Struct RootPathReferences 

pub struct RootPathReferences<'prepared, 'path, 'document, N, D, G> { /* private fields */ }

Root certificate rules of Annex A.1.1(1–2), bound to the actual selected path. Optional TSA/status-authority references, exclusive credential CAs, incorporated presence and authentication/status remain separate checks.

Implementations

impl<'p, 'v, 'd, N: Copy, D: Copy, G: Copy> RootPathReferences<'p, 'v, 'd, N, D, G>

pub fn prepared(&self) -> &'p Preparation<N, D, G>

Same original root preparation, without replaying signature verification.

pub fn path(&self) -> &'v CheckedPath<'d>

Actual checked path associated with the selected root key/certificate.

pub fn rows(&self) -> &[RootReferenceRow<N>]

Every original ordinary certificate reference, including unsupported ones.

pub fn comparisons(&self, row: usize) -> Option<&[Agreement]>

Each row compares the anchor (if certificate-backed), then every member in issuer-to-target order. The target is the forbidden signing certificate.

pub fn candidate( &self, index: usize, ) -> Option<(PathCertificate, &'v Certificate<'d>)>

Original candidate role and bytes without scanning or reparsing them.

pub fn root_path_rules_met(&self) -> bool

Only A.1.1(1–2): every existing anchor/CA certificate was referenced and every entry excludes the signing certificate. This is NOT all Annex A rules, presence, status, application trust or a baseline grade.