Apex domains cannot have CNAME records.
Question and response
Question
dig ba.cnr.it. NS
Answer
ba.cnr.it. 5 NS dns2.ba.cnr.it.
ba.cnr.it. 5 NS ns2.iit.cnr.it.
ba.cnr.it. 5 NS nameserver.cnr.it.
Authority
The response has no authority records.
Additional
nameserver.cnr.it. 5 A 194.119.192.34
nameserver.cnr.it. 5 AAAA 2a00:1620:c0:220:194:119:192:34
. 0 OPT ; payload 1232, xrcode 0, version 0, flags 0