diff --git a/src/test/tpkg/123-run-getdns_validate.tpkg/123-run-getdns_validate.test b/src/test/tpkg/123-run-getdns_validate.tpkg/123-run-getdns_validate.test
index 8439ee62..15df16e8 100644
--- a/src/test/tpkg/123-run-getdns_validate.tpkg/123-run-getdns_validate.test
+++ b/src/test/tpkg/123-run-getdns_validate.tpkg/123-run-getdns_validate.test
@@ -4,10 +4,22 @@
 # use .tpkg.var.test for in test variable passing
 [ -f .tpkg.var.test ] && source .tpkg.var.test
 
-"${GETDNS_VALIDATE}" -k root.ds -s root.keys -d 2019-11-19 www.test.heggggg.A www.test.heggggg
-"${GETDNS_VALIDATE}" -k root.ds -s root.keys -d 2019-11-19 nl.DS
-cat root.keys nl.DS nl.keys >support
-"${GETDNS_VALIDATE}" -k root.ds -s support -d 2019-11-19 nlnetlabs.DS
-cat root.keys nl.DS nl.keys nlnetlabs.DS  nlnetlabs.keys >support
-"${GETDNS_VALIDATE}" -k root.ds -s support -d 2019-11-19 www.nlnetlabs.nl.AAAA
+function FAIL () {
+	echo FAIL: $*
+	exit 1
+}
+
+"${GETDNS_VALIDATE}" -k root.ds -s root.keys -d 2019-11-19 www.test.heggggg.A www.test.heggggg \
+| grep ^400  || FAIL -k root.ds -s root.keys -d 2019-11-19 www.test.heggggg.A www.test.heggggg
+
+"${GETDNS_VALIDATE}" -k root.ds -s root.keys -d 2019-11-19 nl.DS \
+| grep ^400  || FAIL -k root.ds -s root.keys -d 2019-11-19 nl.DS
+
+cat root.keys nl.DS nl.keys >support
+"${GETDNS_VALIDATE}" -k root.ds -s support -d 2019-11-19 nlnetlabs.DS \
+| grep ^400  || FAIL -k root.ds -s support -d 2019-11-19 nlnetlabs.DS
+
+cat root.keys nl.DS nl.keys nlnetlabs.DS  nlnetlabs.keys >support
+"${GETDNS_VALIDATE}" -k root.ds -s support -d 2019-11-19 www.nlnetlabs.nl.AAAA \
+| grep ^400  || FAIL -k root.ds -s support -d 2019-11-19 www.nlnetlabs.nl.AAAA