I thought there was an error in it, but that wasn't true...
wget -q -O - http://www.iwik.org/ipcountry/CN.cidr | egrep '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/[0-9]+' | aggregate 2>/dev/null | sed 's/.*/deny &;/' > /etc/nginx/conf.d/CN.conf
head /etc/nginx/conf.d/CN.conf
deny 1.0.1.0/24;
deny...