I know user nrfutil settings generate to get the bootloader settings:
e.g. IN SDK14.0/IC:nrf52832, I user the following command generate the bootload settings file:
nrfutil settings generate --family NRF52 --application ble_app_blinky_pca10040_s132.hex --application-version 3 --bootloader-version 2 --bl-settings-version 1 blink_bootloader_settings.hex
I get the blink_bootloader_settings.hex file .

now I am wondering how does this value["start address"] come from?