# expchk -all -warn 10 keyrec-file [ENTER]

This checks the keyrec file to see if the zone has signatures expiring in the next 10 days.

It would be good to run this command regularly. The cron command can be set to execute expchk at regular intervals.