Issuer
Subject
Extensions
AS Owner Certificate
Router Certificate
AS Certificate
* the subject name could be fully-qualified DNS name
Root Certificate
all ASes
Registry Certificate