API: fix escaping in zone ids

Realized that we should have been taking the character code as hex,
so it actually fits into two digits.