/var/lib/icinga2/api/zones/ is in icinga2-common 2.1.1-1.
This file is owned by root:root, with mode 0o755.