The owner name for the DNSKEY record in the received keyset must correspond to a valid delegation.
# grep DNSKEY keyset-child-zone-file
[ENTER]
child-zone-name. 3600 IN DNSKEY 256 3 5 ( ... );
key id = keytag
child-zone-name must exist in
the parent zone-file as a valid delegation.
# grep NS zone-file
[ENTER]
... child-zone-name NS server A ...
...