DNSSEC awk test is not precise enough

This test failed when the input was good.

awk '/IN *SOA/ {if (NF != 11) exit(1)}' signer/signer.out.3 || ret=1

Output that matched.

[ant-5628:system/dnssec/signer] marka% awk '/IN *SOA/ {print; print NF}' signer.out.3
example.				      60 IN SOA		example. . 0 0 0 0 0
11
example.				      60 IN DNSKEY	257 3 13 oCFm3P5uMtWuqXqbyUUlHHNgjCztzASAFhXUlnnudcYkYmNwOwYm6jah RewD1COujT/Lj2+JyKDV3sFRrINSOA==
9
[ant-5628:system/dnssec/signer] marka%