The official tests (512 byte packet, 25 firewall filter rules) for routing, which is the commonly used reference for "real world" speed, say 498.1 Mbps.
Your configuration has NO firewall (which is - generally speaking - NOT a very good idea for security[1]) but that include rules that allow using - when/where possible - fasttrack which might speed up the connection noticeably.
In any case the hAP ax S is underdimensioned for routing a 1 Gb line.
A (say) Ax2 has 912.9 Mbps, the Ax3 has 1145.2 Mbps in the corresponding test results and are more adequate.
Only as a side note, you should check the scope/target-scope of your routes, according to:
Simple recursive failover for bears of little brain
[1] do check Rule #8:
The twelve Rules of Mikrotik Club