After reading a few stories like this “Apple Leaves CNNIC Root in iOS, OSX Certificate Trust Lists” that didnt include instructions on how to remove them yourself I wrote a quick and ugly bash script that automatically removes the CNNIC and the China Internet Network Information Center EV Certificates Root certificates from OSX.
Use it at your own risk. I am a terrible script writer and this may install Windows 98.
(Inserting code snippets on to my blog is ridiculously complex. I have to fix that.)