All ports are open to the internet, which also shows because the APs works for weeks or months before they have this issue.
I let them just be since yesterday and now they are green again and says they are connected.
Even if the internet was down (it wasn't) they should't go into "Waiting to be onboarded.." state, right? They are already onboarded.