Suppose Bob has $N$ RSA public keys $e_i$ without any knowledge of their corresponding private keys. Alice has a private key for only one of them, say, $d_q$. Is it possible for her to prove to Bob that she has the private key, without revealing $q$?