tests/NetworkSecurityConfigTest/res/xml/resource_anchors_der.xml

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
  <base-config>
    <trust-anchors>
    </trust-anchors>
  </base-config>
  <domain-config>
    <domain>android.com</domain>
    <trust-anchors>
      <certificates src="@raw/ca_certs_der" />
    </trust-anchors>
  </domain-config>
</network-security-config>