How can I display active directory attribute msDS-GroupMSAMembership value on UI its syntax is NT Security Descriptor type ?

I have set the value -PrincipalsAllowedToRetrieveManagedPassword which indirectly updates the attribute 'msDS-GroupMSAMembership' on Active Directory and its Syntax is "NT Security Descriptor",

Now I want to retrieve the valid value through java code which I had set during creation of it(May be Distinguish name or any other name).

Any help would be most welcome !!!!