XV-SA-16

The certificate signature in the QR code (tag 9) is not that of the certificate in the signature.

error: the document is invalid

What the rule checks

As the rule set's publisher wrote it. The rule runs on every element the context matches, and fails where the test is false; the validator reports the line of that element.

ZATCA cryptographic stamp and QR code checks Security Features Implementation Standards 1.1, SDK 3.4.6

Context

/*/cac:AdditionalDocumentReference[cbc:ID = 'QR']

Test

not($readable and $certificate) or $fields[10] = '' or $fields[10] = js:xvCertificatePart($certificate, 'signature')

Checked with Saudi Arabia ZATCA Tax Invoice (UBL), Saudi Arabia ZATCA Simplified Tax Invoice (UBL)

Check your document

Choose the schema in the validator: it checks the structure first, then every business rule, and points at the line of each failure. It runs in your browser; nothing is uploaded.

Validate a document

Related rules

XV-SA-13 The invoice hash in the QR code (tag 6, …) is not the hash of the invoice (…).
XV-SA-14 The signature in the QR code (tag 7) is not the invoice's ds:SignatureValue.
XV-SA-15 The public key in the QR code (tag 8) is not that of the certificate in the signature.

All rules of this set →