XV-SA-02

The signature (ds:SignatureValue) does not verify with the public key of the certificate in the signature over the invoice hash it states.

error: the document is invalid

What the rule checks

As the rule set's publisher wrote it. The rule runs on every element the context matches, and fails where the test is false; the validator reports the line of that element.

ZATCA cryptographic stamp and QR code checks Security Features Implementation Standards 1.1, SDK 3.4.6

Context

/*[ext:UBLExtensions//ds:Signature]

Test

not($reference and $value and $certificate) or js:xvEcdsaVerify($stated, $value, $certificate) ne 'invalid'

Checked with Saudi Arabia ZATCA Tax Invoice (UBL), Saudi Arabia ZATCA Simplified Tax Invoice (UBL)

Check your document

Choose the schema in the validator: it checks the structure first, then every business rule, and points at the line of each failure. It runs in your browser; nothing is uploaded.

Validate a document

Related rules

XV-SA-01 The invoice hash in the signature (DigestValue of the invoiceSignedData reference, …) is not the hash of the i...
XV-SA-03 The certificate digest in the signed properties (xades:CertDigest, …) is not that of the certificate in the si...
XV-SA-04 The digest of the signed properties in the signature (…) is not that of xades:SignedProperties (…).
XV-SA-05 The QR code can't be read: ….
XV-SA-06 The QR code is … characters long; ZATCA's standard allows up to 700.
XV-SA-07 The QR code lacks tag …: it must carry tags 1 to 8….

All rules of this set →