AES Is it safe to expose the plaintext and cyphertext in the same place,
Use a message authentication code if you want to ensure that the id is not modified by the client. Use SSL between the server and the client if you want to prevent replay etc network layer attacks from eavesdroppers. 

But a malicious client can still reuse previously received ID. If this is a concern, you need to do more (e.g. use and keep a nonce for verification).