RRSIG d4a5n1.rootcanary.net/DNSKEY alg 5, id 23554: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 5 (RSASHA1). See RFC 8624, Sec. 3.1.
RRSIG secure.d4a5n1.rootcanary.net/A alg 5, id 23554: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 5 (RSASHA1). See RFC 8624, Sec. 3.1.
RRSIG secure.d4a5n1.rootcanary.net/AAAA alg 5, id 23554: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 5 (RSASHA1). See RFC 8624, Sec. 3.1.
d4a5n1.rootcanary.net/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.