DNSSEC validation checking

Hello

I am looking for “unbound API” documents on how to handle validation checking.

I think the API would include setting “Checking Disabled (CD)”, and a response flag for “Authenticated Data (AD)”.

RFC 4034, Resource Records for the DNS Security Extensions

Thanks