They can be radically different.
For example, I worked with a card processing company a few years back, their RTO was minutes. Literally, every minute they were down they were losing money because they couldn't process transactions. Their RPO however was 48 hours. They could lose up to 2 days of data without concern because they got summaries from the banks every 24 hours containing the previous 2 days of data, which they could use to recreate any lost transactions in their systems.
Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability