.192.in-addr.arpa.',
+      ttl: 3600,
+      class: 'IN',
+      type: 'PTR',
+      dname: 'host.example.com.',
+    }
+  }
+
   /******  IMPORTERS   *******/
-  fromTinydns(opts) {
+  fromTinydns({ tinyline }) {
     // ^fqdn:p:ttl:timestamp:lo
-    const [fqdn, p, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
+    const [fqdn, p, ttl, ts, loc] = tinyline.slice(1).split(':')
 
     return new PTR({
       owner: this.fullyQualify(fqdn),
@@ -41,13 +55,13 @@ export default class PTR extends RR {
       type: 'PTR',
       dname: this.fullyQualify(p),
       timestamp: ts,
-      location: loc !== '' && loc !== '\n' ? loc : '',
+      location: loc?.trim() ?? '',
     })
   }
 
-  fromBind(opts) {
+  fromBind({ bindline }) {
     // test.example.com  3600  IN  PTR  dname
-    const [owner, ttl, c, type, dname] = opts.bindline.split(/\s+/)
+    const [owner, ttl, c, type, dname] = bindline.split(/\s+/)
     return new PTR({
       owner,
       ttl: parseInt(ttl, 10),
@@ -58,6 +72,10 @@ export default class PTR extends RR {
   }
 
   /******  EXPORTERS   *******/
+  getWireRdata() {
+    return this.wirePackDomain(this.get('dname'))
+  }
+
   toTinydns() {
     return `^${this.getTinyFQDN('owner')}:${this.getTinyFQDN('dname')}:${this.getTinydnsPostamble()}\n`
   }

package/rr/rp.js

@@ -28,6 +28,10 @@ export default class RP extends RR {
     return 'Responsible Person'
   }
 
+  getTags() {
+    return ['obsolete']
+  }
+
   getRdataFields(arg) {
     return ['mbox', 'txt']
   }
@@ -52,9 +56,9 @@ export default class RP extends RR {
   }
 
   /******  IMPORTERS   *******/
-  fromBind(opts) {
+  fromBind({ bindline }) {
     // test.example.com  3600  IN  RP  mbox txt
-    const [owner, ttl, c, type, mbox, txt] = opts.bindline.split(/\s+/)
+    const [owner, ttl, c, type, mbox, txt] = bindline.split(/\s+/)
     return new RP({
       owner,
       ttl: parseInt(ttl, 10),
@@ -65,6 +69,23 @@ export default class RP extends RR {
     })
   }
 
+  fromTinydns({ tinyline }) {
+    const [owner, _typeId, rdata, ttl, ts, loc] = tinyline.slice(1).split(':')
+
+    const [mbox, consumed] = TINYDNS.unpackDomainName(rdata)
+    const txt = TINYDNS.unpackDomainName(rdata.slice(consumed))[0]
+
+    return new RP({
+      owner: this.fullyQualify(owner),
+      ttl: parseInt(ttl, 10),
+      type: 'RP',
+      mbox,
+      txt,
+      timestamp: ts,
+      location: loc?.trim() ?? '',
+    })
+  }
+
   /******  EXPORTERS   *******/
   toBind(zone_opts) {
     return `${this.getPrefix(zone_opts)}\t${this.getFQDN('mbox', zone_opts)}\t${this.getFQDN('txt', zone_opts)}\n`

package/rr/rrsig.js

@@ -1,4 +1,5 @@
 import RR from '../rr.js'
+import * as TINYDNS from '../lib/tinydns.js'
 
 export default class RRSIG extends RR {
   constructor(opts) {
@@ -77,6 +78,10 @@ export default class RRSIG extends RR {
     return 'Resource Record Signature'
   }
 
+  getTags() {
+    return ['dnssec']
+  }
+
   getRdataFields(arg) {
     return [
       'type covered',
@@ -99,18 +104,109 @@ export default class RRSIG extends RR {
     return 46
   }
 
+  getCanonical() {
+    return {
+      owner: 'example.com.',
+      ttl: 3600,
+      class: 'IN',
+      type: 'RRSIG',
+      'type covered': 1,
+      algorithm: 5,
+      labels: 3,
+      'original ttl': 3600,
+      'signature expiration': 1045053120,
+      'signature inception': 1042461120,
+      'key tag': 12345,
+      'signers name': 'example.com.',
+      signature: 'ABCDEF...',
+    }
+  }
+
   /******  IMPORTERS   *******/
 
-  // fromBind (str) {
-  //   // test.example.com  3600  IN  RRSIG ...
-  //   const [ owner, ttl, c, type ] = str.split(/\s+/)
-  //   return new RRSIG({
-  //     owner,
-  //     ttl          : parseInt(ttl, 10),
-  //     class        : c,
-  //     type         : type,
-  //   })
-  // }
+  fromBind({ bindline }) {
+    // example.com. 3600 IN RRSIG typecovered algorithm labels origttl sigexp siginc keytag signersname ( signature )
+    const parts = bindline.trim().split(/\s+/)
+    return new RRSIG({
+      owner: parts[0],
+      ttl: parseInt(parts[1], 10),
+      class: parts[2],
+      type: 'RRSIG',
+      'type covered': parseInt(parts[4], 10),
+      algorithm: parseInt(parts[5], 10),
+      labels: parseInt(parts[6], 10),
+      'original ttl': parseInt(parts[7], 10),
+      'signature expiration': parseInt(parts[8], 10),
+      'signature inception': parseInt(parts[9], 10),
+      'key tag': parseInt(parts[10], 10),
+      'signers name': parts[11],
+      signature: parts
+        .slice(12)
+        .filter((a) => a !== '(' && a !== ')')
+        .join(' ')
+        .trim(),
+    })
+  }
+
+  fromTinydns({ tinyline }) {
+    const [fqdn, n, rdata, ttl, ts, loc] = tinyline.slice(1).split(':')
+    if (parseInt(n, 10) !== this.getTypeId()) this.throwHelp('RRSIG fromTinydns, invalid n')
+
+    const bytes = Buffer.from(TINYDNS.octalToChar(rdata), 'binary')
+    const typeCovered = bytes.readUInt16BE(0)
+    const algorithm = bytes.readUInt8(2)
+    const labels = bytes.readUInt8(3)
+    const originalTtl = bytes.readUInt32BE(4)
+    const signatureExpiration = bytes.readUInt32BE(8)
+    const signatureInception = bytes.readUInt32BE(12)
+    const keyTag = bytes.readUInt16BE(16)
+
+    let pos = 18
+    const labelArr = []
+    while (pos < bytes.length) {
+      const len = bytes.readUInt8(pos++)
+      if (len === 0) break
+      labelArr.push(bytes.slice(pos, pos + len).toString())
+      pos += len
+    }
+    const signersName = `${labelArr.join('.')}.`
+    const signature = bytes.slice(pos).toString()
+
+    return new RRSIG({
+      owner: this.fullyQualify(fqdn),
+      ttl: parseInt(ttl, 10),
+      type: 'RRSIG',
+      'type covered': typeCovered,
+      algorithm,
+      labels,
+      'original ttl': originalTtl,
+      'signature expiration': signatureExpiration,
+      'signature inception': signatureInception,
+      'key tag': keyTag,
+      'signers name': signersName,
+      signature,
+      timestamp: ts,
+      location: loc?.trim() ?? '',
+    })
+  }
 
   /******  EXPORTERS   *******/
+  toBind(zone_opts) {
+    return `${this.getPrefix(zone_opts)}\t${this.get('type covered')}\t${this.get('algorithm')}\t${this.get('labels')}\t${this.get('original ttl')}\t${this.get('signature expiration')}\t${this.get('signature inception')}\t${this.get('key tag')}\t${this.getFQDN('signers name', zone_opts)}\t${this.get('signature')}\n`
+  }
+
+  toTinydns() {
+    const dataRe = new RegExp(/[\r\n\t:]/, 'g')
+    return this.getTinydnsGeneric(
+      TINYDNS.UInt16toOctal(this.get('type covered')) +
+        TINYDNS.UInt8toOctal(this.get('algorithm')) +
+        TINYDNS.UInt8toOctal(this.get('labels')) +
+        TINYDNS.UInt32toOctal(this.get('original ttl')) +
+        TINYDNS.UInt32toOctal(this.get('signature expiration')) +
+        TINYDNS.UInt32toOctal(this.get('signature inception')) +
+        TINYDNS.UInt16toOctal(this.get('key tag')) +
+        TINYDNS.packDomainName(this.get('signers name')) +
+        TINYDNS.escapeOctal(dataRe, this.get('signature')),
+    )
+  }
 }

package/rr/sig.js

@@ -1,5 +1,7 @@
 import RR from '../rr.js'
 
+import * as TINYDNS from '../lib/tinydns.js'
+
 export default class SIG extends RR {
   constructor(opts) {
     super(opts)
@@ -15,8 +17,7 @@ export default class SIG extends RR {
 
   setAlgorithm(val) {
     // a 1 octet Algorithm field
-
-    this.is8bitInt('SIG', 'labels', val)
+    this.is8bitInt('SIG', 'algorithm', val)
 
     this.set('algorithm', val)
   }
@@ -67,6 +68,10 @@ export default class SIG extends RR {
     return 'Signature'
   }
 
+  getTags() {
+    return ['obsolete']
+  }
+
   getRdataFields(arg) {
     return [
       'type covered',
@@ -82,26 +87,119 @@ export default class SIG extends RR {
   }
 
   getRFCs() {
-    return [2535]
+    return [2535, 3755]
   }
 
   getTypeId() {
     return 24
   }
 
+  getCanonical() {
+    return {
+      owner: 'example.com.',
+      ttl: 3600,
+      class: 'IN',
+      type: 'SIG',
+      'type covered': 1,
+      algorithm: 5,
+      labels: 3,
+      'original ttl': 3600,
+      'signature expiration': 1045053120,
+      'signature inception': 1042461120,
+      'key tag': 12345,
+      'signers name': 'example.com.',
+      signature: 'ABCDEF...',
+    }
+  }
+
   /******  IMPORTERS   *******/
-  // fromBind (str) {
-  //   // test.example.com  3600  IN  SIG ...
-  //   const [ owner, ttl, c, type ] = str.split(/\s+/)
-  //   return new SIG({
-  //     owner,
-  //     ttl          : parseInt(ttl, 10),
-  //     class        : c,
-  //     type         : type,
-  //   })
-  // }
+
+  fromBind({ bindline }) {
+    // example.com. 3600 IN SIG TypeCovered Algorithm Labels OrigTTL SigExpiration SigInception KeyTag SignersName ( Signature )
+    const parts = bindline.trim().split(/\s+/)
+
+    return new SIG({
+      owner: parts[0],
+      ttl: parseInt(parts[1], 10),
+      class: parts[2],
+      type: 'SIG',
+      'type covered': parseInt(parts[4], 10),
+      algorithm: parseInt(parts[5], 10),
+      labels: parseInt(parts[6], 10),
+      'original ttl': parseInt(parts[7], 10),
+      'signature expiration': parseInt(parts[8], 10),
+      'signature inception': parseInt(parts[9], 10),
+      'key tag': parseInt(parts[10], 10),
+      'signers name': parts[11],
+      signature: parts
+        .slice(12)
+        .filter((a) => a !== '(' && a !== ')')
+        .join(' ')
+        .trim(),
+    })
+  }
 
   /******  EXPORTERS   *******/
+  toTinydns() {
+    const dataRe = new RegExp(/[\r\n\t:]/, 'g')
+
+    return this.getTinydnsGeneric(
+      TINYDNS.UInt16toOctal(this.get('type covered')) +
+        TINYDNS.UInt8toOctal(this.get('algorithm')) +
+        TINYDNS.UInt8toOctal(this.get('labels')) +
+        TINYDNS.UInt32toOctal(this.get('original ttl')) +
+        TINYDNS.UInt32toOctal(this.get('signature expiration')) +
+        TINYDNS.UInt32toOctal(this.get('signature inception')) +
+        TINYDNS.UInt16toOctal(this.get('key tag')) +
+        TINYDNS.packDomainName(this.get('signers name')) +
+        TINYDNS.escapeOctal(dataRe, this.get('signature')),
+    )
+  }
+
+  fromTinydns({ tinyline }) {
+    const [fqdn, n, rdata, ttl, ts, loc] = tinyline.substring(1).split(':')
+    if (parseInt(n, 10) !== this.getTypeId()) this.throwHelp('SIG fromTinydns, invalid n')
+
+    const bytes = Buffer.from(TINYDNS.octalToChar(rdata), 'binary')
+
+    const typeCovered = bytes.readUInt16BE(0)
+    const algorithm = bytes.readUInt8(2)
+    const labels = bytes.readUInt8(3)
+    const originalTtl = bytes.readUInt32BE(4)
+    const signatureExpiration = bytes.readUInt32BE(8)
+    const signatureInception = bytes.readUInt32BE(12)
+    const keyTag = bytes.readUInt16BE(16)
+
+    // parse signers name from binary buffer starting at offset 18
+    let pos = 18
+    const labelsArr = []
+    while (pos < bytes.length) {
+      const len = bytes.readUInt8(pos++)
+      if (len === 0) break
+      labelsArr.push(bytes.slice(pos, pos + len).toString())
+      pos += len
+    }
+    const signersName = `${labelsArr.join('.')}.`
+
+    const signature = bytes.slice(pos).toString()
+
+    return new SIG({
+      owner: this.fullyQualify(fqdn),
+      ttl: parseInt(ttl, 10),
+      type: 'SIG',
+      'type covered': typeCovered,
+      algorithm,
+      labels,
+      'original ttl': originalTtl,
+      'signature expiration': signatureExpiration,
+      'signature inception': signatureInception,
+      'key tag': keyTag,
+      'signers name': signersName,
+      signature,
+      timestamp: ts,
+      location: loc?.trim() ?? '',
+    })
+  }
 
   toBind(zone_opts) {
     return `${this.getFQDN('owner', zone_opts)}	${this.get('ttl')}	${this.get('class')}	SIG${this.getRdataFields()